Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e.cer
File:                     71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e.cer (raw, json)
Hash identifier:          QXcny9neuO8BvsiYwr825ohZ2UKQjEGpoUXNsHYwL+c=
Subject key identifier:   FC:72:45:E6:31:BF:30:E5:AF:54:94:5A:DA:17:2A:0C:E7:D2:96:A5
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847520E7FC2E690D1B6AD12BF80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 24 Sep 2024 12:45:27 +0000
Certificate not after:    Mon 28 Dec 2026 13:45:27 +0000
Subordinate resources:    AS: 399894

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:0e:7f:c2:e6:90:d1:b6:ad:12:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 24 12:45:27 2024 GMT
            Not After : Dec 28 13:45:27 2026 GMT
        Subject: CN=71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:86:70:03:1a:a6:3e:2a:f4:b2:6c:cf:1d:0d:
                    a9:e4:f8:d8:1f:92:58:a8:0c:d2:2b:f7:db:68:91:
                    4c:73:0d:56:72:26:a0:53:3a:6e:36:03:15:bf:7b:
                    42:73:f9:7b:82:2c:f8:08:f0:45:e8:77:0e:27:43:
                    36:28:7f:a6:45:33:1e:c3:e6:0b:32:d2:09:1f:61:
                    12:fb:c4:3f:97:4f:3b:c2:96:b5:62:c4:b1:a1:83:
                    89:34:a9:29:9b:ff:c0:97:51:ef:9e:a8:c2:69:e9:
                    1b:8e:d2:06:01:5f:ef:63:60:06:2f:0c:3f:68:1b:
                    53:f6:bc:d6:fb:b2:43:80:c8:83:b7:1d:4b:91:0c:
                    57:82:2f:9e:10:9f:ac:6c:d9:f5:dd:38:65:5b:df:
                    77:22:39:03:17:75:bd:b0:a2:c5:4f:11:37:df:85:
                    38:ac:0c:03:2c:bc:d1:f0:40:aa:9a:44:ce:a7:d8:
                    62:0b:39:83:2b:30:07:7f:ae:72:d8:74:b1:74:4c:
                    a3:08:03:52:d9:bf:22:d0:37:01:75:a6:63:20:65:
                    b9:5d:94:d9:0a:4e:9a:66:83:59:3f:1e:f3:cd:51:
                    07:46:e6:f0:12:a7:4e:93:eb:9d:4f:52:83:3f:be:
                    76:93:66:0a:aa:c5:18:e8:00:cc:50:71:57:3a:45:
                    dc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:72:45:E6:31:BF:30:E5:AF:54:94:5A:DA:17:2A:0C:E7:D2:96:A5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399894

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:8a:56:56:a5:96:f5:1c:e0:b7:11:18:2c:53:ba:41:9b:ca:
         5a:af:4f:ef:82:d9:0b:6e:90:9d:f8:54:14:f3:44:af:36:1f:
         8d:ca:96:bb:66:96:2b:0c:8c:44:e0:71:c1:fd:b5:00:2f:7b:
         81:f5:26:b0:bc:59:76:b6:da:b1:e6:09:bc:49:76:e5:a0:d6:
         b9:0f:87:01:5f:b5:fc:f5:ec:44:dc:6e:f9:15:cc:82:81:c0:
         39:5c:3d:33:7a:b8:16:03:70:68:91:b1:74:54:6f:4f:77:e8:
         a6:70:8d:fc:cf:5d:92:bf:b4:3f:25:16:59:04:46:6f:c1:31:
         47:8c:3f:b6:d1:bc:b9:3d:ef:70:f7:49:ea:9c:ea:7f:92:b5:
         a3:d3:dc:77:09:1f:9b:22:c9:78:2a:b2:d3:38:76:b4:f9:7b:
         a3:fa:31:eb:99:4f:bb:df:07:a1:2e:13:5c:3b:97:e0:96:14:
         e9:71:6b:89:a4:00:d2:80:c9:c0:38:16:fb:e4:aa:4d:d1:9e:
         99:d6:f4:ab:4b:79:81:8f:d2:dc:f9:8a:ee:c7:e6:51:79:16:
         22:a5:4d:92:ff:4c:83:9e:0c:0c:98:f8:e4:5a:70:ca:10:56:
         97:d2:71:42:b9:65:72:fe:86:bc:fd:5b:e4:5b:73:f2:e7:64:
         de:83:31:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----