Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360.cer
File:                     9a69b8ce-24da-41b3-a08e-48d64c967360.cer (raw, json)
Hash identifier:          mKQxlZfiXuoueu4j21AcfI+qPN+gaBSvsqVI62NO6Co=
Subject key identifier:   C4:6F:69:64:7F:26:E4:FD:96:ED:01:EC:D2:03:4C:0F:72:BC:22:EC
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858479AA447EF77329602E4B69400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 20 Oct 2024 12:45:26 +0000
Certificate not after:    Sat 23 Jan 2027 13:45:26 +0000
Subordinate resources:    IP: 104.254.208.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:a4:47:ef:77:32:96:02:e4:b6:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 20 12:45:26 2024 GMT
            Not After : Jan 23 13:45:26 2027 GMT
        Subject: CN=9a69b8ce-24da-41b3-a08e-48d64c967360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9f:55:ce:37:39:a9:e2:07:2c:79:78:9c:4d:
                    e2:22:61:c4:48:95:42:b6:f5:73:72:7e:77:c7:63:
                    3d:12:61:b7:89:75:0b:fd:b6:a2:07:28:c9:8c:32:
                    0a:e0:99:13:a7:84:89:75:17:12:e9:f4:37:5e:7e:
                    b4:5e:03:8f:d5:3c:5a:8d:83:ed:23:56:bc:ab:4f:
                    f3:27:d2:dc:6a:e4:f2:f1:2f:5b:6b:28:d4:bd:37:
                    de:a7:ce:b4:6d:4f:26:2f:73:10:bc:1d:d5:06:ec:
                    21:c3:94:0e:93:96:3f:0d:0f:f4:74:fc:24:24:4b:
                    ad:26:83:90:1d:d4:9f:93:e5:45:08:f3:ae:d0:99:
                    1d:2f:7e:41:8f:57:20:98:b0:15:db:6c:b5:ca:39:
                    fa:d8:9a:cb:b6:63:c4:d9:e0:b7:80:02:ed:90:de:
                    84:a4:01:11:65:7e:e9:26:8d:3d:41:52:1b:84:1b:
                    a2:c3:e0:4b:91:af:6d:35:a2:ee:4b:8c:95:9e:6f:
                    91:88:68:5d:91:fc:f0:25:cc:5b:cd:6d:65:fd:54:
                    f2:4c:5c:12:15:b2:5e:41:8a:5d:e0:bb:12:26:92:
                    0e:92:0f:92:0b:3c:14:72:10:89:4e:21:ed:60:c2:
                    97:38:77:b3:3f:85:d8:23:be:95:bf:36:f4:56:78:
                    c9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6F:69:64:7F:26:E4:FD:96:ED:01:EC:D2:03:4C:0F:72:BC:22:EC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:00:2c:df:02:da:cb:24:84:7f:d0:fe:32:60:4c:38:21:84:
         94:94:08:bd:14:94:fe:6e:51:1d:fa:4b:31:42:35:1f:7f:dc:
         f7:d3:5c:a1:40:b5:78:65:13:b8:0f:75:e0:0c:0a:50:34:ce:
         41:5f:3d:6b:39:e7:5f:8a:ed:7f:84:e0:86:78:ce:8b:cf:80:
         b4:52:49:1b:52:ad:e1:7c:e0:04:cd:ac:0a:55:e4:56:13:9d:
         63:5b:1c:95:22:56:76:66:6c:f0:31:3e:7c:44:94:6e:eb:ca:
         58:7a:08:7b:28:3d:d9:69:7c:e1:3f:30:b7:c1:5c:6f:6c:cf:
         f6:0f:01:03:e0:ff:ae:10:53:a4:ed:38:50:27:f8:69:8d:4a:
         98:7a:c5:5a:ee:d3:d2:3e:4c:39:b5:3d:ea:f8:ce:e0:01:ec:
         77:0c:c3:14:87:88:22:9d:e7:bd:0c:15:4b:97:0a:61:f5:7c:
         7a:24:65:84:7d:47:f7:c0:b7:f1:e7:02:d5:65:f7:74:40:37:
         02:88:50:2b:1e:ad:cc:81:bf:d7:05:a2:33:9a:53:80:02:c3:
         08:08:8b:86:63:57:dc:ff:e7:7d:8d:d7:ba:e6:03:2a:6e:0c:
         7c:e3:c7:9a:07:61:63:13:6d:ef:88:3a:93:b2:33:d7:17:71:
         98:56:10:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----