Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer
File:                     900920d7-dc26-412d-b92a-7af35af2cc24.cer (raw, json)
Hash identifier:          OPBPIMm5emFYGjOxlcdVwF+hWKweaoDZUFTDHu+4xHk=
Subject key identifier:   D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584578DB8086247EE4B449E86ED0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 08 Apr 2024 00:45:20 +0000
Certificate not after:    Sun 12 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 36694
                          IP: 104.219.228.0/22
                          IP: 2620:11d:1000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:78:db:80:86:24:7e:e4:b4:49:e8:6e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Apr  8 00:45:20 2024 GMT
            Not After : Jul 12 00:45:20 2026 GMT
        Subject: CN=900920d7-dc26-412d-b92a-7af35af2cc24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:66:45:fb:f1:3a:a3:d2:a7:65:0f:ad:ea:f0:
                    d5:a4:68:48:2e:b0:fb:1c:16:bd:6e:ae:23:07:c3:
                    40:17:0a:2e:d9:05:6b:47:8f:3a:f8:4f:eb:82:f9:
                    08:4f:14:8b:cc:3f:5e:77:9e:26:1d:31:ec:ca:79:
                    8a:ca:f2:d9:e4:72:ab:fb:bc:7a:0b:1a:df:6b:71:
                    cc:7c:b7:6e:22:fc:7c:cb:a0:c8:7f:73:4d:45:e0:
                    51:6e:9a:1c:60:f2:ee:78:c8:f0:6e:a8:53:c9:7c:
                    64:9c:cc:8a:59:59:31:d0:93:68:ea:83:79:f9:7b:
                    df:66:af:d6:68:ac:02:4d:a0:66:91:6e:0b:90:33:
                    03:d8:59:6a:e2:bb:e5:5f:1b:dc:8d:f8:14:a4:76:
                    14:1d:59:ae:a9:b3:ed:0c:36:a0:56:54:7d:bd:b5:
                    f1:14:9b:6e:8e:06:52:14:cb:b7:1e:2a:88:3c:ec:
                    33:09:3c:ba:5f:14:d2:e1:e0:6a:1e:c3:de:c4:80:
                    15:af:4f:94:6e:b2:c0:dd:e8:a6:20:ae:aa:47:66:
                    9d:42:9b:16:a5:2b:2a:5d:b6:19:cb:39:51:ef:84:
                    9b:d4:d4:1c:7b:da:b5:ec:ff:39:88:44:d4:ec:e5:
                    a7:08:13:de:74:1f:c3:18:92:34:be:b8:9c:a8:35:
                    a2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.228.0/22
                IPv6:
                  2620:11d:1000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36694

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:5e:f7:37:bd:95:60:45:24:3e:92:93:ad:7e:37:0f:11:2d:
         b2:b7:d9:e8:cf:8a:43:71:34:8a:36:7f:64:61:b5:62:1b:19:
         e2:ea:0e:24:c9:ab:f6:8b:1d:cc:58:1b:c9:38:6d:36:f7:75:
         db:60:cf:ea:40:45:28:16:e5:c8:41:3f:a0:57:3f:b7:ae:31:
         43:85:71:b4:d6:36:8d:33:d5:7d:fd:72:b5:36:f6:49:5a:9f:
         62:79:03:9c:96:7b:70:ac:45:93:e5:de:43:13:a5:4d:d4:55:
         80:55:36:7b:a2:c9:18:5a:10:3d:4f:90:7d:36:3a:b4:e2:4a:
         b0:4b:c4:80:81:34:44:80:15:a1:6f:66:56:25:7d:80:db:99:
         a7:0a:4b:d3:33:13:fc:8d:98:8d:49:0b:9f:8a:6e:c2:f7:7d:
         5c:24:ae:e0:0d:89:7e:99:34:72:41:3a:1a:d1:e5:d0:7e:a4:
         b0:6e:97:04:ea:7f:bd:ca:83:22:f0:3a:ec:c9:ff:09:ef:80:
         95:00:f8:70:4e:00:22:0c:89:4f:5a:bb:b4:cf:c2:ff:44:01:
         3f:b8:73:49:de:fb:f8:4c:27:36:47:33:f9:78:31:8a:17:38:
         38:51:9d:d0:23:d6:69:32:81:ee:f8:23:5b:27:80:ff:c3:fb:
         1d:f1:cf:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----