Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer
File:                     c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer (raw, json)
Hash identifier:          UbrC6LiYanuZG8+pi+OkoyLhwF3MFZY9dGn77kWXf4M=
Subject key identifier:   AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285846741D1078F275E4AB2F671B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 07 Jul 2024 00:45:20 +0000
Certificate not after:    Sat 10 Oct 2026 00:45:20 +0000
Subordinate resources:    AS: 53316
                          IP: 173.213.0.0/18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:74:1d:10:78:f2:75:e4:ab:2f:67:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jul  7 00:45:20 2024 GMT
            Not After : Oct 10 00:45:20 2026 GMT
        Subject: CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8a:62:26:ae:69:d1:c9:fd:d5:a6:22:49:38:
                    82:98:58:87:38:84:75:01:e6:aa:8a:f8:ec:83:69:
                    a7:a7:ef:5b:79:da:8e:bc:8e:02:31:9c:7e:9e:87:
                    d6:2d:90:99:2c:03:ff:2d:d3:f0:55:e4:8f:dc:43:
                    ab:a0:bb:21:bc:f1:42:65:33:35:1a:d8:b1:5d:83:
                    ec:12:7c:73:f0:01:77:17:9a:23:e3:4f:94:99:ad:
                    ce:38:cd:21:d2:5d:e8:b6:83:d6:51:fd:c0:1c:75:
                    fc:0f:81:40:96:87:e4:ff:ae:d2:aa:31:75:57:72:
                    15:4c:36:cb:72:3b:38:fd:72:02:94:d0:50:3d:45:
                    52:28:22:b3:af:40:c9:e4:93:75:10:93:7a:9d:d8:
                    62:08:aa:aa:36:0c:70:75:cb:ba:45:5a:2e:ce:04:
                    09:b7:0c:5c:ed:3a:d9:bf:fa:9c:bd:af:5b:d5:f3:
                    76:d5:49:d3:4d:a7:ac:de:61:08:4c:e6:75:90:6f:
                    38:7a:3d:a9:3e:86:a0:28:c0:70:55:45:e4:00:2e:
                    70:8f:12:ef:87:ac:8c:69:46:6a:28:ba:48:0b:36:
                    13:5c:f4:7f:30:bc:35:fb:2d:cb:5b:53:7a:3f:90:
                    4d:f4:f2:07:93:d9:d6:08:8d:53:23:66:0c:d3:ab:
                    f9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.0.0/18

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53316

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:3e:da:3a:2a:a1:b0:09:17:80:33:8f:63:6c:74:0f:99:2e:
         4a:28:de:c0:37:b4:c8:8c:aa:2b:c1:f2:13:fd:aa:4e:20:9f:
         5f:64:59:5c:a2:d2:ec:42:6f:37:37:36:3b:99:c5:24:67:10:
         dc:6a:00:c3:fe:4c:f0:d5:f2:91:ce:fc:a7:67:8e:eb:37:55:
         34:82:40:a3:82:12:79:3a:f7:a2:1f:22:9e:77:8c:33:94:53:
         12:04:75:9a:03:76:c7:40:e4:4a:c8:6b:27:14:f7:c1:e9:5b:
         65:a1:3e:d4:6a:ea:f5:2b:48:05:27:c1:47:e8:b6:40:4c:99:
         b9:9a:86:a4:16:92:99:fb:f6:78:81:20:20:7b:b4:4e:5e:55:
         95:63:83:f7:3c:23:4f:94:ec:8a:47:c2:da:c8:e8:89:5a:cb:
         53:36:3f:5c:70:0e:f4:21:cf:47:75:f1:a2:7b:4a:fb:db:58:
         c2:04:2f:7f:37:50:6f:ca:a8:cb:40:2b:4c:53:6c:8b:82:56:
         ea:b9:bf:ff:44:5a:ba:52:99:0e:2e:0a:17:b8:f2:a8:4d:c7:
         f8:bc:02:f1:f2:42:15:c8:4a:e9:ed:37:60:52:a9:2e:bf:6f:
         9c:3a:92:76:96:cf:ac:07:c8:60:5a:79:df:d3:34:67:d9:01:
         2b:02:aa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----