Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c.cer
File:                     ff44f78c-6d70-421c-a422-92b3c44d921c.cer (raw, json)
Hash identifier:          hWJUFC48Xi9gHybXNmtQzizXDSoM0hCp4VMXzsihxGI=
Subject key identifier:   43:C5:A6:43:C3:B1:B3:7A:3F:E6:C8:A5:19:C2:52:4A:81:B1:A3:2D
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858462FF970AACAECDCC3650A84E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/ff44f78c-6d70-421c-a422-92b3c44d921c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 12 Jun 2024 14:58:36 +0000
Certificate not after:    Tue 15 Sep 2026 14:58:36 +0000
Subordinate resources:    AS: 395967
                          IP: 170.76.237.0/24
                          IP: 2607:b9c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2f:f9:70:aa:ca:ec:dc:c3:65:0a:84:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Jun 12 14:58:36 2024 GMT
            Not After : Sep 15 14:58:36 2026 GMT
        Subject: CN=ff44f78c-6d70-421c-a422-92b3c44d921c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:eb:11:05:b5:39:2c:e4:16:13:94:c4:2a:ad:
                    d6:13:1f:65:a4:27:c0:bb:74:23:6c:04:0c:36:a0:
                    6c:6d:6d:03:6a:f9:d6:36:0f:3c:d7:84:da:a0:86:
                    b8:87:45:ff:1f:c8:c2:95:bc:f0:94:3c:5f:33:4b:
                    72:26:68:24:fb:73:63:75:10:cb:01:f5:2f:bd:55:
                    95:bc:f2:76:bd:a7:fa:6f:45:51:f9:c0:85:6d:1c:
                    a4:0d:7c:47:9a:45:6e:68:5c:0e:cd:b8:59:67:f9:
                    a5:1d:bd:f5:de:e2:70:6d:68:91:5b:a5:cf:33:c4:
                    98:32:2a:be:13:a2:91:1f:82:a2:2b:4c:02:3e:2c:
                    04:c4:c3:e8:4e:ab:99:50:30:9e:b8:9a:1c:2d:98:
                    d2:75:27:3f:12:ae:6f:8b:7c:fc:36:2c:a5:49:aa:
                    4d:2f:79:ef:c9:18:84:96:25:2b:d2:62:5f:c5:79:
                    1d:01:88:52:18:4b:2f:e1:e3:af:94:7f:eb:55:4c:
                    ea:96:d4:a2:d6:cf:16:11:e0:78:30:4d:f6:c5:fb:
                    bf:64:20:c9:93:70:3c:b4:1d:51:3c:27:d3:cb:26:
                    13:b7:e4:5c:2e:39:e7:b7:d7:41:bf:59:ba:b9:c6:
                    a3:3b:a3:6a:75:ff:24:12:0e:e8:31:94:28:95:b0:
                    df:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C5:A6:43:C3:B1:B3:7A:3F:E6:C8:A5:19:C2:52:4A:81:B1:A3:2D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/ff44f78c-6d70-421c-a422-92b3c44d921c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.76.237.0/24
                IPv6:
                  2607:b9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395967

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:36:33:31:fb:9c:6b:0d:99:62:cc:8e:6b:c4:d2:99:37:a9:
         57:76:95:b8:38:d3:1f:8e:66:fa:83:8a:9d:de:b8:6f:13:8e:
         65:0d:7d:15:4f:ac:02:58:78:a3:8d:0a:14:24:48:13:ba:95:
         d6:90:0b:cd:d5:94:03:a8:6c:8d:68:ad:c7:5e:df:d6:45:df:
         ea:cc:82:de:65:4a:89:a9:36:d8:11:23:9a:c7:0c:74:f9:e8:
         bf:2d:dd:31:45:5c:39:d1:78:f2:f8:04:bc:9d:27:8d:40:31:
         f3:96:b3:0a:4d:70:81:69:9b:8f:39:79:ca:55:68:54:26:23:
         c9:a4:7f:a6:8a:91:66:cf:b8:77:79:1f:c9:26:e5:15:1f:f8:
         cb:99:44:c4:37:76:7e:d7:65:f7:83:0f:db:09:e3:cf:be:47:
         5d:bb:3d:39:81:8d:a9:ce:24:0b:4e:59:0d:f8:6a:41:5e:be:
         ca:3c:aa:55:b4:ee:54:28:8e:c6:2f:77:ac:bc:6a:df:ea:39:
         07:f8:7a:62:fa:66:36:d2:03:35:b9:fd:07:1b:1c:6f:3a:02:
         a5:11:0c:d6:11:7f:2d:1e:62:54:00:e5:87:37:30:a5:18:14:
         6d:07:d2:77:6a:d2:18:b9:91:46:91:41:af:56:83:00:0b:0e:
         88:f3:74:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----