Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
File:                     fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer (raw, json)
Hash identifier:          A/qOa+HBWCtkKD02VSUzoOFKMTkYOSbny9X+Y2IC+ew=
Subject key identifier:   9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584538A5C6260D58F214CDA14C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 16 Mar 2024 00:45:21 +0000
Certificate not after:    Fri 19 Jun 2026 00:45:21 +0000
Subordinate resources:    AS: 19513
                          AS: 33011
                          AS: 394265
                          IP: 74.112.184.0/22
                          IP: 107.152.16.0/20
                          IP: 2620:117:b000::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:38:a5:c6:26:0d:58:f2:14:cd:a1:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Mar 16 00:45:21 2024 GMT
            Not After : Jun 19 00:45:21 2026 GMT
        Subject: CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:95:1b:ee:a7:c7:b0:d8:f0:49:50:09:c4:5e:
                    7e:5f:1f:36:22:d9:8e:a1:68:5f:11:99:e7:67:f2:
                    4b:a4:30:bc:88:c9:5b:0c:f3:9b:6b:6b:fa:3e:0a:
                    fa:4b:cb:06:6d:c6:58:82:6d:12:05:3f:76:c4:75:
                    6c:a2:57:2c:1f:46:e9:06:e1:35:c6:fb:25:d7:df:
                    8f:89:cd:ae:46:4d:2d:58:aa:5a:4b:6e:a2:2a:04:
                    ae:52:8c:58:07:19:40:3c:92:74:85:d2:2c:ca:c7:
                    74:87:1d:f4:df:a6:2f:16:1f:28:99:4c:05:78:cc:
                    a3:3d:ad:42:bf:7c:46:60:41:a4:5f:b1:6a:c4:d2:
                    44:d8:3f:b0:2b:84:d7:90:93:ff:b8:2d:1c:12:0c:
                    a6:ba:87:bb:1f:f6:c4:2d:e7:df:12:6a:e7:12:cb:
                    a3:c5:74:43:69:2c:08:9e:04:e8:2d:15:58:91:6e:
                    d9:8b:f6:f0:1d:3a:91:af:73:b0:b1:c0:5b:af:fa:
                    a0:1e:bb:56:72:d8:60:6b:f7:38:1d:3a:be:f7:43:
                    2b:54:ce:1f:43:de:04:f5:40:15:fa:2b:f7:82:70:
                    a6:e5:1e:b1:6a:17:4d:5a:5c:02:4a:e8:3e:e8:89:
                    9f:e4:a7:74:28:7e:82:d2:8d:b2:8f:c1:39:48:bf:
                    65:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.184.0/22
                  107.152.16.0/20
                IPv6:
                  2620:117:b000::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19513
                  33011
                  394265

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b1:36:01:bd:61:a0:0e:f3:b2:bd:58:60:6a:9a:a0:74:da:
         64:e0:f0:35:57:65:cd:d0:d4:23:80:c7:5c:68:3e:75:56:3c:
         88:56:ad:2a:2d:b1:5c:58:f3:60:f0:b8:bc:2c:84:44:4d:a5:
         fd:1e:45:b9:23:6c:78:81:f5:bb:27:01:2f:29:12:2e:ef:0d:
         0c:82:ca:79:7b:7f:e7:08:ae:c4:49:58:85:5d:ec:c9:a6:9a:
         e0:d6:a5:2d:5e:10:1f:32:1e:e5:c3:d1:d8:7b:32:cf:d7:27:
         b2:b2:9d:8d:e3:c9:89:9a:80:5f:48:a7:dd:c8:9e:e9:45:4c:
         90:fe:02:3c:95:41:69:ad:76:4e:b7:a3:ac:4c:8f:ca:01:f0:
         dd:09:c3:ac:66:37:62:b0:0f:31:2a:d5:52:1f:34:d9:a6:47:
         eb:6a:b0:5a:aa:34:d9:c2:80:d3:ec:3b:9a:90:72:79:90:83:
         ac:a9:2f:dc:c8:91:d1:a7:f1:87:57:32:4b:cc:1e:61:f9:ea:
         86:2a:73:69:27:2c:6c:f0:11:8c:b1:9e:ae:d4:d9:e9:55:07:
         6f:48:a0:9c:24:e1:ad:c6:e3:48:38:ca:4a:4e:4c:0b:ea:45:
         e9:1e:62:29:e7:76:d6:46:0f:38:22:23:34:8d:b8:b8:33:84:
         0c:38:91:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----