Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer
File:                     cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer (raw, json)
Hash identifier:          5TtUjRNbHoa0Pgl486CyflUkUpNboNO0JJL/5Lh1sbk=
Subject key identifier:   76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285844510CBB87ECE973453D696880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 24 Dec 2023 01:45:16 +0000
Certificate not after:    Sat 28 Mar 2026 00:45:16 +0000
Subordinate resources:    AS: 22594
                          IP: 2620:5b:4000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:51:0c:bb:87:ec:e9:73:45:3d:69:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Dec 24 01:45:16 2023 GMT
            Not After : Mar 28 00:45:16 2026 GMT
        Subject: CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:50:dc:42:7d:49:68:02:b2:0c:74:89:64:6a:
                    19:0c:3b:13:96:3d:0e:fd:47:fa:e1:f9:da:83:4e:
                    60:27:ad:11:26:17:ab:6a:d6:e4:36:2f:f6:c2:49:
                    ff:16:9a:c7:aa:95:8d:65:4d:04:8f:c0:62:0c:46:
                    0e:9c:b9:c5:6e:d3:b2:ee:3a:17:53:73:20:6d:2a:
                    bd:fb:ec:22:25:9e:0d:a3:fa:ab:c3:c7:e2:50:4e:
                    63:28:48:2b:66:b1:70:ab:f2:6c:a1:55:76:bb:2f:
                    5d:42:21:2c:10:97:c0:2e:84:96:22:31:ca:2a:ec:
                    28:85:e0:4c:86:15:f8:af:8e:a3:cb:d5:27:67:7b:
                    0c:43:e9:06:1c:7a:4c:74:7e:de:68:58:bc:cd:56:
                    02:b9:9f:80:15:b2:72:04:f0:b7:3c:06:89:d8:6e:
                    35:66:19:20:e1:24:90:ab:68:e9:d1:46:6d:33:c3:
                    f6:15:52:bf:b4:f4:fe:39:72:0b:4b:35:cd:cb:e3:
                    76:64:1a:51:81:6f:bf:10:04:fc:20:e5:15:d5:a4:
                    ea:8b:9a:4c:17:96:d4:8c:fb:f7:02:09:2e:8e:92:
                    45:2b:40:61:cc:fd:50:57:4e:c4:45:bf:bb:e7:13:
                    fc:e2:06:85:d3:b8:f4:12:55:99:5d:e2:47:19:6a:
                    8d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:5b:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22594

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:bd:f7:01:02:8e:08:1a:d2:4b:23:22:d4:3e:18:d1:db:37:
         56:07:80:bb:fd:78:22:c8:d1:66:33:6d:0a:8b:29:ab:c9:58:
         19:cf:a6:1d:33:b4:db:5e:52:b0:9f:9f:d3:91:5a:e9:d5:5d:
         f1:c1:14:33:f4:5a:79:bf:94:dd:1e:dd:f5:21:31:b4:58:13:
         84:c8:2e:49:84:f4:c3:98:c8:f2:ef:48:ab:f2:02:21:d5:6c:
         da:7a:ca:2c:a5:3b:8c:5b:fd:7d:4c:51:37:13:e4:29:41:bc:
         ce:46:98:19:e8:ed:0c:33:85:ba:8f:ad:63:81:f7:31:d8:08:
         c9:ba:e4:d2:90:c3:95:7e:56:c8:3b:fd:9f:55:2a:88:01:ad:
         89:a8:75:3d:33:2e:78:a6:07:23:dd:74:5b:fe:b4:4e:a5:f3:
         7e:f9:a5:3b:5e:0f:2a:43:4b:51:2f:52:ad:fd:ed:df:16:c5:
         49:85:61:a0:17:17:40:49:4c:97:15:12:16:3c:2b:eb:8e:48:
         12:64:43:43:dd:bf:0a:7f:99:46:0b:65:03:04:39:22:d9:75:
         2f:74:a5:c1:a0:c7:1a:71:10:88:dd:ef:8c:a7:be:f2:c0:9c:
         fd:5f:78:8c:8f:b0:17:d8:c3:ae:98:b9:ff:9c:0e:93:be:8d:
         eb:d2:65:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----