Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer
File:                     e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer (raw, json)
Hash identifier:          8w5hlkKcasMa7oYtpULbnUlVD16QPuJTzO/S/a+iNbg=
Subject key identifier:   59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858453B7072681609C0DD69E3F380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 17 Mar 2024 00:45:20 +0000
Certificate not after:    Sat 20 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 64245
                          IP: 104.145.224.0/20
                          IP: 104.250.96.0/19
                          IP: 2602:ffb0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3b:70:72:68:16:09:c0:dd:69:e3:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Mar 17 00:45:20 2024 GMT
            Not After : Jun 20 00:45:20 2026 GMT
        Subject: CN=e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fe:21:9e:16:3d:1e:76:e7:4a:fc:7d:51:1b:
                    3e:29:d9:b2:a4:6c:af:12:5a:09:83:e3:d6:23:17:
                    10:3f:f4:9f:9c:5f:70:a3:43:83:71:37:cd:e1:22:
                    5b:13:2f:ef:7f:64:6b:b2:8d:bb:9c:1b:9e:59:23:
                    50:8c:8c:59:8b:5d:b7:3f:24:e7:74:c5:de:57:46:
                    cc:f0:1c:df:68:09:38:72:db:1d:9d:af:55:30:71:
                    72:cf:a3:c8:48:0d:3e:04:a4:10:a0:40:ae:0c:26:
                    d8:c6:c5:56:70:97:ea:69:e7:13:cf:32:87:f3:ee:
                    ca:74:1e:f0:71:d3:5b:8f:c2:25:05:ce:f3:ae:bd:
                    31:9e:a6:02:1c:35:d3:5d:41:02:c8:44:5b:73:60:
                    73:97:b2:37:39:ae:e2:36:98:f6:98:86:42:24:71:
                    32:da:30:92:a9:de:e5:cd:ac:9c:a7:f5:fe:a1:f6:
                    65:70:6d:ea:7d:e3:b5:19:45:65:77:ba:3d:8c:58:
                    04:c8:08:a6:06:ec:61:3b:6e:7e:f8:eb:81:e8:e6:
                    49:db:2b:e3:7f:1e:20:32:ba:68:51:a3:bd:87:30:
                    d6:ab:81:df:cf:b8:75:5c:c5:29:78:45:65:3c:40:
                    c1:c3:e5:94:17:12:20:15:b2:aa:be:b7:76:c2:33:
                    bc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.224.0/20
                  104.250.96.0/19
                IPv6:
                  2602:ffb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64245

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a5:75:d9:5d:76:5c:0d:1f:db:76:d2:fe:49:03:d5:1c:bc:
         93:45:74:97:94:cb:1a:e0:8a:3f:6f:ed:18:aa:40:a8:1d:67:
         24:34:80:06:fa:29:a6:a0:bf:20:2f:e4:31:1c:7c:2e:18:d4:
         86:74:e5:ea:ed:3b:57:04:d9:a6:0b:5c:ff:3d:ce:1c:76:5c:
         81:cf:76:ad:52:58:33:3d:a6:92:4c:e1:35:5e:ee:fa:1d:1d:
         8b:ff:4b:6f:4c:a9:8b:e6:3d:b6:c5:e9:e8:c3:81:f9:51:b5:
         97:08:38:52:97:ea:a3:c4:be:c5:19:d0:d8:42:51:07:72:0c:
         44:09:38:94:2c:e3:08:9b:4f:85:e4:f4:b5:49:9c:ec:54:a8:
         13:4c:a5:a9:2f:45:be:2f:4a:d5:91:30:ac:14:ca:c0:97:82:
         96:c3:80:21:db:61:a8:36:33:c2:8a:ae:d7:ad:bb:e6:2a:03:
         91:7d:d0:67:53:c3:72:ff:a0:74:99:c9:bd:2d:15:44:74:70:
         4a:c3:9e:65:69:1f:ce:5d:03:92:ca:c2:f8:06:38:ae:2b:10:
         b6:89:2d:5d:5d:e3:2d:2c:ea:78:83:02:a9:38:3c:12:4a:2b:
         1a:91:88:1e:70:6d:05:00:85:ef:87:59:0e:eb:2e:82:19:38:
         4e:21:be:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----