Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685.cer
File:                     e351cae3-e8b7-49f3-8533-235870399685.cer (raw, json)
Hash identifier:          u0jSfPxmdR4QCTD1mNWnSAiG3fE/vwF9moGR92wQvak=
Subject key identifier:   AD:DB:F0:AA:10:93:79:6B:CC:26:CD:4B:0D:D9:78:D5:55:5C:A4:F8
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584782E9777477FECFCA4C539B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685/e351cae3-e8b7-49f3-8533-235870399685.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 12 Oct 2024 00:45:26 +0000
Certificate not after:    Fri 15 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 22673
                          AS: 40903
                          IP: 198.252.160.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:e9:77:74:77:fe:cf:ca:4c:53:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct 12 00:45:26 2024 GMT
            Not After : Jan 15 01:45:26 2027 GMT
        Subject: CN=e351cae3-e8b7-49f3-8533-235870399685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b4:17:01:5c:b5:3f:4a:c7:32:ae:14:d0:af:
                    1b:2c:d3:19:de:53:cf:a1:bb:c6:a7:01:a7:15:b0:
                    5d:95:e5:38:00:bf:90:74:b1:48:d9:66:2f:48:e1:
                    8d:fe:7a:5d:61:bc:a1:55:0b:89:dd:18:21:60:ec:
                    22:a0:e3:08:db:4c:fc:cb:f6:68:db:59:53:77:d3:
                    82:3a:e3:2d:fc:d0:e0:b1:4c:3d:94:16:bd:02:39:
                    46:73:3e:d8:4e:9f:a2:c5:c8:f0:7d:9d:c4:61:1f:
                    2c:1e:f3:c2:8a:7a:40:d3:37:83:78:d9:70:6b:1f:
                    e7:0b:54:04:36:31:d7:8e:31:21:f2:03:76:a9:34:
                    86:90:07:ef:01:cb:6f:f5:9b:32:3d:cc:d4:fb:ad:
                    bb:f0:70:30:12:42:a1:b3:9d:01:66:a9:32:cd:51:
                    3c:de:c7:13:62:20:b1:5a:42:a5:c9:9b:29:6e:55:
                    a2:60:b0:66:d0:d5:f5:02:a8:9d:ec:d3:75:36:e3:
                    12:a8:42:3a:78:ed:54:1b:02:f1:61:3c:fb:c4:71:
                    0b:1c:bf:14:12:6c:2f:7e:e4:8f:5e:dd:c1:b1:d8:
                    77:6b:c1:a1:a4:4c:36:bc:c1:1b:b9:f7:90:69:cd:
                    0a:de:d2:b5:fe:6c:0d:c9:e5:d9:c4:85:c3:20:ed:
                    67:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DB:F0:AA:10:93:79:6B:CC:26:CD:4B:0D:D9:78:D5:55:5C:A4:F8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685/e351cae3-e8b7-49f3-8533-235870399685.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.160.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22673
                  40903

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:84:a4:2e:32:85:24:be:16:8e:bd:c5:71:00:1a:9b:f1:44:
         22:bb:d8:ae:03:fa:90:96:d9:b0:7e:12:7c:dd:d0:c1:ed:0e:
         f9:c7:c9:eb:88:f3:c3:a1:d7:f8:4b:92:24:a9:f7:00:e5:31:
         84:3f:a9:f7:c5:4e:f1:be:de:6e:bc:a1:51:bd:c2:a9:15:6f:
         ee:bd:4e:3b:d8:4d:6b:96:8c:36:c3:65:2a:4b:b3:2e:96:1c:
         2c:e8:f9:c5:92:58:2d:e6:fd:68:cd:34:c4:90:aa:c7:e3:9c:
         f9:46:71:c6:1e:e6:6f:21:c0:ac:7b:69:74:b2:7b:70:5e:ff:
         11:01:0a:cc:2d:3f:2a:f0:17:97:94:48:2c:88:2b:82:b3:24:
         e5:16:b4:a2:25:1c:93:a2:d4:8f:98:9f:8b:12:77:dc:40:d3:
         25:79:26:76:19:58:0d:bc:fe:3a:84:80:f9:fa:ce:f9:cf:d8:
         cb:7b:d2:b6:0a:ba:39:a7:56:fb:c3:9c:91:43:54:c2:f3:ef:
         37:17:ba:eb:d9:0d:cc:19:75:96:76:41:41:a8:76:85:61:1a:
         e5:4c:e7:3a:ab:5e:f6:f2:95:c1:fa:bf:13:2d:e3:4d:13:62:
         3c:7b:be:a7:8a:9c:10:90:df:95:37:98:54:1f:5f:86:a6:b5:
         70:32:d2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----