Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77a742a9-6c8b-4355-870b-eefb61f883fe.cer
File:                     77a742a9-6c8b-4355-870b-eefb61f883fe.cer (raw, json)
Hash identifier:          QxUQEEXUQJDi8Q7Mgix1tFamo3nMxx+OeO/w1/AOV6o=
Subject key identifier:   DB:01:0A:B7:07:FE:01:97:26:3D:8D:9F:9B:C6:8E:FE:DF:B3:71:3D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584726C8E4C73DBF8F064CBD78E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77a742a9-6c8b-4355-870b-eefb61f883fe/77a742a9-6c8b-4355-870b-eefb61f883fe.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77a742a9-6c8b-4355-870b-eefb61f883fe/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 09 Sep 2024 00:45:26 +0000
Certificate not after:    Sun 13 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 14871
                          AS: 16410
                          AS: 63344 -- 63345
                          AS: 394926
                          AS: 395028
                          AS: 395104
                          AS: 395413
                          AS: 396065
                          AS: 396138
                          AS: 397004
                          AS: 397738
                          AS: 397747

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:c8:e4:c7:3d:bf:8f:06:4c:bd:78:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Sep  9 00:45:26 2024 GMT
            Not After : Dec 13 01:45:26 2026 GMT
        Subject: CN=77a742a9-6c8b-4355-870b-eefb61f883fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:6b:d1:9a:26:ec:7c:b8:c9:9e:57:83:cb:
                    2c:fd:44:c4:e5:4f:07:a1:23:8b:49:96:46:11:98:
                    5a:29:eb:56:94:1f:51:8f:8d:e7:19:60:cb:32:7d:
                    2a:d7:e0:8f:a9:89:b1:ac:cc:db:c1:d2:7b:85:6b:
                    19:ae:15:f3:da:f6:10:f1:b9:1c:07:2a:94:09:a7:
                    5a:29:8b:4b:d6:86:cc:f1:df:78:5f:76:14:a0:f3:
                    e7:3d:20:74:94:77:bb:fe:39:1e:9d:95:6d:47:2d:
                    4d:b7:29:0e:83:5c:f9:f8:e0:cd:6a:24:c6:d7:c1:
                    aa:1c:7c:51:3f:3e:f4:be:34:83:7d:48:ea:68:89:
                    8e:a9:eb:0b:86:eb:06:3e:05:13:dc:08:33:d2:91:
                    ac:17:82:17:c8:03:84:b7:4e:7b:7a:1f:04:55:d4:
                    52:45:cf:70:bd:7e:7f:a9:2c:41:16:39:d3:3f:d6:
                    6a:99:4a:bf:51:dd:7d:3f:b4:05:3a:77:31:7b:d3:
                    c8:83:d1:ea:e8:d1:07:5f:8c:6c:f8:d7:12:69:ca:
                    b4:c5:0a:fc:dd:42:b1:29:53:14:e1:25:7e:85:0e:
                    c9:9e:68:f4:21:4b:b7:66:48:de:c2:f5:08:5a:f6:
                    1e:d1:17:7d:de:f6:54:c8:a9:e9:5b:b0:29:98:85:
                    68:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:01:0A:B7:07:FE:01:97:26:3D:8D:9F:9B:C6:8E:FE:DF:B3:71:3D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77a742a9-6c8b-4355-870b-eefb61f883fe/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77a742a9-6c8b-4355-870b-eefb61f883fe/77a742a9-6c8b-4355-870b-eefb61f883fe.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14871
                  16410
                  63344-63345
                  394926
                  395028
                  395104
                  395413
                  396065
                  396138
                  397004
                  397738
                  397747

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:bc:a4:83:f0:9c:9b:1c:88:f1:f0:c3:a8:af:52:e5:85:91:
         84:0f:d0:99:bb:b3:65:eb:cb:a1:12:81:0c:32:98:90:79:1e:
         e2:2e:53:ed:77:5c:2d:db:82:32:35:99:17:8a:51:4e:f7:02:
         36:9b:96:da:c9:3d:6e:fd:75:3d:9a:46:c7:21:4a:1e:20:be:
         76:db:13:2c:b5:3e:52:01:a0:ea:ef:a3:73:11:f3:82:4e:2f:
         e3:40:24:75:6b:2c:80:cf:f9:4d:ac:02:55:d6:f5:bd:e1:c8:
         25:dd:9f:6a:aa:ff:f3:5b:b7:7d:14:2c:44:58:b7:27:62:a8:
         43:6c:d6:3c:54:65:59:b5:34:0b:d7:4d:e3:f6:b2:76:fa:95:
         ea:0c:f1:98:ad:0e:8e:4e:2e:c7:10:1f:ed:6d:3f:25:92:b6:
         c6:35:f2:1b:7d:e1:eb:71:cd:19:01:8b:d4:46:26:4f:ff:b7:
         b3:bc:08:23:22:32:b5:45:5c:4b:b3:64:66:7b:d1:b5:e8:e6:
         b8:67:34:a0:26:7b:2c:0c:bf:26:c0:42:88:d5:e8:94:d3:64:
         fa:42:75:07:2e:69:55:ab:a1:75:c5:30:df:c9:50:79:b8:99:
         cf:28:54:89:22:af:db:bc:d7:b1:8b:14:c8:92:ab:95:32:ba:
         72:a5:e9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----