Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6422ec6c-b5b5-4aee-aaa0-d9e794cb5a2b.cer
File:                     6422ec6c-b5b5-4aee-aaa0-d9e794cb5a2b.cer (raw, json)
Hash identifier:          UN3c9F8aNtm99NJKxhBbSspY1Nx1c/FQer9f/o7Bf5E=
Subject key identifier:   8B:14:0D:44:A4:01:79:C7:13:D6:07:82:39:7C:9E:52:40:B1:93:16
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328584471BE51491112987621FD3780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6422ec6c-b5b5-4aee-aaa0-d9e794cb5a2b/6422ec6c-b5b5-4aee-aaa0-d9e794cb5a2b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6422ec6c-b5b5-4aee-aaa0-d9e794cb5a2b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 04 Jan 2024 18:48:57 +0000
Certificate not after:    Wed 08 Apr 2026 17:48:57 +0000
Subordinate resources:    AS: 14411

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:71:be:51:49:11:12:98:76:21:fd:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Jan  4 18:48:57 2024 GMT
            Not After : Apr  8 17:48:57 2026 GMT
        Subject: CN=6422ec6c-b5b5-4aee-aaa0-d9e794cb5a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:01:f3:05:34:f7:17:26:43:93:37:3f:36:
                    57:3d:73:17:4f:5d:38:2d:9b:77:48:da:c8:6d:70:
                    e1:3c:37:c9:a6:1f:f7:7b:32:12:88:1d:4f:44:93:
                    b0:b1:ca:20:0c:3b:d8:f0:6f:d7:6e:ea:16:9c:48:
                    51:95:23:d5:aa:ce:55:6f:30:0e:19:84:bf:ab:af:
                    6b:fc:cb:69:ae:4f:03:73:cd:ef:f2:24:cd:d5:30:
                    ba:00:c3:16:3a:b2:3f:a7:d0:13:e6:4b:23:3c:b7:
                    10:4c:45:cf:d8:c1:54:f0:71:94:df:73:fe:fd:b3:
                    93:e5:d8:05:89:6c:9a:4a:01:b6:6b:ae:35:c9:88:
                    0b:ab:e3:9f:1b:44:b6:a9:df:bf:eb:96:8d:6e:3f:
                    4f:d6:af:f2:94:41:f8:2d:d0:99:b2:7d:19:d4:6e:
                    df:e0:06:c0:aa:4a:29:9a:3e:93:46:bc:6f:4d:d3:
                    d5:88:93:c6:5e:df:42:dc:35:f3:e9:87:e6:51:7c:
                    04:3a:18:56:eb:a6:cf:11:ca:9e:8c:ff:a3:75:a3:
                    78:76:24:b5:4d:64:99:28:de:6a:57:e0:29:f6:b7:
                    12:fc:cf:34:a1:73:e7:33:46:8b:57:2f:59:94:fe:
                    fe:71:f0:07:f5:70:be:5b:74:20:5c:57:72:e1:e7:
                    fc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:14:0D:44:A4:01:79:C7:13:D6:07:82:39:7C:9E:52:40:B1:93:16
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6422ec6c-b5b5-4aee-aaa0-d9e794cb5a2b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6422ec6c-b5b5-4aee-aaa0-d9e794cb5a2b/6422ec6c-b5b5-4aee-aaa0-d9e794cb5a2b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14411

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:d1:09:38:73:43:a1:80:06:5c:94:ad:97:13:35:86:88:e4:
         dd:c1:e5:da:eb:37:b8:fa:3b:da:ae:74:6d:b2:a9:10:d1:cc:
         69:92:c2:4d:70:57:05:27:6d:66:8e:b1:38:8c:2b:1f:37:36:
         40:53:88:9f:55:d3:aa:88:26:19:96:be:5a:96:05:c4:fb:67:
         77:65:b1:fb:32:8e:06:2f:8b:a1:05:7c:10:98:7a:96:a8:41:
         33:cf:00:f1:89:60:49:d1:59:d9:41:af:69:ce:d0:d3:2a:1b:
         ea:11:29:69:d1:65:cf:95:47:d6:0e:28:86:33:ee:55:88:78:
         03:b2:07:88:36:59:c6:db:37:a8:01:6e:20:52:8e:41:2e:f3:
         8b:5a:73:f6:ea:b4:5d:4b:3d:3a:4c:86:49:e6:ff:6d:83:67:
         b9:66:37:c4:3a:8a:7d:64:e9:39:2c:69:a5:61:51:a1:ba:9e:
         43:45:e6:52:21:8b:2a:7b:03:9a:37:15:0c:fc:35:81:21:16:
         78:ce:81:b3:36:40:46:93:f8:8c:b5:58:32:c7:fc:0f:01:86:
         99:0b:e0:c9:5a:d2:44:4f:a4:48:16:13:03:bb:1e:42:51:9e:
         3b:5c:f1:74:b2:81:61:0b:58:ca:2c:db:d3:ab:55:1b:65:95:
         24:c1:3e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:03:58 2024 by rpki-client on console-fra.rpki-client.org