Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
File:                     0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer (raw, json)
Hash identifier:          3upy7YSjqB9UQYCtZSjrlQeXzVzk0NH8gv19JACOqe4=
Subject key identifier:   31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285846B452D23C6B8A0924851A5140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 30 Jul 2024 00:45:23 +0000
Certificate not after:    Mon 02 Nov 2026 01:45:23 +0000
Subordinate resources:    AS: 47050
                          IP: 173.224.80.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b4:52:d2:3c:6b:8a:09:24:85:1a:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jul 30 00:45:23 2024 GMT
            Not After : Nov  2 01:45:23 2026 GMT
        Subject: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:24:8b:02:48:f4:d4:0e:59:68:49:6b:84:
                    57:b2:07:7b:14:28:8b:07:8c:b2:fe:c6:e3:1a:a6:
                    6e:36:b1:1c:77:33:b8:9c:f3:31:30:27:39:52:91:
                    c6:b6:99:7f:b3:7d:e7:08:cd:38:2b:7c:5d:c5:8e:
                    09:a0:2e:ee:96:6c:80:3d:b7:b3:2b:74:a8:af:c4:
                    52:f7:be:4d:eb:c0:dd:f1:52:99:6f:0c:ba:1d:61:
                    5f:86:a1:84:c4:20:a7:b3:eb:3c:95:3f:d3:c1:8c:
                    f2:c2:2f:af:6f:44:1e:41:d0:ff:f6:c5:84:50:fb:
                    f2:9a:30:94:1d:7e:47:e1:f6:a7:3f:53:8c:be:6b:
                    ce:ef:35:20:3e:f2:2e:3a:9f:77:f3:b5:e2:fd:c2:
                    22:33:b9:45:2e:04:61:d3:bb:5e:ee:d3:03:ed:83:
                    b0:91:8d:3f:a3:d5:8a:05:2d:68:5a:c1:75:f3:74:
                    c5:2c:45:22:7d:bb:a1:18:f8:38:19:6f:cd:c0:78:
                    05:f8:76:7b:bf:11:9a:05:0f:7f:f2:68:b7:06:23:
                    90:e4:74:c4:16:f4:71:9d:a9:b6:5f:98:3e:0d:4e:
                    b9:95:31:6c:e4:0f:d4:f5:c1:b2:27:bb:75:7e:34:
                    12:9d:12:3c:1e:2b:b6:e8:a8:3c:b5:53:c6:8f:50:
                    87:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.80.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47050

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:bd:b2:57:43:b1:08:86:54:49:f0:ca:91:1d:60:bd:19:aa:
         6c:5f:46:a4:fe:d9:34:12:b2:68:98:b1:26:5f:75:1a:76:7b:
         7c:a1:88:4f:98:ba:71:82:eb:b2:68:69:69:c9:21:8f:85:8e:
         42:dd:eb:cd:04:97:c9:ed:3f:de:56:6e:1d:4f:ab:d4:77:c2:
         3d:9c:cd:6f:9e:6a:55:e7:e5:42:12:11:4c:b5:1f:eb:08:19:
         62:04:6b:66:16:77:9b:11:d9:b3:51:8b:bf:60:e5:69:e6:4e:
         cf:ed:d3:c3:ec:92:36:50:72:12:69:00:b7:f7:ca:c7:c4:b5:
         38:7e:a4:c8:bb:b7:47:0a:a7:8f:3f:6f:9c:bd:f2:af:b3:95:
         43:64:5a:70:bb:62:21:89:68:2d:68:55:5d:a6:70:10:65:20:
         ad:8a:6e:3a:86:da:3a:dc:f3:ba:8f:ad:91:8a:2f:e6:13:ec:
         d8:e7:02:11:a7:89:74:23:87:d0:3b:2e:b4:ad:fa:31:fe:80:
         76:8b:3f:78:ed:43:50:8e:fb:92:4f:e1:ba:26:3a:9f:ae:31:
         66:21:ac:a8:a8:79:47:23:a4:f2:ba:c9:9b:dc:03:cd:e5:4b:
         d5:4d:85:1e:cd:42:06:50:32:1f:81:c4:d4:c0:75:6e:3a:d2:
         82:02:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----