Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer
File:                     2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer (raw, json)
Hash identifier:          Pg3IBpVOnqFmqULsHP9WiJNZrBMriNagEDzDex4quto=
Subject key identifier:   8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584754D92F80A26E9FDC7386D460
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 25 Sep 2024 12:45:27 +0000
Certificate not after:    Tue 29 Dec 2026 13:45:27 +0000
Subordinate resources:    IP: 23.155.248.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:d9:2f:80:a2:6e:9f:dc:73:86:d4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 25 12:45:27 2024 GMT
            Not After : Dec 29 13:45:27 2026 GMT
        Subject: CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d0:0e:f7:c2:b3:61:96:a3:48:d0:28:ea:69:
                    99:1e:76:5f:2d:c5:5e:06:6f:cd:a7:1e:bc:45:29:
                    38:ac:97:29:e5:82:c9:69:7c:9f:a6:aa:7a:03:54:
                    8a:6a:4d:28:d4:98:eb:32:6f:23:4f:39:bd:26:a9:
                    b2:0d:72:58:40:b1:e8:fd:eb:40:a5:a4:98:1b:72:
                    8b:f7:50:1f:d7:8e:65:b3:cc:03:a5:2d:0d:e7:26:
                    46:20:53:43:a4:9a:78:16:b5:97:39:30:b9:01:e5:
                    91:1d:66:1e:c1:1e:29:09:a1:0c:c9:c9:18:1b:32:
                    ed:dc:c7:b9:65:03:97:1a:a3:62:f5:0e:bb:f1:34:
                    d7:3e:dd:85:3e:ff:4f:7f:a3:66:d4:97:14:f5:7b:
                    46:40:d1:46:29:46:f1:12:8a:48:60:ed:46:9f:eb:
                    44:6c:91:37:8f:8d:6a:eb:ed:27:a4:db:2c:56:d0:
                    83:3a:f9:9b:87:1e:98:10:c4:f2:4f:e3:20:52:a5:
                    fd:8c:71:32:f6:3f:1c:e1:f9:42:1a:70:c2:29:65:
                    5e:9a:02:c1:ec:c3:ab:92:26:fa:af:77:32:79:e9:
                    cc:b7:90:0e:80:fe:27:7d:2b:34:48:b1:36:52:f3:
                    22:8e:8a:e4:d4:f9:80:d9:f3:ea:e4:0a:8f:95:2a:
                    0b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:4a:b0:df:1a:5b:80:75:68:c4:bf:4b:d8:aa:5f:94:db:4f:
         d8:00:e7:8b:11:bc:01:be:4f:fe:41:79:b8:d5:d5:23:80:a9:
         b4:58:f2:3c:64:60:77:f6:86:ec:fc:af:e1:fe:b9:cb:53:75:
         04:d0:5a:19:0f:09:a4:34:a7:0b:b6:2b:48:ec:04:e5:b7:f0:
         49:c4:f5:ad:65:73:f7:fe:b1:e4:86:cf:02:c1:ba:ce:54:b8:
         c4:c5:7c:87:cf:28:e9:cf:d3:52:41:fe:df:3b:53:8b:3d:61:
         a6:78:54:73:8d:23:1b:5c:d5:fb:8d:67:f2:08:46:85:d9:f0:
         e8:34:b8:d2:30:05:c6:c9:de:e3:ac:b4:f8:4c:a4:5b:ba:e4:
         00:51:56:46:7e:94:72:8b:2d:f8:6f:cb:ad:ed:d8:c6:0a:3f:
         59:4f:d6:8d:52:26:09:fb:20:29:94:3f:e6:8b:2b:00:ac:a0:
         d3:e7:f4:a1:ca:e7:d0:ce:b6:56:aa:60:c8:c6:90:55:0f:64:
         ed:68:49:b0:ba:34:f5:6a:b5:e5:ba:99:ac:3a:05:cb:aa:07:
         41:89:04:96:4f:14:d2:19:be:58:99:79:bc:e6:d4:bb:fc:04:
         81:42:38:9f:56:af:67:65:63:f1:27:39:bb:e4:4c:40:20:d9:
         3e:27:5d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----