Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d59d6c07-f5a4-48a8-a689-6b002810690f.cer
File:                     d59d6c07-f5a4-48a8-a689-6b002810690f.cer (raw, json)
Hash identifier:          i0iUiJDBKPZ4zPlArGX3v+CPIBfJIkx5W6OEgniz+uE=
Subject key identifier:   98:3E:52:00:92:08:79:A3:BF:E6:5E:84:90:A3:10:52:BB:E2:BA:DD
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858460B70F60D3FB9A3C11B05A260
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d59d6c07-f5a4-48a8-a689-6b002810690f/d59d6c07-f5a4-48a8-a689-6b002810690f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d59d6c07-f5a4-48a8-a689-6b002810690f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 30 May 2024 12:54:30 +0000
Certificate not after:    Wed 02 Sep 2026 12:54:30 +0000
Subordinate resources:    AS: 401110

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0b:70:f6:0d:3f:b9:a3:c1:1b:05:a2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: May 30 12:54:30 2024 GMT
            Not After : Sep  2 12:54:30 2026 GMT
        Subject: CN=d59d6c07-f5a4-48a8-a689-6b002810690f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8a:53:98:e8:58:d8:32:57:5a:05:11:54:0e:
                    2b:41:52:51:f8:8d:ed:1a:39:50:98:48:82:49:3d:
                    6a:60:f4:a1:97:04:33:20:83:16:01:cc:2c:10:a4:
                    70:8f:fc:58:e4:c9:83:49:6b:23:f6:65:7a:77:2f:
                    07:6d:b1:97:be:15:34:70:62:e0:05:ba:f8:85:2d:
                    3a:21:e1:96:9e:3d:f5:11:74:ff:30:1d:57:64:a4:
                    63:ff:0b:fc:41:7b:92:c8:6f:d0:e2:8c:d2:3c:de:
                    5a:90:92:e9:0c:12:f8:cf:96:8f:2d:5c:3d:74:67:
                    f5:54:9e:a8:68:05:07:28:44:71:7b:ad:14:ef:db:
                    b5:06:76:11:16:11:a7:9a:56:1d:0d:44:d6:60:c6:
                    e4:03:b0:2a:9c:2c:65:a4:0f:08:b4:0c:81:e5:2d:
                    84:80:e6:12:c4:21:cc:0d:01:71:da:f7:79:14:c1:
                    ce:99:df:fe:33:bd:e2:60:f0:f4:a2:60:b7:28:86:
                    f1:6c:d9:43:b0:e5:55:e4:bf:61:5e:e5:ea:73:25:
                    be:68:31:5c:b3:d0:4e:96:97:6b:92:9b:3b:22:2f:
                    9d:23:ef:8a:f0:fc:06:2b:5d:f5:91:5e:e7:c5:a0:
                    32:e4:92:b9:02:ab:31:a4:89:54:36:83:ac:a7:f2:
                    db:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3E:52:00:92:08:79:A3:BF:E6:5E:84:90:A3:10:52:BB:E2:BA:DD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d59d6c07-f5a4-48a8-a689-6b002810690f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d59d6c07-f5a4-48a8-a689-6b002810690f/d59d6c07-f5a4-48a8-a689-6b002810690f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401110

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b2:63:c0:93:88:69:d8:f9:02:da:f8:54:2a:31:55:87:cf:
         6a:b0:a6:24:58:a1:05:21:21:fd:dc:f0:ad:33:ea:6f:ef:92:
         bf:ae:7b:31:d0:d0:1b:07:f1:e8:cf:04:8a:6e:bb:34:9b:f3:
         b1:4a:88:4e:60:0e:2e:6c:da:f5:0c:5e:cd:d9:11:9c:0a:c5:
         a1:e0:37:72:77:06:60:ab:25:9e:a0:64:81:72:c7:5b:6a:a2:
         77:33:06:73:42:6a:75:e5:10:0c:83:c2:36:b6:ba:d7:3d:04:
         de:87:6d:13:d7:47:b9:63:35:44:bb:5b:da:f5:43:41:64:1d:
         6e:db:b5:f2:3f:62:06:46:4b:86:b2:ba:d3:86:7b:6a:da:96:
         d4:42:5f:37:aa:09:73:d4:02:16:20:18:44:ef:8a:06:96:b3:
         74:6f:82:05:08:d4:93:ac:ba:db:e3:a5:0a:40:36:57:f6:5b:
         80:25:48:00:cb:20:dd:f2:7b:8c:d5:73:e9:25:60:b8:6e:36:
         8c:4b:84:83:be:d3:93:ae:7d:7b:5e:4d:d3:aa:2a:65:69:8c:
         42:85:76:7b:df:c0:cb:6b:8e:7e:62:79:95:7a:6c:cf:b5:a9:
         96:6a:0f:f2:46:0b:b3:19:a8:4a:0b:c0:ab:44:c0:59:4c:2c:
         4a:f4:77:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----