Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer
File:                     89dfa952-929a-4c50-a372-96882b2b33e2.cer (raw, json)
Hash identifier:          h/ECOUY9YbjidZJXA/yx6kiuwFQYrVC14a8pr6EAToE=
Subject key identifier:   39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858455980A96B762ED18832FFC780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 27 Mar 2024 19:12:15 +0000
Certificate not after:    Wed 21 Jan 2026 01:45:15 +0000
Subordinate resources:    AS: 54997
                          AS: 397501
                          AS: 397511
                          IP: 2607:ac80::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:59:80:a9:6b:76:2e:d1:88:32:ff:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Mar 27 19:12:15 2024 GMT
            Not After : Jan 21 01:45:15 2026 GMT
        Subject: CN=89dfa952-929a-4c50-a372-96882b2b33e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:90:a9:5e:04:64:92:00:57:7b:14:d0:10:6f:
                    f8:f8:32:1a:9d:c6:73:6d:6c:f8:d0:d9:e2:00:f4:
                    0b:c6:a3:f0:21:3d:b4:2d:e2:e3:73:4a:d6:98:54:
                    5d:12:99:95:29:5c:82:7e:8a:ed:7b:ae:e3:c3:ff:
                    03:88:c8:4d:78:9a:6b:0b:cb:1b:bb:50:d4:10:fc:
                    4b:90:5d:e5:9d:9f:cd:ca:6b:c7:b1:1e:22:c7:8d:
                    a1:37:dc:15:a0:3a:67:a3:47:43:3b:a6:f2:d1:5a:
                    a1:4a:dd:fb:ae:6d:4c:00:bc:42:da:70:e6:de:0e:
                    45:a0:aa:70:1f:87:79:4c:6e:d1:a5:f8:be:ff:d1:
                    a0:a1:07:45:be:6a:f9:81:28:7b:f5:6c:d7:3a:30:
                    1b:b5:06:fe:34:c3:18:86:77:fe:ea:5d:c2:c6:55:
                    c3:71:78:d1:f3:e8:d4:7a:8e:83:de:2e:54:c7:a4:
                    e2:9d:22:21:34:71:ad:93:dd:10:1a:e7:34:03:58:
                    d1:6d:9c:68:4f:db:7e:49:a8:20:6f:9d:93:07:6c:
                    5d:63:34:f8:62:ab:05:3c:fe:e9:ef:cf:d9:d6:ee:
                    c9:e5:de:58:1f:5a:6b:ef:58:d4:19:5f:46:3b:2b:
                    63:51:bb:17:34:b9:43:d3:cd:26:c3:23:74:ad:b8:
                    41:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ac80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54997
                  397501
                  397511

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:83:39:fe:d9:03:dd:0c:01:aa:f3:f8:8e:97:b1:8a:5c:cf:
         1c:0c:7f:57:68:31:b8:f2:db:7c:f5:01:87:d6:6d:a7:42:b9:
         9c:0e:d4:e1:59:5e:30:7e:cb:e8:eb:e7:e2:92:f1:ee:bf:b1:
         bd:0b:b2:ee:08:c3:5b:c2:86:4f:8a:24:68:85:45:09:ac:06:
         f8:28:66:33:61:5f:bf:1b:f9:bc:f8:d1:72:e2:3a:b5:df:36:
         3c:f6:5a:0d:84:9e:12:b2:49:ba:3c:4c:64:b5:37:ff:93:8b:
         0c:5a:12:b7:dc:f5:90:0b:e5:91:d3:2e:a2:57:63:4e:a8:44:
         2e:1b:8e:c6:37:e0:65:b6:aa:b8:e3:0e:7a:c0:c7:f7:ff:17:
         90:84:f1:44:f6:30:24:f8:f7:6b:dc:d6:f2:49:1a:9c:35:3e:
         e6:c7:df:35:51:e8:7a:72:6a:8d:66:9b:ba:f5:9d:72:d8:13:
         5a:ea:8c:4d:9f:c5:20:4b:17:eb:0a:9f:ad:46:e3:a2:60:74:
         24:f5:3d:5b:3c:e4:cc:34:1d:46:1a:e0:81:fc:86:6c:19:b4:
         45:55:9f:62:82:2c:d4:b4:5b:d8:56:1b:d1:50:2b:14:0e:98:
         78:19:4f:da:f5:e2:f3:88:ba:ec:bd:a2:f3:07:fe:55:d8:9f:
         a7:c7:33:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----