Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5.cer
File:                     c9b25b49-5563-464e-8e82-a149898329f5.cer (raw, json)
Hash identifier:          heIaEwBPfbtHbGxFPABe6DhaQ95S+6OjFc6hIZ92qfY=
Subject key identifier:   DD:2A:1C:AF:F1:17:17:D4:F7:08:B8:28:BB:39:8E:D0:6E:70:7E:48
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285846A392ADF10D168B13B1E24FC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5/c9b25b49-5563-464e-8e82-a149898329f5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 24 Jul 2024 00:45:18 +0000
Certificate not after:    Tue 27 Oct 2026 00:45:18 +0000
Subordinate resources:    AS: 62584

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a3:92:ad:f1:0d:16:8b:13:b1:e2:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jul 24 00:45:18 2024 GMT
            Not After : Oct 27 00:45:18 2026 GMT
        Subject: CN=c9b25b49-5563-464e-8e82-a149898329f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:81:45:71:14:56:bf:c1:9a:6b:84:9a:50:
                    9f:2f:8c:34:af:71:48:58:61:65:1c:bc:14:96:19:
                    db:e5:a1:48:81:a5:ba:60:6d:18:71:8a:c3:cf:06:
                    54:d6:4a:49:84:7a:07:58:e0:5b:c4:1d:8a:b3:1c:
                    88:a8:a6:f8:cc:45:fe:a4:4d:99:e9:40:34:84:07:
                    d7:8c:08:71:a9:2a:bb:c0:5b:37:d3:1e:79:57:4b:
                    91:b2:01:97:bf:37:4c:a2:a9:b1:63:1c:10:79:72:
                    ec:24:77:d5:33:d0:b6:73:19:c1:11:2f:a9:a1:ff:
                    58:6f:29:fc:ac:aa:44:5b:67:1c:29:ef:bb:db:b4:
                    4a:2b:fc:5c:bb:2a:14:e6:17:2d:61:d3:36:76:72:
                    b9:1b:b4:52:52:46:99:45:03:af:04:cb:23:f2:81:
                    94:2f:32:ef:f6:90:bb:2a:01:82:6e:4a:c8:5f:81:
                    7f:92:12:c8:bc:f0:2f:81:87:0c:b6:a1:c5:b2:5b:
                    43:61:35:45:ef:8f:02:94:f7:2d:94:b6:1f:3a:26:
                    e9:78:66:35:50:78:f0:5d:a7:43:06:17:74:1b:e2:
                    bf:1d:5d:5c:6e:7a:dc:90:12:3d:7b:fe:3f:c2:6c:
                    07:2c:0b:5c:59:7a:25:06:60:b3:95:9e:66:2f:69:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2A:1C:AF:F1:17:17:D4:F7:08:B8:28:BB:39:8E:D0:6E:70:7E:48
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5/c9b25b49-5563-464e-8e82-a149898329f5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62584

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e0:23:77:1e:74:4b:b4:47:37:b3:f2:e5:23:f4:1d:5a:9f:
         ed:ac:74:66:52:82:f0:fc:41:3a:9a:5a:c9:76:2e:8f:2b:39:
         04:8f:c0:43:b4:61:8e:a8:fe:0a:6d:d0:6f:ba:c1:c8:0d:0a:
         c1:10:9f:2f:76:c3:7c:55:0b:ac:08:4a:54:bf:9d:8a:ac:56:
         4a:e6:f2:68:d8:9e:9b:15:b0:e0:70:19:13:0e:91:da:66:9a:
         26:d5:3e:bd:07:5b:a1:ef:5f:c0:fa:2c:1f:bf:05:75:43:c1:
         b5:b6:5d:2f:a9:12:0b:5d:08:49:fb:46:f8:0b:1b:6b:d4:02:
         eb:40:84:45:42:ee:9a:52:d8:2d:e6:16:7b:09:51:38:ed:7b:
         56:72:98:4c:db:a5:09:a4:b2:6d:18:d3:2f:f8:ae:15:0a:fb:
         24:c7:91:26:49:47:b4:14:de:dd:8c:3f:48:88:29:f3:54:f8:
         e9:1b:45:8f:bf:69:a3:76:d8:88:bb:51:75:60:e2:53:6b:9a:
         6f:df:66:e0:a5:6a:1a:3a:ce:3f:0d:60:5b:d0:c8:25:1c:8b:
         f4:38:dd:ec:50:1d:94:23:6f:8c:43:fd:4a:fc:07:ef:59:62:
         83:32:8e:cb:cf:6c:1b:5f:e5:c6:db:54:53:b6:f8:5e:d9:8b:
         b3:b1:3b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----