Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer
File:                     f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer (raw, json)
Hash identifier:          cYprvOIGi8w1rMb4sTrBB9sHGDNpy1PBILxBDkNMehM=
Subject key identifier:   9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285847416F1B9CDDA31C2B35190A10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 18 Sep 2024 13:51:22 +0000
Certificate not after:    Thu 18 Jun 2026 19:04:38 +0000
Subordinate resources:    AS: 14866
                          AS: 54454
                          AS: 393927
                          IP: 206.126.109.0/24
                          IP: 206.220.192.0/21
                          IP: 2604:4280::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:41:6f:1b:9c:dd:a3:1c:2b:35:19:0a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Sep 18 13:51:22 2024 GMT
            Not After : Jun 18 19:04:38 2026 GMT
        Subject: CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ed:10:c6:f5:93:9d:7e:81:32:c6:19:af:42:
                    01:e4:00:0c:fd:6c:a0:de:15:85:19:21:84:b6:a2:
                    e0:13:26:cb:06:37:93:32:3d:67:ee:2c:de:ee:3a:
                    61:05:4b:cc:69:d7:40:22:ad:e9:25:59:82:13:04:
                    47:00:8e:02:db:85:af:67:f6:86:f1:dc:f3:51:32:
                    8c:cb:78:58:3d:49:7c:13:bc:78:23:cc:94:01:0f:
                    4f:b3:10:d9:bf:b9:da:61:03:e1:83:77:06:8a:7a:
                    2e:f5:38:5b:f6:c6:4a:d3:14:ed:24:03:4e:49:13:
                    7f:02:26:f4:15:4f:bf:a5:2c:91:63:88:b6:42:c3:
                    78:4e:87:a7:7a:ac:9c:8c:3d:89:65:46:b5:d9:b6:
                    ca:c7:ef:45:6a:52:9a:d8:bc:41:41:35:59:89:ea:
                    35:80:f2:6a:a6:ab:60:cc:e5:01:b7:13:d6:56:c8:
                    13:48:a3:c2:f8:c8:1b:ec:34:13:f7:d0:1f:1c:19:
                    e3:08:df:a3:81:01:4e:65:c1:be:db:29:50:65:fb:
                    2f:8d:8d:c0:8a:00:4a:f2:23:11:0f:76:e2:f3:a0:
                    55:c6:e1:a8:44:e4:68:fd:98:81:c2:00:36:e6:29:
                    e0:fb:32:90:8e:8b:8e:f0:21:45:54:6f:14:37:87:
                    7a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.126.109.0/24
                  206.220.192.0/21
                IPv6:
                  2604:4280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14866
                  54454
                  393927

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:0c:4e:c6:3f:54:96:b6:80:f9:b4:b1:f4:97:b9:9c:3f:fa:
         23:69:73:4e:a9:60:aa:ff:5a:64:ed:a2:cb:db:f4:f7:66:1c:
         9e:ba:ff:7e:6e:00:03:51:58:2b:a3:9a:59:e3:36:8f:2a:f1:
         07:de:d9:13:b0:27:3e:a9:88:bf:c0:be:44:ac:f1:02:62:24:
         6f:1f:fd:0c:87:83:8d:3f:18:d2:3a:44:9b:71:ba:28:70:d8:
         bc:3a:fd:1a:4f:86:4c:d1:02:fd:40:e2:3b:9b:87:cf:67:bc:
         a8:d8:66:ef:0d:36:11:ee:b2:5a:85:0f:fd:bc:de:5b:0f:e2:
         f6:a7:45:5d:bf:c4:36:8d:e8:3e:f7:12:03:33:cf:cf:13:8c:
         50:18:0d:d6:42:16:b3:98:44:d9:e4:f3:eb:8c:b8:cb:f6:64:
         c2:ac:d9:49:86:73:2a:35:20:59:51:92:c4:83:9f:9d:9c:d4:
         59:e6:a2:99:c0:18:ff:6d:fb:6f:8a:44:b8:65:79:e6:65:7b:
         df:7b:69:f4:01:c1:0b:04:39:be:c8:24:3b:29:a3:22:9d:75:
         6f:03:de:c3:bd:f4:c7:b0:f1:83:ba:48:bd:a2:1c:10:16:65:
         9e:99:96:6d:c2:a9:fe:2a:d4:5c:48:20:cb:17:4a:c0:ab:17:
         fd:b7:c1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----