Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2.cer
File:                     5a6a0d9b-43c3-4b62-be66-8371865622a2.cer (raw, json)
Hash identifier:          TuehhOiW95nYiyQrqTJpZ/TBe3DQ5C3KnRTv2ZhLr40=
Subject key identifier:   76:0B:4A:3F:E4:1A:8F:F1:22:77:CD:CC:39:1E:0E:7B:5F:AA:F1:A6
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847632ADC015ABDF27EF6468CC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/5a6a0d9b-43c3-4b62-be66-8371865622a2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 30 Sep 2024 15:51:20 +0000
Certificate not after:    Sat 12 Dec 2026 01:45:27 +0000
Subordinate resources:    AS: 46410
                          IP: 45.62.224.0/19
                          IP: 206.168.69.0/24
                          IP: 209.71.0.0/19
                          IP: 216.36.192.0/19
                          IP: 2607:3940::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:63:2a:dc:01:5a:bd:f2:7e:f6:46:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 30 15:51:20 2024 GMT
            Not After : Dec 12 01:45:27 2026 GMT
        Subject: CN=5a6a0d9b-43c3-4b62-be66-8371865622a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e0:17:0d:9d:1b:ee:6f:92:e7:06:0a:61:81:
                    8f:c3:de:08:45:b4:6e:0a:4a:5a:ab:49:a2:e9:e4:
                    89:8e:f9:c2:24:8a:89:7d:02:8c:55:bc:84:29:d6:
                    6c:80:b6:bf:21:67:34:e6:a2:ee:8c:ee:a3:ae:9c:
                    04:cd:7a:90:36:da:6d:53:d4:32:ba:b5:63:6f:c3:
                    8c:7c:0b:79:ab:6e:f4:c1:44:5d:7b:1a:bc:f3:f1:
                    19:4b:5e:c9:69:b5:c6:eb:51:0a:8a:c9:8f:1a:35:
                    97:0f:b1:2b:a5:18:4d:6e:52:59:55:59:5b:7f:af:
                    e1:35:21:1b:5b:9a:5b:84:83:99:81:e8:7d:c8:5d:
                    b4:e8:79:0d:92:d8:dd:3c:a8:9d:6e:8f:9b:53:5e:
                    98:6f:2f:07:0b:6c:7d:ac:4a:a7:0e:f7:73:6b:0d:
                    7d:28:26:92:7d:10:62:c3:b3:db:39:2d:9d:1a:b5:
                    e2:41:4b:f3:e2:cc:59:53:2d:94:06:fa:48:46:94:
                    28:7a:a9:4d:3e:d0:6b:9f:8d:1d:7b:63:c5:bb:50:
                    bb:7f:ef:b9:5a:5c:0a:27:aa:19:e5:25:88:bf:43:
                    b7:54:85:40:6b:4a:11:e1:95:61:31:ee:7c:2c:86:
                    a3:16:eb:94:4d:56:2c:62:c9:c9:9c:ed:a6:c8:3f:
                    e6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0B:4A:3F:E4:1A:8F:F1:22:77:CD:CC:39:1E:0E:7B:5F:AA:F1:A6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/5a6a0d9b-43c3-4b62-be66-8371865622a2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.224.0/19
                  206.168.69.0/24
                  209.71.0.0/19
                  216.36.192.0/19
                IPv6:
                  2607:3940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46410

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:61:33:85:95:77:08:c0:e4:1c:0d:1e:5d:85:fb:76:61:11:
         a5:e1:65:06:1a:db:40:68:8c:00:26:2d:ec:fd:55:da:07:98:
         7e:bc:45:03:ba:99:9c:aa:46:4d:5e:ad:c7:ec:c8:de:fa:da:
         ae:91:2d:4d:a7:02:03:39:6a:b6:97:a1:74:26:dc:0e:b8:32:
         33:ce:f4:9b:24:8a:0b:32:cd:59:c5:00:29:d2:be:3b:d9:c7:
         ad:3c:08:cc:59:f1:15:5b:fe:9e:14:b9:d5:36:30:7c:61:93:
         8d:58:76:aa:98:bc:e5:62:00:04:3a:83:55:c5:d2:d9:d3:a3:
         87:75:0c:f9:1a:af:ac:c6:8a:d9:d7:01:4a:ca:c8:51:83:c1:
         60:eb:f7:f3:b5:46:db:1f:41:31:af:6d:28:74:21:28:d4:29:
         b6:8e:0d:8b:13:3a:c5:4a:8e:e0:1b:41:d0:77:f6:43:ea:7f:
         b6:56:2e:f7:25:0a:97:3f:af:ca:f4:3d:da:a6:f7:22:a9:b2:
         e3:17:0a:73:9c:61:bd:c0:c7:c1:cb:7e:37:c4:e4:ae:ac:fa:
         ad:6e:20:a8:4c:13:06:64:d7:d9:7c:9c:29:9e:d0:03:48:51:
         df:82:73:19:ed:b3:1e:7b:25:3a:23:8a:56:4b:c3:44:21:54:
         8e:62:fc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----