Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer
File:                     d49742e8-8d0c-4209-b76f-403554b0e6b4.cer (raw, json)
Hash identifier:          B7w8B6u3wRODV4jQ47SOBN6DDhYzmNEBQzNJWFgMXs4=
Subject key identifier:   C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858474F43CF3FC8000995F0B02780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 23 Sep 2024 12:45:26 +0000
Certificate not after:    Sun 27 Dec 2026 13:45:26 +0000
Subordinate resources:    AS: 992
                          IP: 198.169.173.0/24
                          IP: 2602:810:5000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:43:cf:3f:c8:00:09:95:f0:b0:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Sep 23 12:45:26 2024 GMT
            Not After : Dec 27 13:45:26 2026 GMT
        Subject: CN=d49742e8-8d0c-4209-b76f-403554b0e6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:0a:7e:99:c1:9d:65:48:2d:79:fb:48:95:
                    72:d1:3d:d9:89:07:af:e0:ca:24:9a:9c:8b:12:48:
                    8f:d1:b8:41:20:07:9d:9a:7d:50:cd:9a:df:9b:ef:
                    1e:06:3a:8e:dd:f1:5b:5e:90:39:9a:15:95:c6:04:
                    5e:5f:6d:b9:45:61:d8:a6:ff:3b:67:9d:aa:35:d7:
                    e0:72:60:fa:02:8e:15:f8:45:38:6a:ce:2c:ea:01:
                    ff:93:aa:6d:36:3b:4d:96:ea:f5:ac:29:30:cb:4e:
                    f4:b6:41:99:a4:56:92:59:ca:f0:20:0b:f1:15:02:
                    3b:22:57:49:25:5a:75:da:dc:11:a2:0f:5b:e9:c4:
                    ec:52:c4:b1:ba:d7:b2:6c:ee:bf:84:ba:8b:00:f2:
                    c9:1b:67:57:d7:2e:2f:81:8a:fb:78:bb:e6:ec:e5:
                    bf:15:13:10:2a:87:5a:f2:33:2a:2f:44:ea:c2:ed:
                    75:b0:8e:97:2a:af:c0:be:d8:37:11:2c:48:74:17:
                    06:b4:ec:c9:86:d1:3c:27:d9:f7:42:de:0f:00:a6:
                    b2:a2:55:bf:94:c9:cc:5b:14:fb:6d:0e:50:83:1b:
                    e7:6c:03:a2:f4:b7:10:a5:bf:9f:12:d2:94:39:c3:
                    e7:da:f1:0d:0f:a8:d4:bc:de:40:9d:ca:b3:d8:fc:
                    4e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.173.0/24
                IPv6:
                  2602:810:5000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  992

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f0:64:b9:ce:58:49:6f:2c:83:e7:90:d3:a1:a0:e0:5a:63:
         64:8b:5b:32:e6:89:cd:73:d5:49:a3:bc:0f:b4:6a:49:43:33:
         0a:d8:4d:59:0c:dd:29:c2:c4:d0:a7:b1:dd:17:a8:31:d4:66:
         9c:79:df:f5:b9:e9:c6:bb:23:bb:72:b2:cb:ff:51:99:6e:69:
         ff:db:82:b2:67:4e:0b:3a:1f:37:b6:7d:ef:91:b8:2c:73:77:
         a4:03:8d:cf:c3:75:70:a3:fe:f9:20:19:ae:6f:ea:7d:bf:1f:
         2a:10:97:87:ef:fb:1c:60:1d:1b:8c:34:eb:09:f5:b6:fc:33:
         fd:86:da:c9:d8:b5:e0:eb:ed:58:98:c4:3a:8c:a1:0a:e9:9f:
         e8:54:64:0e:10:e7:53:93:8a:1c:73:07:7a:7f:c7:41:e9:b0:
         57:4a:5b:74:98:9d:18:f6:27:4b:9e:84:f1:21:c7:b3:7a:1f:
         00:a5:26:ff:13:7c:4c:ee:38:9d:fe:74:9a:d4:62:fd:55:5d:
         02:76:a6:c5:48:9d:eb:e3:6d:6c:5a:77:d5:6a:cd:31:7a:ad:
         77:15:89:c6:0a:61:0b:c1:3b:52:f4:05:a0:0f:08:75:44:e5:
         e2:e6:92:e6:b9:b5:ee:11:cb:ae:3b:c6:07:4e:47:32:4c:d9:
         ce:e4:bd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----