Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29.cer
File:                     9da5489c-943d-495a-995a-ee1d16049d29.cer (raw, json)
Hash identifier:          TvpafBjtI85iuidnN97PH4xhw1LisPf8cz0xdwjsMuo=
Subject key identifier:   68:7B:4F:F2:2B:2F:2C:0D:D0:D6:C9:89:FF:00:5C:A1:A5:50:B9:5B
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858451F2DB77F75C51601517355C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/9da5489c-943d-495a-995a-ee1d16049d29.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 06 Mar 2024 21:48:15 +0000
Certificate not after:    Sun 20 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 18956
                          IP: 204.75.188.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:2d:b7:7f:75:c5:16:01:51:73:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Mar  6 21:48:15 2024 GMT
            Not After : Jul 20 19:06:39 2025 GMT
        Subject: CN=9da5489c-943d-495a-995a-ee1d16049d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:03:33:5c:e5:40:85:ef:44:90:b6:2e:d4:8e:
                    5b:6d:15:fd:8c:7d:21:43:2a:e1:11:b2:46:3e:9d:
                    58:0f:3b:8c:8d:04:4e:9c:a9:f2:c6:5a:68:31:9a:
                    dd:f2:f3:4d:1a:4a:d4:e2:1d:ce:66:ab:59:a8:de:
                    7c:be:d5:f9:02:e6:0d:e6:69:76:99:e6:64:d2:9a:
                    9e:4d:a9:6f:b2:ba:23:60:fa:18:07:8b:07:26:57:
                    3c:c6:3c:d3:00:11:4d:a9:05:e6:76:80:1d:cd:89:
                    ca:97:9e:98:eb:bf:d3:bc:aa:ae:8f:2d:d4:9d:0e:
                    39:5d:51:74:c9:43:c9:40:b5:4d:fb:e8:4f:94:02:
                    d5:e7:83:74:a5:fe:70:42:cc:1d:9d:9c:63:be:b4:
                    a5:69:68:0b:27:55:68:5a:d1:42:e6:51:c9:28:5c:
                    74:9e:7c:81:e6:50:7d:e9:04:07:e5:13:75:8b:3e:
                    bf:7d:d9:8f:cd:08:b7:83:03:ba:e9:d4:99:97:85:
                    91:ac:a3:3b:be:4f:c8:73:04:ed:75:0f:66:51:db:
                    32:04:cc:76:f7:ac:48:bc:6a:f5:d1:53:0b:89:76:
                    61:8a:e2:a6:db:0a:11:14:ac:94:c9:b4:40:d2:ca:
                    85:88:7e:37:ef:33:07:c1:11:7d:ca:53:2a:b1:75:
                    7f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7B:4F:F2:2B:2F:2C:0D:D0:D6:C9:89:FF:00:5C:A1:A5:50:B9:5B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/9da5489c-943d-495a-995a-ee1d16049d29.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.75.188.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18956

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:16:87:88:55:fc:b2:24:57:19:19:50:8f:e6:51:d0:9a:7a:
         4e:d8:67:50:72:bd:65:74:eb:54:bf:b0:f0:8f:8f:e3:55:67:
         5d:50:74:ea:39:a3:16:bc:ec:b0:a1:87:98:b0:d1:54:28:11:
         5a:43:42:43:4a:19:7d:4f:b7:57:90:00:02:1f:61:1a:dd:f0:
         5d:47:09:9f:17:8e:1e:26:2d:4a:b8:46:94:5a:aa:40:bb:95:
         08:48:12:ba:78:76:5e:a1:8d:f0:f5:20:cd:91:12:e8:6d:66:
         c6:6f:07:42:fd:4c:49:91:bd:fa:59:73:c6:71:27:26:5d:7a:
         74:40:47:04:32:c3:7a:61:ef:5d:33:8b:04:25:f4:bf:31:c0:
         24:ab:bc:c0:f6:59:05:6a:a3:ec:3f:89:51:8b:42:8e:bf:5a:
         ed:81:54:54:32:f8:b2:75:fe:9a:09:bd:50:0c:53:11:1d:af:
         49:04:a1:a0:0e:c6:a5:3c:98:30:85:04:b6:e2:a2:db:a7:f5:
         7b:ed:9a:b2:73:f2:37:06:3e:73:a0:5a:a3:c0:6c:f0:3c:92:
         9c:de:82:38:2a:76:59:ef:b8:9f:b5:6a:e3:5c:c5:8c:68:6c:
         f3:f3:15:55:23:3a:42:f6:b6:90:ef:c4:04:84:e5:54:d2:fc:
         70:af:32:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----