Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698.cer
File:                     1786b8ab-4949-4959-b26b-aaad20b28698.cer (raw, json)
Hash identifier:          T9desxIGPuj7HScbWr0Lf1zD+OfV0zNIRWkvEPIIZbw=
Subject key identifier:   E5:C0:98:4B:BF:62:F3:EA:E8:A5:A5:5D:EE:E8:D8:5A:96:12:ED:47
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847C8D266E955709D381BF0F320
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/1786b8ab-4949-4959-b26b-aaad20b28698.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 06 Nov 2024 01:45:33 +0000
Certificate not after:    Tue 09 Feb 2027 01:45:33 +0000
Subordinate resources:    AS: 20356
                          IP: 2607:640::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d2:66:e9:55:70:9d:38:1b:f0:f3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Nov  6 01:45:33 2024 GMT
            Not After : Feb  9 01:45:33 2027 GMT
        Subject: CN=1786b8ab-4949-4959-b26b-aaad20b28698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f4:c2:55:46:10:c4:d5:2e:3d:5d:57:23:15:
                    2e:73:b4:ce:32:f2:49:89:f5:18:05:85:9b:10:f5:
                    34:19:78:fc:4b:ae:a3:c9:11:f2:d1:2d:cc:74:b6:
                    8f:25:e6:98:6f:41:dc:53:4c:87:66:69:21:96:8f:
                    fe:66:0c:44:ca:02:2b:de:a6:a2:04:35:c9:aa:97:
                    f5:b4:1a:c6:bf:e5:3b:15:ed:bd:4d:0e:de:a9:92:
                    9f:f2:89:f8:87:f0:5f:39:b8:0c:f1:5f:77:64:a8:
                    39:f5:d5:54:ca:af:bb:90:a3:de:4b:84:34:08:60:
                    4b:4b:f4:cf:a1:2c:92:ba:c1:8f:50:76:93:e2:8f:
                    03:7b:2a:0a:7c:c5:eb:f1:b6:43:25:44:03:81:6b:
                    4d:d0:cd:06:50:a2:0f:34:2d:17:7f:0a:b2:02:42:
                    d4:0c:82:1b:d7:23:c1:1e:4a:7c:80:c8:16:ce:61:
                    6f:74:3a:0d:c8:2c:11:56:ba:93:71:7f:11:b7:82:
                    7c:f5:05:5b:90:2d:65:27:42:d5:7d:2d:f2:8a:cb:
                    35:c7:54:ea:36:6e:b0:c2:0a:11:a7:04:19:07:b2:
                    52:cc:71:17:40:8b:0c:5f:3d:31:81:f8:5b:9f:30:
                    10:8e:ce:4b:b8:7a:22:95:6f:a7:00:1b:58:70:37:
                    cd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C0:98:4B:BF:62:F3:EA:E8:A5:A5:5D:EE:E8:D8:5A:96:12:ED:47
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/1786b8ab-4949-4959-b26b-aaad20b28698.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20356

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:73:3a:04:fb:b7:22:67:0f:de:13:f2:31:e7:37:e4:e1:87:
         dc:1c:6c:43:5e:91:a5:c3:f2:ef:fe:a8:b0:27:1a:24:98:ed:
         a8:26:b2:43:89:02:83:cb:8f:67:2f:ca:09:23:81:3f:bb:fa:
         79:e4:05:1e:a3:ff:3d:54:ff:81:db:4b:3b:c0:3c:20:7e:7f:
         0e:12:70:09:36:1d:c7:0e:99:ef:3b:64:f9:7c:55:a8:52:ae:
         ef:fa:5d:44:e8:0b:b1:fd:26:ef:3c:62:f9:ba:ee:a3:d9:cf:
         9a:02:a1:f9:5f:7c:10:47:a9:15:c7:ae:b5:bf:df:66:91:29:
         62:da:67:c0:97:18:a6:f1:18:4b:c4:10:1e:ef:bf:8b:b7:30:
         9d:c2:6b:cd:9f:14:3e:d2:e3:05:d5:ce:e9:d5:d9:8e:a8:c5:
         1f:41:17:1c:03:de:2f:b3:71:37:28:b1:a3:89:23:f7:fa:50:
         e1:01:a4:c8:18:c2:ab:02:04:8a:38:01:53:59:fe:de:69:70:
         a2:e5:49:0f:b2:b0:f2:2c:fe:0f:ac:b2:de:31:cd:9e:0d:c0:
         09:b6:a2:0e:ab:9e:ba:ac:3a:cb:9e:1b:b7:14:26:b2:a0:86:
         d5:34:9e:44:09:aa:d8:37:e3:32:70:1b:69:c2:f1:93:e4:fd:
         c8:99:f8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----