Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
File:                     09c51633-340e-4eac-820c-a36b33746085.cer (raw, json)
Hash identifier:          77/+GyQGnKZyp/zH9E5+u3du8fhPYVvLRVLTyCVKnEo=
Subject key identifier:   58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858473FE90D205C5F488DAB103F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 18 Sep 2024 00:45:26 +0000
Certificate not after:    Tue 22 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 13928
                          IP: 199.21.128.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:e9:0d:20:5c:5f:48:8d:ab:10:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 18 00:45:26 2024 GMT
            Not After : Dec 22 01:45:26 2026 GMT
        Subject: CN=09c51633-340e-4eac-820c-a36b33746085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:69:14:b9:4b:7d:c3:1c:da:46:f5:04:90:0c:
                    15:cf:9a:3d:47:8e:f2:44:ff:b3:f2:c7:8a:f2:06:
                    d9:c2:e5:48:21:30:fb:7b:3d:41:64:c1:88:6a:b4:
                    36:c5:85:6f:da:22:71:c7:19:0a:9b:ac:e9:78:aa:
                    f6:54:a3:d8:d9:b3:55:6c:89:cd:0e:98:bc:0f:48:
                    0e:47:11:c8:bf:e6:48:ec:0b:b0:0d:20:28:14:c8:
                    f9:cd:84:c1:74:10:42:94:dc:f8:5a:61:25:de:00:
                    79:8d:9a:92:5a:fe:09:69:a0:ce:8c:fc:dd:23:36:
                    8b:57:99:c3:6d:50:b5:05:e9:1b:6e:47:17:48:4c:
                    77:69:ad:52:4e:6b:3b:09:0c:b0:a8:8f:e8:6e:36:
                    13:5b:bf:b6:10:11:ed:ee:7b:e1:d9:64:6c:dd:e8:
                    ff:cf:b4:0a:81:86:fe:d9:45:8e:15:c7:e5:ed:b7:
                    fe:23:3d:c1:2f:87:70:3c:09:6e:98:dd:ea:42:cc:
                    5c:d1:db:07:c3:d1:99:46:67:95:d7:d0:c4:d4:bb:
                    ae:24:a8:8b:f0:ac:f9:de:a3:1d:71:6d:7c:3e:bc:
                    50:3d:86:6a:f7:c2:f2:fd:f0:d3:c0:35:f4:da:b2:
                    81:72:dc:7e:e8:c3:55:b1:4a:e7:c3:76:f4:1b:fd:
                    2b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.21.128.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13928

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:8c:4e:27:64:f6:b0:4a:fe:99:52:2d:76:ea:1d:47:ad:9c:
         e8:ee:63:e8:33:cd:42:06:2e:15:00:b5:79:67:cd:ad:ba:99:
         a4:38:b1:b8:da:49:e7:8c:91:59:a1:d4:af:17:58:fc:dd:9e:
         d5:45:fc:3f:2d:2f:ba:27:88:2f:89:80:bf:02:71:a0:e6:ce:
         d7:01:e5:17:a1:06:7b:88:41:8f:cc:ce:c6:1c:b5:32:d3:14:
         0e:04:9f:51:99:76:49:cd:db:67:4d:e9:c1:5e:d0:a4:e0:6d:
         e6:8f:e1:a3:bb:d6:ac:ae:8a:7d:2d:65:7a:cb:cc:6f:17:5e:
         e7:4b:86:ab:53:35:f5:34:25:99:65:d8:8e:b6:d0:8c:25:93:
         bd:63:d2:55:eb:4f:69:ea:51:f7:cb:2d:40:31:2a:ae:cd:2a:
         2b:35:df:bd:da:8f:97:c0:46:f5:b3:19:ac:1b:3a:c3:d4:13:
         6a:d4:5f:62:c3:46:cc:a6:56:e5:7c:c7:4f:28:6d:5d:d5:e0:
         7a:97:3f:b8:64:c3:11:bb:37:1e:28:66:b6:24:e8:58:97:7f:
         49:36:52:e5:c9:d1:e9:c0:8e:f4:68:a9:4e:e2:b2:df:59:90:
         39:2d:00:3f:00:90:70:01:9e:3e:cb:cd:68:77:5e:8c:ee:88:
         b1:0a:6a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----