Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer
File:                     01430e13-506f-444b-8727-f36154b32c07.cer (raw, json)
Hash identifier:          tNBfP45hiCRJlRJHQ9w/Morz5jl8JJcA/RucGRNGPSw=
Subject key identifier:   49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584750A92808116EE6FCDD0B5C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 24 Sep 2024 00:45:27 +0000
Certificate not after:    Mon 28 Dec 2026 01:45:27 +0000
Subordinate resources:    AS: 23129
                          AS: 46256
                          AS: 46441
                          AS: 46648
                          IP: 198.217.64.0 -- 198.217.113.255

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:a9:28:08:11:6e:e6:fc:dd:0b:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Sep 24 00:45:27 2024 GMT
            Not After : Dec 28 01:45:27 2026 GMT
        Subject: CN=01430e13-506f-444b-8727-f36154b32c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9c:ac:a6:50:ed:4a:0f:1e:0a:27:ed:c8:a6:
                    5d:ea:79:a8:e3:b9:53:c3:3d:d7:40:82:b8:45:4b:
                    d3:c8:a1:14:85:37:66:ab:e8:ca:1d:61:5b:b6:83:
                    b1:b1:d0:88:86:07:24:fd:9d:81:04:24:41:94:33:
                    1f:6f:c9:f0:31:e7:5b:8f:7c:d1:cb:45:e1:c1:d9:
                    12:f2:d1:7a:e9:43:3c:6c:c4:fc:00:cc:57:05:a2:
                    21:8b:51:27:03:79:a3:ac:7a:b7:ee:6d:dd:0b:de:
                    e0:7d:93:0f:61:e7:33:24:2a:2b:f8:99:b8:13:67:
                    35:db:9e:5a:69:df:f7:7e:56:50:2e:15:bf:e7:5a:
                    4c:67:ef:dd:d9:95:05:74:9d:16:2e:13:9b:4e:79:
                    86:87:ac:22:30:d9:ca:d6:21:1e:69:62:0f:b5:74:
                    8d:e6:71:e4:d6:51:53:c0:82:0e:f9:94:0f:c4:10:
                    19:7a:6e:87:e2:f0:32:b1:2f:4b:36:5a:ca:9c:56:
                    7e:46:50:14:14:67:20:15:f0:ca:85:b7:a6:e5:29:
                    e8:31:28:f9:c7:0b:a7:23:a5:f9:72:cd:03:6e:67:
                    26:00:0c:25:30:74:d5:34:d5:df:a7:bf:67:7c:64:
                    aa:37:25:d1:73:e3:ca:68:6b:b0:9e:44:1d:71:d0:
                    d8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.217.64.0-198.217.113.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23129
                  46256
                  46441
                  46648

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:43:b7:59:f9:cf:8a:8a:42:4f:47:b7:d6:69:cc:2d:fc:ff:
         ef:c4:5a:54:07:41:9f:c9:93:24:99:90:e4:1a:d8:7d:9e:2f:
         8e:ea:92:fa:b5:05:f9:e5:7a:32:c5:ab:7d:27:99:f1:c4:20:
         91:62:18:6b:96:76:86:5c:67:bb:05:14:3b:6a:fe:96:55:ed:
         a4:d9:3c:35:6c:2c:a2:7a:47:ae:bf:3e:ed:be:cc:67:f0:51:
         40:32:4d:c4:c9:79:e5:ce:4b:44:00:ee:02:2c:31:8a:18:96:
         37:13:c8:8a:d6:8f:e5:07:f7:dc:68:ce:55:fb:6e:eb:d1:71:
         49:cd:62:bd:85:81:7c:a0:36:3e:53:bc:e1:60:41:72:ec:45:
         6b:38:b8:03:a2:12:e0:59:1d:72:c7:32:e2:72:a4:38:db:b6:
         00:87:00:ce:10:58:72:33:75:6a:e8:07:0a:a5:9f:de:cb:07:
         4b:b2:58:df:29:20:81:d7:64:bb:ef:47:53:7f:a3:25:fc:8b:
         3b:a3:c8:a4:7f:7f:82:72:63:3b:44:f4:49:83:36:9e:3a:77:
         f9:2a:30:32:57:0f:af:d3:3e:38:fb:c0:51:b8:e1:8a:de:79:
         f2:f7:fd:87:d5:96:ea:20:76:52:35:95:ee:fc:fa:df:a7:eb:
         e1:f1:96:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----