Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer
File:                     2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer (raw, json)
Hash identifier:          m9cVLNeCZBK0+ui6eDgR2NLSu3DLUag+3DQWFz51ktA=
Subject key identifier:   D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584723FE37211580CAAA9C94A540
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 08 Sep 2024 00:45:27 +0000
Certificate not after:    Sat 12 Dec 2026 01:45:27 +0000
Subordinate resources:    AS: 400245
                          IP: 165.140.124.0/22
                          IP: 2602:fb7d::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:23:fe:37:21:15:80:ca:aa:9c:94:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Sep  8 00:45:27 2024 GMT
            Not After : Dec 12 01:45:27 2026 GMT
        Subject: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:c6:98:9f:02:dc:11:67:1f:89:83:52:5f:
                    c9:78:68:61:13:58:81:cb:0e:54:b7:b3:06:c1:e6:
                    3d:fd:ce:bd:7e:b7:69:c9:59:01:0e:b0:0e:a1:94:
                    82:23:52:a1:ce:fb:d9:34:76:88:88:24:6e:54:cf:
                    6e:54:41:b6:1c:6c:25:fa:06:03:97:61:a3:eb:81:
                    f9:92:b8:bb:a1:82:69:3d:ab:58:ca:fe:82:ac:21:
                    7e:bb:44:c4:f8:b2:5a:a8:b0:84:ae:98:f6:32:aa:
                    06:17:69:b9:a6:43:7e:6d:41:cb:d9:0e:fb:eb:01:
                    d7:70:79:57:99:44:6b:bd:aa:6a:17:96:59:16:aa:
                    5e:42:84:60:7a:9b:9d:45:50:77:d0:e6:62:af:a6:
                    df:d7:7b:1d:b5:ba:f2:4b:45:7e:9c:4c:ce:39:4f:
                    48:6a:e8:82:05:c4:f3:8c:6d:ec:0f:08:30:5d:34:
                    dd:58:0a:09:02:53:84:9a:75:1a:c8:cd:df:ea:4f:
                    42:59:80:a4:73:07:4f:90:3f:3b:98:51:3d:84:fc:
                    7a:82:ac:6e:cd:37:2a:a8:c5:c0:b9:cb:9a:7d:90:
                    c9:ee:e0:72:8b:05:e1:21:f9:bb:c9:c1:a4:26:87:
                    cf:31:bd:ed:88:cc:a0:db:33:ca:69:27:92:a4:d3:
                    6d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.124.0/22
                IPv6:
                  2602:fb7d::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400245

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:22:d7:8c:95:74:5b:d4:f6:00:11:35:89:7e:2e:73:e0:26:
         dc:90:b4:51:7b:e9:6f:fd:aa:06:28:1d:01:98:65:1b:a2:5d:
         3b:b4:2e:d4:e2:82:73:98:48:a7:87:ec:c3:af:39:28:7e:98:
         e6:f0:a5:bc:40:74:0f:b2:ea:ef:dd:a6:22:b9:d6:ca:c5:9d:
         95:bd:b3:e9:54:10:9f:21:83:4e:ed:68:e3:e6:5b:cc:22:2b:
         dc:51:ba:ab:54:b8:2d:3a:9a:ec:0d:28:dc:d4:0a:53:34:b1:
         38:22:9e:04:e1:ff:30:82:f0:1d:29:6e:8a:18:97:8a:e9:34:
         2b:81:5b:94:9a:36:3c:cd:c4:62:1a:08:81:d8:c9:98:ce:fc:
         28:6f:7c:09:f6:2c:c1:55:b7:b4:25:87:30:1e:7e:17:d5:0d:
         87:74:e1:bb:11:50:cc:6f:fa:b7:bd:dd:66:61:85:3b:18:d5:
         4b:dc:2f:8f:bd:5b:ec:18:30:fa:26:6d:ad:05:17:9b:a7:a4:
         65:10:fc:e6:df:91:ea:50:83:bd:f9:39:ea:2e:1b:a5:62:d1:
         3d:fb:74:6d:3b:cc:b0:b6:2f:23:3d:18:72:9b:62:bc:01:b7:
         bc:fe:d8:f9:cf:28:e0:cc:27:dc:85:17:b8:a1:fd:48:a7:de:
         27:d6:e5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----