Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer
File:                     c22717c6-604d-4453-a20f-3430af557f6e.cer (raw, json)
Hash identifier:          AwrQyBL59wr2FJNGRiW90H7cevWlVvHeKlKT0mioD4E=
Subject key identifier:   EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285847CA1FDBD508B35997F4891D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 06 Nov 2024 12:57:26 +0000
Certificate not after:    Mon 13 Jul 2026 20:12:27 +0000
Subordinate resources:    AS: 400977
                          IP: 72.42.251.0/24
                          IP: 2620:cf:6000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:1f:db:d5:08:b3:59:97:f4:89:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov  6 12:57:26 2024 GMT
            Not After : Jul 13 20:12:27 2026 GMT
        Subject: CN=c22717c6-604d-4453-a20f-3430af557f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ac:3e:1a:06:70:ba:e0:02:33:77:23:c8:49:
                    71:77:98:94:e6:e5:ef:33:0e:25:18:b7:f9:a3:e7:
                    3d:3b:cf:c7:72:ef:e2:4e:b4:8d:e3:8c:44:eb:0d:
                    63:6c:16:32:15:fb:6b:88:6c:08:74:39:e8:f4:a3:
                    39:16:cc:21:e4:64:d7:1d:8c:39:fb:4d:86:1f:2c:
                    7d:74:f7:ef:dd:c1:11:95:6e:ad:f6:1b:d0:67:db:
                    63:7f:48:a0:e9:27:b5:48:34:b7:45:49:9f:95:18:
                    f9:4d:f7:9d:51:64:71:3e:3c:13:2e:34:51:1f:5d:
                    06:22:88:81:34:c7:63:94:e1:40:b1:49:e3:22:1b:
                    2d:2e:a3:f4:54:4c:cd:6a:28:a4:b4:04:00:02:d8:
                    65:b8:fa:e0:6f:ce:28:d0:63:13:2b:2b:45:40:e6:
                    cf:20:b7:cf:7e:d5:ca:10:87:6d:18:30:39:f4:c9:
                    9a:2a:a8:5b:d5:fe:44:27:9b:64:7c:34:30:f5:14:
                    13:ef:01:de:ba:e6:5e:be:af:ad:61:43:37:bc:f8:
                    1d:1a:84:7a:50:9c:91:4e:e6:e3:64:c7:76:f2:34:
                    8c:0b:56:99:f0:c1:e2:b0:c7:55:9c:69:e6:f1:40:
                    4f:18:32:98:32:54:c6:e1:04:ef:4f:f7:8f:80:bd:
                    14:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.251.0/24
                IPv6:
                  2620:cf:6000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400977

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:89:4b:56:42:fa:cf:0b:d7:f9:b9:ca:8d:af:5d:41:41:6b:
         1d:fd:5b:3d:d4:e5:cf:82:33:44:1d:e5:fc:7f:d4:8e:0c:13:
         7d:90:38:40:37:ce:57:3b:9b:51:39:05:2e:30:63:8c:c0:67:
         d6:db:ff:2c:b2:8d:1d:3a:41:bc:01:58:32:d9:8d:24:ef:95:
         0d:71:32:d1:cf:42:29:2b:65:e4:1f:13:4c:6e:b0:92:d0:ca:
         46:48:c1:a7:bf:59:50:9f:16:34:8d:26:40:f2:d5:d6:59:f6:
         77:a4:31:ce:c5:1e:bb:d3:b3:0b:ef:fb:c6:b5:eb:c6:92:95:
         0d:90:ef:9a:b8:bd:a3:f7:09:98:b7:9b:c3:a4:0c:40:4e:06:
         84:b8:f6:78:da:4d:6d:fc:20:cf:74:ee:53:05:10:75:03:62:
         73:12:b0:12:16:e6:a6:eb:35:1e:e5:66:5c:80:09:08:1c:27:
         c4:49:a6:97:44:98:3e:de:70:9f:bd:57:bc:00:dc:22:10:3f:
         59:bf:b9:44:3d:fa:a3:62:4a:66:32:51:8c:9a:e9:59:8e:31:
         e3:50:e3:6c:e9:42:af:e9:d7:be:04:ca:58:83:af:9a:cf:22:
         c9:b0:39:7a:ae:95:91:3d:2c:49:20:11:e4:ef:66:4c:8a:b7:
         6c:d5:b5:c5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----