Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/67fc827a-8660-4422-833a-60b893d765fa.cer
File:                     67fc827a-8660-4422-833a-60b893d765fa.cer (raw, json)
Hash identifier:          X0dfw7Kl8tX3qQPL5qetpk8ioItDdg/9psvjbNoevb8=
Subject key identifier:   BC:8B:F2:27:0A:59:FB:DE:A7:BB:C0:BD:61:49:67:37:0E:43:02:DE
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285845331066DCF250A58C63F10200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/67fc827a-8660-4422-833a-60b893d765fa/67fc827a-8660-4422-833a-60b893d765fa.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/67fc827a-8660-4422-833a-60b893d765fa/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 14 Mar 2024 00:45:21 +0000
Certificate not after:    Wed 17 Jun 2026 00:45:21 +0000
Subordinate resources:    AS: 26823
                          IP: 192.55.231.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:10:66:dc:f2:50:a5:8c:63:f1:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Mar 14 00:45:21 2024 GMT
            Not After : Jun 17 00:45:21 2026 GMT
        Subject: CN=67fc827a-8660-4422-833a-60b893d765fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:3c:35:d4:18:07:00:3f:a9:3c:2e:ee:bb:
                    d3:f5:a6:63:72:31:59:ed:0a:e5:80:21:f3:7a:df:
                    5d:ec:6e:ac:42:10:38:6c:65:aa:f0:40:ba:e2:db:
                    77:75:a8:69:db:95:2d:99:22:cc:7e:37:f9:34:3c:
                    b7:a9:b3:3a:64:11:d3:ad:bc:36:5d:da:39:70:7d:
                    9c:6c:d6:ff:17:b3:26:06:41:3a:d2:fd:bf:79:20:
                    48:40:0e:9b:2d:a9:86:92:24:cc:5c:56:e7:97:c4:
                    ab:33:df:de:1d:08:85:9e:fc:05:41:c5:87:2e:3a:
                    52:1c:aa:67:21:9f:ff:0c:d7:d0:d0:f2:c2:1e:14:
                    34:c7:fd:77:0f:72:43:0b:4c:14:51:fd:64:d5:55:
                    74:e3:48:2e:fe:e9:bc:98:06:c0:d5:73:ad:b3:e3:
                    d5:52:ba:9b:cf:6a:aa:09:9c:82:2f:df:18:22:13:
                    4c:74:54:99:77:76:25:f7:f2:01:1c:1e:df:42:ff:
                    83:53:8e:13:5a:88:6c:4e:5a:3c:e4:8b:6f:86:35:
                    1e:11:be:c0:0f:29:c2:2f:df:26:0b:41:e4:b5:c0:
                    48:8d:75:8f:aa:c8:a5:fc:46:b2:04:bc:98:d8:5c:
                    99:00:f2:82:46:6b:6f:07:80:d6:b2:f4:11:7f:a8:
                    2b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8B:F2:27:0A:59:FB:DE:A7:BB:C0:BD:61:49:67:37:0E:43:02:DE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/67fc827a-8660-4422-833a-60b893d765fa/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/67fc827a-8660-4422-833a-60b893d765fa/67fc827a-8660-4422-833a-60b893d765fa.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.231.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26823

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:4e:99:39:85:45:00:b1:ba:1a:82:b2:fc:a5:44:59:e2:80:
         65:6d:1f:24:a9:b3:f1:88:bc:ad:b8:2e:61:4a:d7:72:c4:fe:
         53:03:31:09:be:57:72:a5:c0:13:93:ff:24:ee:f5:6f:92:ed:
         83:91:ec:bb:a1:8a:20:4b:42:be:5f:a1:86:c8:8f:dd:71:92:
         28:cd:15:f0:cc:af:6e:22:e9:f7:51:4b:b9:2e:8e:8a:97:c1:
         42:a1:cd:d3:73:9a:14:b5:e0:bb:82:c4:dd:62:19:5f:2c:ea:
         ad:aa:fc:43:ff:01:d0:e1:6a:50:bc:50:f1:bc:0b:2c:96:17:
         8d:c5:23:6b:aa:bb:e7:49:30:a5:93:8b:6a:87:48:19:ab:a8:
         88:57:40:94:c0:93:46:0d:dd:d8:a6:d9:cb:ed:fe:24:68:9c:
         5b:ba:83:6c:2a:af:66:07:0e:a5:90:df:ac:d2:df:0c:bd:85:
         0c:6f:a0:b4:e0:69:c3:2b:5b:02:10:88:1e:f8:c1:ff:c7:5a:
         82:47:27:6b:fa:29:c8:eb:3b:4e:ff:18:c0:e8:0f:47:8e:c5:
         51:b2:b4:55:e0:1d:fd:35:d3:ef:09:49:32:9f:c0:05:4a:54:
         36:f3:ad:41:a9:27:0d:8a:7e:57:f9:2e:66:1c:92:ed:84:55:
         ea:be:ae:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----