Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
File:                     cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer (raw, json)
Hash identifier:          Ar2R8QUxW97SxVuu2ZqA0O+WmkUVHkaKkGDWjQ45cfs=
Subject key identifier:   87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F
Authority key identifier: C2:74:66:F4:AA:8E:27:6B:41:02:F0:77:50:6C:65:56:40:29:EA:92
Certificate issuer:       /CN=c9ab27a6-7622-48ec-9e33-152bab2b4a2b
Certificate serial:       010D0C9F4328584743C93BDDF837060F00FE0F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.cer
Manifest:                 rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.mft
caRepository:             rsync://oto.wakuwaku.ne.jp/pki/ha/0/
Notify URL:               https://oto.wakuwaku.ne.jp/pki/oshirase.xml
Certificate not before:   Thu 19 Sep 2024 10:04:34 +0000
Certificate not after:    Wed 23 Dec 2026 11:04:34 +0000
Subordinate resources:    AS: 401111
                          IP: 2601:1d00::/28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:43:c9:3b:dd:f8:37:06:0f:00:fe:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9ab27a6-7622-48ec-9e33-152bab2b4a2b
        Validity
            Not Before: Sep 19 10:04:34 2024 GMT
            Not After : Dec 23 11:04:34 2026 GMT
        Subject: CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:f1:2c:00:fa:33:4b:60:d2:1f:9b:0e:bd:
                    7d:0b:4c:4c:37:d7:bf:93:2f:26:da:b5:6b:3f:64:
                    70:b4:2e:b3:28:0e:f7:15:6c:c1:19:81:e2:1a:c3:
                    53:fb:71:6e:7f:fe:20:82:ed:cc:f3:20:49:7d:7a:
                    d2:7a:6c:88:3f:49:bb:7c:df:24:90:3a:23:54:ed:
                    48:a8:82:bc:22:e3:f4:8f:e0:ca:27:bd:97:01:c1:
                    dd:f3:e5:8c:ea:31:d8:22:df:dd:1b:f5:fb:d5:96:
                    10:ef:4f:33:a4:35:de:ad:99:9b:4e:e0:3c:a3:51:
                    da:db:37:61:67:26:d3:ee:e1:37:a4:32:92:58:58:
                    e4:01:25:6f:3a:e5:95:45:21:38:f7:ae:f4:8c:3f:
                    20:6e:05:22:c0:41:54:0e:a9:61:52:35:16:d6:3d:
                    a1:c0:d4:ce:30:ef:3c:06:7a:39:4a:27:57:8a:b7:
                    ca:19:b4:43:1a:6b:02:ba:fd:1d:65:79:3b:fd:1d:
                    bc:4d:22:51:8b:9b:8c:15:48:8e:02:e3:fb:e4:a8:
                    d7:33:d7:72:d5:f4:ea:77:99:c0:2c:5e:2b:79:6c:
                    7a:4d:3a:e6:23:0e:44:c6:3f:37:dd:bb:57:dc:20:
                    81:08:a1:c4:1c:f1:29:15:43:df:e7:eb:0b:b1:ef:
                    0c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F
            Subject Information Access:
                CA Repository - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/
                RPKI Manifest - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.mft
                RPKI Notify - URI:https://oto.wakuwaku.ne.jp/pki/oshirase.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.crl

            X509v3 Authority Key Identifier:
                keyid:C2:74:66:F4:AA:8E:27:6B:41:02:F0:77:50:6C:65:56:40:29:EA:92

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d00::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401111

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e6:85:a6:c4:32:b1:01:ab:02:d7:cc:b9:3b:57:ef:01:9d:
         de:c9:58:16:ce:d8:2b:95:c2:06:21:3a:e1:33:dd:32:37:03:
         db:b3:5e:28:91:3f:17:4f:a6:36:ee:3a:ad:c5:10:5c:90:8a:
         75:87:e3:ad:da:26:06:73:90:31:a4:c4:59:72:30:5e:64:d6:
         55:c4:3e:7d:6b:30:e2:9e:d8:90:6e:c0:87:6f:9d:e0:d1:de:
         e8:c1:9d:61:e2:56:6c:1a:15:26:4f:d9:84:48:be:d5:ad:ec:
         3d:91:33:fd:c7:6a:7e:35:68:50:ce:7b:df:61:06:fc:87:d5:
         f9:9a:29:7d:2e:89:99:3a:66:33:4f:b5:53:79:74:db:4f:5f:
         fe:ba:aa:ba:86:42:4c:57:65:f5:95:f5:92:44:6f:fb:9c:9b:
         d8:a2:7d:2c:26:d0:75:f7:9d:ca:16:f4:00:c6:5f:af:79:ab:
         c7:a8:dd:d7:fc:e1:6c:ef:ee:72:bb:7f:74:33:ac:a4:62:34:
         b9:11:69:1b:3d:d7:a8:5b:27:57:20:7b:b3:7b:c9:01:34:55:
         f6:89:3b:f1:90:f8:1f:ff:9a:cf:fb:32:f1:5a:bb:fb:8e:0d:
         59:e1:47:18:97:4a:0a:6c:41:dc:85:6f:83:eb:36:54:28:06:
         65:22:dd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----