Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e.cer
File:                     794b722c-8055-4835-a39e-50fadbb9af0e.cer (raw, json)
Hash identifier:          LG8JEheSDO7Vp0aMiJQ2f8/JsLN2IQNPSPdUvqNSP/Y=
Subject key identifier:   27:29:30:12:21:72:38:E7:76:06:4E:7C:84:99:CE:3D:4F:49:5F:B9
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858469867F6AA5CA0F1E3F3C4B180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/794b722c-8055-4835-a39e-50fadbb9af0e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 20 Jul 2024 00:45:21 +0000
Certificate not after:    Fri 23 Oct 2026 00:45:21 +0000
Subordinate resources:    AS: 400075
                          IP: 23.140.232.0/24
                          IP: 2606:df40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:98:67:f6:aa:5c:a0:f1:e3:f3:c4:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Jul 20 00:45:21 2024 GMT
            Not After : Oct 23 00:45:21 2026 GMT
        Subject: CN=794b722c-8055-4835-a39e-50fadbb9af0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:19:fd:48:cf:a2:1e:e8:11:26:1a:2d:c9:4b:
                    ed:72:51:d5:94:fb:5e:59:9e:2f:f5:14:84:73:df:
                    77:8c:10:d6:40:39:f9:ef:d5:89:53:4f:39:50:ba:
                    52:0a:ad:90:fd:a4:30:48:c6:78:75:a7:d1:3c:02:
                    47:2e:67:3a:62:f8:3e:c7:e3:fe:bb:ee:f3:aa:2d:
                    4a:58:62:a0:51:8c:47:0a:ca:4c:46:50:f8:ed:91:
                    aa:e4:09:f6:26:dd:0b:7b:28:9a:79:f8:33:9e:35:
                    75:63:ad:d0:13:f3:9a:1d:c5:2a:1a:68:58:73:37:
                    a8:1f:fd:15:5d:2c:51:e4:af:55:1a:3b:10:99:9b:
                    fd:c8:04:53:ab:c2:7c:aa:ed:59:b4:a3:22:88:cf:
                    c4:b0:28:0f:01:69:74:8d:04:52:c6:58:d9:9b:7b:
                    fb:f6:39:85:e1:18:d1:74:c5:f0:2c:71:6f:d4:a6:
                    0d:b2:99:eb:5b:2a:3d:84:c2:73:72:3c:b0:56:12:
                    6d:f8:5b:da:cb:cc:83:4d:4b:b3:d7:53:fd:bd:50:
                    7a:12:7e:8c:b3:37:1f:c2:b1:d9:da:a0:8d:8c:1d:
                    33:64:ad:9e:b9:6e:c4:95:a9:42:47:9d:e4:dc:eb:
                    c5:a2:69:d6:69:e5:0e:07:44:b4:a7:8d:8b:b1:d3:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:29:30:12:21:72:38:E7:76:06:4E:7C:84:99:CE:3D:4F:49:5F:B9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/794b722c-8055-4835-a39e-50fadbb9af0e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.232.0/24
                IPv6:
                  2606:df40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400075

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:70:02:f1:4e:4c:1b:0f:3a:9d:aa:53:3f:59:5b:61:1c:95:
         6c:16:9f:60:64:1c:fc:89:ed:d0:eb:ff:68:b4:c2:4a:88:ba:
         8f:51:27:2b:40:03:f6:20:b5:08:5b:7e:7d:12:58:af:e6:8f:
         c6:46:a8:e9:ea:19:b7:ea:26:30:e6:7f:cc:89:dd:6e:e6:02:
         b7:ee:62:2c:e5:51:bb:23:59:75:99:da:b7:76:d5:1c:a4:d9:
         68:6b:36:c8:7f:e5:e6:85:c4:97:5c:91:d2:d2:cf:ea:7d:38:
         5a:4f:70:55:41:68:c2:d0:ea:5b:b2:10:c9:51:f6:bd:13:30:
         b0:ee:66:af:86:ca:49:ed:09:1d:71:84:c1:a7:f3:ec:70:1a:
         94:28:27:65:b6:b0:b6:13:53:d8:5d:c6:44:02:0b:c7:9a:a6:
         5d:38:b2:a9:0e:5d:94:5d:fb:fe:8e:99:47:96:ee:ee:82:8f:
         3e:7e:77:0c:09:e8:90:0e:d6:54:1b:c1:44:bb:4a:45:1a:ac:
         7c:13:c0:b3:5c:4e:fb:7d:03:72:c0:81:b8:37:36:e8:20:5f:
         ff:6a:0d:7d:07:8d:18:09:fb:6e:7e:fb:57:60:54:2f:36:7a:
         fa:4d:92:62:c0:7a:0e:e0:f2:d9:be:8e:b0:96:0f:42:46:32:
         91:fb:cd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----