Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer
File:                     6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer (raw, json)
Hash identifier:          jyelNmdPEd8mQNPQCdzwGgEXyNsdUDNG7dyfQo5K7Ro=
Subject key identifier:   A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858454EFB3B61CB4045FEC57AA7C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 24 Mar 2024 00:45:19 +0000
Certificate not after:    Sat 27 Jun 2026 00:45:19 +0000
Subordinate resources:    AS: 54138
                          IP: 199.33.68.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4e:fb:3b:61:cb:40:45:fe:c5:7a:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Mar 24 00:45:19 2024 GMT
            Not After : Jun 27 00:45:19 2026 GMT
        Subject: CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:dc:f8:a9:4d:d6:1a:93:1a:e0:dd:d7:87:
                    ca:a8:37:74:18:16:4b:51:38:af:32:e4:5d:db:34:
                    fb:5b:d2:21:9f:18:36:cb:50:a9:2b:b1:f9:5d:b2:
                    f0:b5:8e:af:7e:ee:78:cd:6b:38:6d:a1:1e:b7:57:
                    3d:c3:cc:90:42:db:af:bf:32:6a:cf:c3:b6:b4:50:
                    03:9c:2a:72:a2:9d:87:cd:34:c4:61:29:ed:52:06:
                    61:92:ad:ff:99:42:03:e2:69:19:98:b4:1f:b5:e7:
                    51:49:02:9f:e8:46:dd:d8:e9:fb:9b:66:06:27:e4:
                    e8:bf:76:01:91:4a:2f:ad:70:37:df:4d:6a:d6:3e:
                    15:23:54:bc:0f:21:17:9e:5e:b5:68:45:24:f9:b0:
                    0a:f9:c5:e4:ec:26:b6:37:7d:df:aa:ad:f7:aa:76:
                    48:b6:8f:1b:7e:26:fb:d9:67:dc:89:92:b4:d4:99:
                    c8:29:7f:de:98:c0:89:32:7f:a9:2b:18:77:37:56:
                    1d:b8:df:9d:49:d0:94:5d:5e:1d:34:b4:1b:0a:37:
                    90:94:b4:8b:94:54:07:dc:ef:7e:59:4b:aa:bc:31:
                    21:30:b8:7e:38:b1:8f:cd:37:26:95:6b:f1:19:55:
                    78:6e:e6:6e:64:8f:66:95:b3:f2:01:25:a1:46:c5:
                    a2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.68.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54138

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f1:c6:30:53:99:5d:d1:06:0d:82:85:60:dd:57:18:34:4f:
         5c:6b:49:73:90:0e:59:dd:33:f4:36:19:b5:36:0e:31:12:56:
         94:75:4b:05:7c:39:b2:c8:50:96:a6:58:85:1c:d6:a4:2f:27:
         2d:6c:8f:bb:01:18:e8:00:0e:89:c2:14:9c:cd:95:fd:6f:3e:
         8b:79:51:02:de:5e:75:2b:38:5f:8f:3e:08:70:51:33:09:68:
         03:be:0d:10:05:ec:90:a3:70:39:fc:51:e3:5d:6e:fa:f7:28:
         74:c4:06:d9:28:3c:9a:de:90:31:a1:f1:07:32:27:6a:58:40:
         8c:e3:1c:55:88:e4:70:1b:77:99:4d:89:b2:38:d0:fe:2d:9d:
         9c:6c:81:58:11:58:91:75:72:e4:79:7a:df:93:20:59:d8:2c:
         ab:3b:76:04:b0:03:16:3d:c6:eb:30:eb:0d:61:26:a6:2e:90:
         3d:74:7d:f0:5b:ed:f6:16:a8:ce:59:db:81:78:ed:59:15:31:
         43:02:33:51:9d:79:77:80:c4:db:e5:f6:79:06:66:78:cd:56:
         3f:57:44:7b:de:d7:13:78:0e:2c:59:7c:a8:3c:e2:35:de:ea:
         a4:8a:d6:fb:98:49:36:14:a6:d6:c5:eb:f8:cc:f8:b9:5e:83:
         ef:82:b2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----