Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d9b1dbd-7ab5-41dc-a198-128264877240.cer
File:                     9d9b1dbd-7ab5-41dc-a198-128264877240.cer (raw, json)
Hash identifier:          xFfLuwoloW401JIEd8ALw4Y9r5V1OdcUllvZJ8O2AtQ=
Subject key identifier:   21:2B:01:88:E1:81:B7:E1:42:F5:D6:72:56:19:E8:51:7D:41:F4:8E
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584742B3BB45EEA6E2AECFD38900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d9b1dbd-7ab5-41dc-a198-128264877240/9d9b1dbd-7ab5-41dc-a198-128264877240.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d9b1dbd-7ab5-41dc-a198-128264877240/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 19 Sep 2024 00:45:26 +0000
Certificate not after:    Wed 23 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 32376

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:b3:bb:45:ee:a6:e2:ae:cf:d3:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 19 00:45:26 2024 GMT
            Not After : Dec 23 01:45:26 2026 GMT
        Subject: CN=9d9b1dbd-7ab5-41dc-a198-128264877240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:0e:95:ff:b9:30:d0:61:86:e8:66:7e:7b:
                    d5:eb:c6:f7:80:19:6b:2b:fe:e4:db:52:d9:07:88:
                    51:32:84:34:e2:19:13:a2:77:bc:44:c6:14:a6:7c:
                    c5:74:21:ee:9e:27:74:75:98:b0:ad:19:da:67:ad:
                    07:d2:14:b8:7f:0f:69:4a:40:0a:fa:fd:1c:97:82:
                    84:67:69:23:48:19:db:55:48:2f:8d:1e:06:b9:2e:
                    aa:24:56:f6:f8:43:35:7f:ba:d9:f3:64:ff:e7:47:
                    b8:ee:19:95:9a:03:4d:1f:19:fe:b8:0a:f6:0e:ad:
                    4d:1d:4b:a9:06:8d:5f:08:05:15:fd:95:a9:1d:51:
                    e0:8c:13:e9:5a:2b:28:70:1f:bf:ce:9e:4f:5d:13:
                    bd:d9:8c:21:06:c7:f8:72:11:f8:c6:a8:55:cf:57:
                    18:b1:90:7d:f9:41:bd:d4:d5:49:60:4b:2e:60:26:
                    32:79:11:e0:09:1d:58:fc:c1:c6:5a:4d:08:2d:62:
                    a8:22:b3:88:6d:bd:be:47:2a:00:f4:79:cd:e4:db:
                    ac:c1:a5:60:82:f1:03:bb:49:e1:fc:78:44:30:1a:
                    9f:91:19:eb:ed:81:ce:0b:77:bb:1e:39:b9:ef:db:
                    fb:bb:9d:12:a3:c6:18:d7:24:db:e2:b6:e6:5a:2d:
                    b1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2B:01:88:E1:81:B7:E1:42:F5:D6:72:56:19:E8:51:7D:41:F4:8E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d9b1dbd-7ab5-41dc-a198-128264877240/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d9b1dbd-7ab5-41dc-a198-128264877240/9d9b1dbd-7ab5-41dc-a198-128264877240.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32376

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:da:e8:cb:70:27:02:8c:b1:5b:da:e0:69:a4:71:6a:e2:14:
         66:d8:3b:47:09:dc:8c:19:72:c9:1c:d3:a0:25:9f:40:84:2f:
         5e:85:7c:91:29:39:b5:31:0c:81:6e:da:88:0f:d4:e2:a2:e6:
         e6:4a:5e:8c:a3:4b:0f:c2:cc:e8:b3:36:67:e6:78:43:48:10:
         c4:61:bf:74:a2:61:bc:fa:42:75:8c:6a:9c:20:1f:29:15:ba:
         ea:51:a5:92:ad:02:36:68:30:2a:40:87:49:ec:73:e5:48:76:
         8e:0b:b6:a9:cb:f1:e6:27:bc:f9:64:fb:c8:68:03:2e:2d:7c:
         57:ce:40:60:74:5f:5e:10:ef:e7:70:d6:8e:35:35:c3:dd:f0:
         24:f1:ba:13:88:f0:32:4e:53:e4:9f:cc:83:d0:00:88:12:89:
         86:b3:ed:d5:f3:69:b3:1c:b5:3d:92:bb:ad:c1:7e:85:54:5f:
         2b:54:0f:b5:df:ab:21:00:aa:ea:63:2e:3a:32:c5:e4:62:ae:
         cc:8a:70:ed:43:4d:15:40:87:95:fe:8a:56:d3:4e:eb:33:03:
         fa:18:21:ea:6b:cc:99:35:00:47:8d:e0:8c:77:0c:45:b8:6d:
         8d:11:cd:2b:3c:5c:f6:72:e4:7b:b5:c6:f6:47:85:91:fc:e8:
         b2:ad:d4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----