Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer
File:                     a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer (raw, json)
Hash identifier:          9qYCQ+Yvv8osbZLwqVAhMsy3X+nHQBb86KRQk04dOds=
Subject key identifier:   58:43:74:56:C8:F5:48:77:8A:42:F3:73:EA:2B:D7:0D:86:04:52:3C
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285845A151E72C903E4AFBB524E780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 22 Apr 2024 12:36:15 +0000
Certificate not after:    Mon 12 Jan 2026 01:45:14 +0000
Subordinate resources:    AS: 33108
                          IP: 149.112.96.0/22
                          IP: 206.81.80.0/22
                          IP: 2001:504:16::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:51:e7:2c:90:3e:4a:fb:b5:24:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Apr 22 12:36:15 2024 GMT
            Not After : Jan 12 01:45:14 2026 GMT
        Subject: CN=a6e9c51c-6cf9-458e-a3ac-47c497a2617c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fa:eb:2c:43:b5:9e:e5:61:f8:a7:9e:e7:11:
                    74:b0:d7:ba:ed:8c:c6:8c:1f:0e:cd:14:b5:4b:0f:
                    6a:a5:eb:89:47:32:d4:47:36:7d:34:d9:c8:ad:f2:
                    8d:86:b2:c8:a3:b2:9b:35:a9:7b:0f:66:a5:03:bd:
                    2e:b3:b1:95:f1:39:2a:1f:2b:71:85:4e:f9:e5:91:
                    f1:23:20:d4:1c:00:5b:ba:22:b8:22:b1:4d:3e:63:
                    8a:e6:5c:ea:68:1b:ea:ac:ac:09:92:63:85:93:3c:
                    12:46:8c:f9:cd:34:0e:b1:d6:76:51:08:d0:a2:f4:
                    b4:dc:16:0b:08:24:a7:99:41:5c:a6:85:98:8c:3f:
                    1b:3c:58:f6:e0:a8:9b:13:70:36:8d:7b:c4:dc:3d:
                    81:be:8f:ed:28:52:e9:a5:3e:0d:14:c3:e0:1e:88:
                    e1:54:c8:6b:49:8a:a5:64:5f:b5:b3:8a:e2:92:6f:
                    ee:79:5a:93:03:12:b8:3c:e8:98:f4:64:76:31:43:
                    ec:58:c2:b3:cb:ef:3a:2c:44:4a:bd:3e:2e:a5:ee:
                    36:ac:d0:0f:30:20:76:41:c4:02:7a:e8:fe:3e:94:
                    78:40:eb:7f:05:97:37:30:d3:54:a1:57:1c:18:b4:
                    20:56:b5:a8:db:f3:f3:61:9e:56:c8:bf:73:67:fd:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:43:74:56:C8:F5:48:77:8A:42:F3:73:EA:2B:D7:0D:86:04:52:3C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.96.0/22
                  206.81.80.0/22
                IPv6:
                  2001:504:16::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33108

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:fc:c9:0a:a5:33:78:b4:30:d4:bb:be:30:3e:f4:09:13:9b:
         bc:1a:43:a5:4e:26:3e:1b:3b:57:ba:b2:a1:12:a1:8a:da:bf:
         ad:66:61:96:83:d2:d0:95:7b:a8:a2:46:c2:00:23:53:64:fd:
         12:75:34:88:d2:f1:b0:d9:78:c5:88:86:6b:7f:a2:db:3a:c0:
         95:04:7a:67:99:be:58:f4:ae:84:85:3c:2d:6a:a3:7b:57:2f:
         65:2c:ce:67:ea:fa:2e:b6:6e:36:a4:20:63:35:e8:54:2d:d2:
         ee:b7:6a:60:d9:db:df:cd:ee:04:b5:19:7e:6f:71:53:cd:04:
         b7:93:a8:9b:fa:c9:d9:ad:72:c1:9b:bb:a2:71:f6:b7:3f:1d:
         a0:4c:6a:5a:f9:b5:f4:d1:a5:06:0f:d5:c6:fa:e7:d9:79:a9:
         08:fd:17:d7:bd:d1:a4:cb:ac:17:e1:8e:af:48:56:5a:92:6c:
         d5:ae:7e:8b:a1:30:ca:d9:84:6d:5b:05:fe:91:49:6c:cf:11:
         2a:05:47:8a:84:c9:e4:29:57:45:4a:66:db:3a:6f:ae:19:bc:
         43:12:47:9f:d9:c8:95:70:56:aa:1f:2c:1d:a5:5e:6d:d3:22:
         e3:1b:36:b2:ae:b8:6e:bc:69:87:d2:40:14:0f:59:80:0e:72:
         b3:fb:17:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----