Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer
File:                     5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer (raw, json)
Hash identifier:          CuhixSR8umeJ/TAXISLja+xaj1p6OUye7liLBSEjFyc=
Subject key identifier:   CE:3A:6A:1D:7B:CD:04:74:BB:B3:D6:43:72:CF:AE:22:23:D4:A8:74
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285846ABF2C3ED475360D58A7C98A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 27 Jul 2024 00:45:23 +0000
Certificate not after:    Fri 30 Oct 2026 00:45:23 +0000
Subordinate resources:    AS: 54911
                          IP: 104.171.32.0/20
                          IP: 2607:10c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ab:f2:c3:ed:47:53:60:d5:8a:7c:98:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jul 27 00:45:23 2024 GMT
            Not After : Oct 30 00:45:23 2026 GMT
        Subject: CN=5bb89f91-a9a1-4d88-b9d0-f7882ea134a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:b4:a0:71:e7:30:e2:68:e7:54:f3:2e:39:
                    b7:25:db:f0:64:bc:ec:52:b9:e0:53:bf:2a:5c:6b:
                    3f:67:fe:bc:90:d0:66:6f:de:33:d8:98:e7:07:6a:
                    ab:19:37:c2:b2:cb:17:e1:04:fa:fd:fc:76:1c:fb:
                    24:cd:35:e1:67:dc:bc:d6:2f:fc:8a:db:94:fb:ab:
                    76:11:27:cb:96:c2:cb:8b:d5:82:16:29:8a:b0:aa:
                    7a:2e:7f:21:8f:70:74:5e:50:65:21:74:a4:49:7b:
                    35:55:03:4b:62:e3:d8:c2:9f:f7:fb:c6:eb:54:f1:
                    07:5c:ab:59:4c:29:f2:c1:cf:b4:f5:b1:ce:cc:b5:
                    51:a7:ca:1d:eb:a4:07:12:6c:20:c4:71:84:f5:42:
                    62:0a:9f:6c:c1:94:fe:3a:58:04:ec:c2:30:bc:18:
                    a2:b5:7e:87:7b:ea:17:b1:4d:e5:e3:c3:de:03:c6:
                    42:2b:67:1e:21:3e:58:41:d1:b7:9f:fa:9a:8e:5d:
                    a5:3e:6a:c7:b2:08:6e:0a:3d:f0:51:2a:aa:aa:64:
                    9e:fc:f5:82:47:62:6a:0e:36:a9:a1:7a:05:e0:be:
                    f9:89:53:a5:6d:ae:9a:d8:cc:38:93:ee:dd:8f:01:
                    48:f6:c4:db:a5:e1:b5:b1:80:e2:7e:21:73:3a:1b:
                    6d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3A:6A:1D:7B:CD:04:74:BB:B3:D6:43:72:CF:AE:22:23:D4:A8:74
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.32.0/20
                IPv6:
                  2607:10c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54911

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:30:6f:69:38:c6:9f:85:75:55:ee:3e:69:0c:df:e2:25:87:
         96:33:95:7c:92:38:bb:a7:83:9c:c0:59:c8:ec:dd:6e:5c:34:
         b7:8b:11:6c:13:8e:0d:eb:62:6c:07:e0:c2:b8:08:8c:e5:fd:
         d0:c2:12:e6:0e:03:0e:ce:72:f2:8f:79:d6:30:71:b9:25:62:
         40:5e:5a:53:e4:da:61:30:99:30:53:86:fa:4c:ba:90:aa:31:
         74:fb:77:11:b8:d6:0a:e3:f2:cb:ba:f7:7c:a9:23:9b:17:d6:
         40:a3:30:38:e6:e0:d9:22:2d:03:b7:46:56:ba:db:8f:6f:7e:
         c4:3e:3d:3c:62:b6:45:08:78:fc:b6:e6:49:a3:bd:e4:f5:80:
         92:20:6f:fd:13:95:b3:90:d4:6e:74:18:32:48:9d:ac:e4:cd:
         a1:4c:1a:1a:08:22:1a:5a:6b:5f:ec:91:1c:8b:06:b0:47:5e:
         2a:82:64:80:16:cc:57:e6:14:9e:8a:3d:58:a5:8e:64:7a:a5:
         ca:cd:b8:ca:d9:1d:81:45:68:64:24:88:f2:98:69:43:eb:7a:
         16:e3:a0:9e:8e:76:68:76:91:8c:12:5c:f9:59:a5:d6:ef:2f:
         ca:52:62:a7:1d:40:08:e6:99:0f:a6:25:b3:d9:79:51:75:da:
         ca:a5:c6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----