Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a94b460-7441-495e-9358-475ea795ecc6.cer
File:                     0a94b460-7441-495e-9358-475ea795ecc6.cer (raw, json)
Hash identifier:          4MEntBl6GuROLS6OGwV1BGtaA88jkoqMHWhNZwYslu4=
Subject key identifier:   D6:BA:7E:33:55:B5:CB:F6:74:03:92:36:4C:A9:21:37:92:41:C0:27
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285847563E885A4371B6BCDF7DAE40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a94b460-7441-495e-9358-475ea795ecc6/0a94b460-7441-495e-9358-475ea795ecc6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a94b460-7441-495e-9358-475ea795ecc6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 26 Sep 2024 00:45:28 +0000
Certificate not after:    Wed 30 Dec 2026 01:45:28 +0000
Subordinate resources:    AS: 62935
                          IP: 204.9.40.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:56:3e:88:5a:43:71:b6:bc:df:7d:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Sep 26 00:45:28 2024 GMT
            Not After : Dec 30 01:45:28 2026 GMT
        Subject: CN=0a94b460-7441-495e-9358-475ea795ecc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:60:28:d2:d6:03:5e:95:45:64:2c:af:ce:
                    6e:b3:f1:a9:87:f3:69:c3:4a:d7:6e:8d:19:8e:e6:
                    64:2a:8b:fb:7d:16:33:bd:2d:60:e9:f1:cb:47:0f:
                    0f:21:e0:45:64:4d:f4:e9:96:b1:14:cb:c6:a0:a2:
                    c2:6e:2f:6e:43:fe:e5:43:ee:1d:5e:bd:cd:21:a4:
                    8d:c4:9e:9c:e0:fb:6d:bb:d0:09:06:24:08:f8:4c:
                    92:93:b1:9b:b1:ae:c7:e9:a4:7f:29:b4:00:98:b7:
                    58:46:f1:60:8c:28:95:9f:cf:44:67:ce:48:83:15:
                    87:79:cb:34:d0:9e:87:ee:df:15:74:4b:85:67:34:
                    fd:ff:fe:d9:c7:80:f6:30:b2:f3:ff:2e:e9:3d:c1:
                    0c:7f:8f:3b:10:1a:d9:9a:1d:40:0c:e1:d6:b6:ab:
                    70:1d:d3:9f:da:52:66:f1:62:07:8b:ab:c3:90:9a:
                    27:dd:30:7b:bd:78:15:bd:e3:79:50:c7:e8:a2:0e:
                    ee:61:5a:65:a9:a0:38:71:1f:43:64:fa:0f:53:bf:
                    42:06:e7:4f:7f:eb:bf:db:e6:84:62:0b:e4:1e:e8:
                    97:94:5a:cb:f3:e5:10:0a:c1:3b:d5:e2:43:a5:f6:
                    ce:99:bc:2c:3c:0f:59:cb:82:06:59:30:c6:cb:33:
                    72:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BA:7E:33:55:B5:CB:F6:74:03:92:36:4C:A9:21:37:92:41:C0:27
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a94b460-7441-495e-9358-475ea795ecc6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a94b460-7441-495e-9358-475ea795ecc6/0a94b460-7441-495e-9358-475ea795ecc6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.40.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62935

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:45:c5:64:fd:f0:30:99:22:bb:2c:df:36:5a:a4:67:46:98:
         81:e6:bb:a6:26:c5:df:4d:bb:f6:41:c9:75:0e:5b:f4:6c:dd:
         28:f9:b7:ac:af:c6:ef:cb:24:06:f3:5f:38:c4:29:30:3c:6e:
         29:56:1f:cd:b6:b9:5b:9a:65:6c:3d:ac:a1:45:db:3d:d1:dd:
         44:21:98:44:5b:54:ca:e8:0c:d8:3d:ee:11:47:8e:a7:c4:1b:
         53:5d:68:6f:84:ae:4f:51:63:63:d9:31:fd:88:8d:f3:9a:ff:
         60:fd:76:84:c1:8f:b4:44:8e:9f:d2:a5:a9:63:80:28:b0:40:
         50:e3:a1:64:b0:ba:30:f6:e7:49:4d:ba:4e:16:5c:b9:eb:2b:
         48:86:99:1a:1e:4a:a2:46:7a:25:04:8d:88:6c:ec:f7:30:8e:
         f8:8e:de:bd:13:28:04:90:2c:2a:31:ca:63:f5:fd:05:dc:d4:
         0e:b1:2d:21:b6:f9:c0:41:29:ca:6f:df:b9:03:94:bb:e7:c6:
         a0:76:2f:30:18:3a:20:d7:54:da:c9:94:b1:9d:79:59:70:d4:
         b4:c7:04:c6:55:f7:09:c2:52:90:f4:e8:10:97:03:d1:e1:46:
         b5:eb:24:dc:b7:37:80:29:81:dd:02:8b:39:71:5f:7b:85:f8:
         d2:44:4f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----