Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer
File:                     b118eb4a-df16-4ce5-adf1-adaaea128c50.cer (raw, json)
Hash identifier:          AA2EcWzL1ot6ryZhVXTgNy992l/10QSJFZgcuin0qaQ=
Subject key identifier:   AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285846EEF3357B0182F22A1618C8D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 20 Aug 2024 00:45:25 +0000
Certificate not after:    Mon 23 Nov 2026 01:45:25 +0000
Subordinate resources:    AS: 833
                          IP: 165.140.200.0/22
                          IP: 2602:fc19::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ee:f3:35:7b:01:82:f2:2a:16:18:c8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Aug 20 00:45:25 2024 GMT
            Not After : Nov 23 01:45:25 2026 GMT
        Subject: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:8c:52:f1:76:b9:56:85:7e:1d:95:d1:f3:
                    bc:3c:2c:05:bb:ad:73:8b:96:61:81:5a:53:76:f7:
                    3a:7c:52:ae:ae:93:8a:63:bb:87:41:ad:94:2c:c1:
                    8e:7c:ec:5f:9f:c6:e3:f0:93:57:63:59:50:98:fd:
                    3b:8e:4e:a5:82:a6:94:f6:11:23:27:21:32:4b:89:
                    f7:f0:68:95:0e:86:ca:16:a9:38:2a:43:04:0e:eb:
                    d3:ea:f7:55:d2:b5:0f:3e:40:da:db:be:a2:70:a6:
                    85:bf:d2:4a:e2:85:71:e6:3d:c5:5a:5c:8f:df:5c:
                    b8:cc:58:21:f8:9c:61:1c:88:f4:7e:0b:d9:eb:7e:
                    f0:18:e8:d0:81:7e:08:fe:3e:28:e8:38:2a:20:76:
                    b0:34:f4:a8:dd:93:19:f1:32:a2:1c:14:c6:a5:f5:
                    07:d8:f4:f2:4c:c1:3f:c1:85:8d:98:51:fd:b9:ec:
                    c1:4a:f5:92:44:cf:67:19:78:46:2f:08:cf:27:d2:
                    68:83:df:a9:a8:3f:56:d8:c6:d9:da:0f:d8:5f:f1:
                    aa:39:46:dc:a4:55:09:01:0d:80:3e:2a:11:f9:fa:
                    a2:c4:48:cd:09:79:f4:26:ef:3c:70:93:ba:b3:76:
                    42:17:65:06:e6:4e:76:47:d2:96:62:d5:6e:7f:53:
                    1e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.200.0/22
                IPv6:
                  2602:fc19::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  833

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:d0:f9:41:75:d2:3a:55:82:d9:61:cd:4b:38:21:c0:81:45:
         31:e1:9f:07:1b:5a:24:dd:41:59:c2:04:a3:0b:67:0a:89:d4:
         bc:f6:9f:24:e9:aa:4e:1b:4c:bc:73:8b:24:c7:95:3d:d9:08:
         e8:7f:dd:60:6b:46:cb:4e:51:38:39:85:2d:08:93:40:91:40:
         dd:a6:2a:b7:1b:f4:5b:8b:e0:95:cd:96:05:a1:44:ba:01:e4:
         4b:4e:f3:d4:b1:39:fd:d2:10:ef:85:75:dd:a5:b3:3c:f6:03:
         60:84:a8:4e:08:e3:a5:05:0d:fe:a7:78:f4:c5:8a:bd:5a:07:
         fb:27:b2:26:6a:b8:c1:7f:79:e6:9b:09:5c:cc:ca:ab:3d:f5:
         c6:4d:44:53:62:1c:8e:02:bb:73:3c:af:30:67:40:0e:63:f2:
         a0:30:7b:3b:8b:44:4a:0e:93:f5:70:3d:a3:7d:f8:3a:8d:c8:
         27:e4:cf:da:96:b5:bb:1a:40:54:32:8f:e6:d1:cd:7a:96:79:
         7d:0e:5a:eb:78:53:f9:9b:99:b1:db:46:07:25:9b:33:b9:63:
         ad:b4:d9:85:92:2f:7f:32:92:39:7b:20:30:28:1c:4c:05:ff:
         d1:29:d3:63:21:af:a5:27:12:3d:ae:df:e8:97:18:e5:12:a6:
         49:aa:ad:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----