Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571.cer
File:                     b764fe0e-08f6-4216-a719-1ca6386e5571.cer (raw, json)
Hash identifier:          rYWGGOC8hwK1Irq9MHoTef3Bp/5Wp7ItwJTd4c8iB7k=
Subject key identifier:   71:B4:5B:6E:B6:C0:E6:28:8D:F0:09:60:B4:B1:71:14:8F:E1:CB:F0
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584790DEE3C911462B6AA6003280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/b764fe0e-08f6-4216-a719-1ca6386e5571.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 17 Oct 2024 00:45:26 +0000
Certificate not after:    Wed 20 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 400862
                          IP: 209.188.110.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:90:de:e3:c9:11:46:2b:6a:a6:00:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 17 00:45:26 2024 GMT
            Not After : Jan 20 01:45:26 2027 GMT
        Subject: CN=b764fe0e-08f6-4216-a719-1ca6386e5571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:d2:f6:de:fa:dc:e5:bd:2d:3f:f9:a9:f9:
                    a0:9a:fa:2e:81:3e:a3:61:b0:fa:bb:fc:a5:29:03:
                    8a:1d:b7:f5:be:56:28:49:07:b3:23:fb:ca:c5:b6:
                    34:88:54:8e:de:69:45:c1:a9:47:f5:62:a2:88:8a:
                    a6:ac:43:34:a6:3e:20:4f:18:fc:f1:b1:4a:d1:6f:
                    99:aa:af:ad:bc:af:c9:b5:7c:39:7f:d0:bf:47:69:
                    06:b8:68:30:ef:a3:f8:1f:a5:84:1e:4e:3a:2e:1d:
                    6c:33:d9:4c:ee:df:d6:c6:28:4b:1e:df:36:d7:70:
                    75:8d:46:a7:2c:38:ac:2d:4f:ca:be:5b:8d:f6:07:
                    41:24:2e:51:c8:44:11:cb:45:a7:26:db:91:52:79:
                    93:1c:95:ee:15:3c:28:1d:51:a8:8b:16:82:b1:32:
                    7c:6c:ef:79:eb:0a:4e:9f:f9:1c:63:9a:85:4b:4c:
                    d1:52:2f:f3:19:ff:e0:24:1c:6c:2f:ca:5b:47:2a:
                    70:fd:e0:7e:0b:83:9e:de:5f:85:0d:e7:8a:84:d5:
                    a1:9c:83:aa:05:41:0e:01:a5:28:50:7d:2f:c1:8b:
                    b9:25:dd:e8:77:0d:88:1e:40:a7:8d:b8:ba:19:fe:
                    84:7e:6e:70:17:75:81:02:ab:25:31:b2:bf:b3:8c:
                    e1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B4:5B:6E:B6:C0:E6:28:8D:F0:09:60:B4:B1:71:14:8F:E1:CB:F0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/b764fe0e-08f6-4216-a719-1ca6386e5571.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.110.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400862

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:cf:d0:29:03:3c:1e:36:d6:3e:86:86:97:22:a8:76:48:db:
         e9:d0:ee:92:16:77:6f:2b:02:8d:03:66:fb:d4:fc:c1:19:15:
         67:17:d9:15:36:38:00:ac:bf:92:df:3f:11:01:7f:1b:3a:2f:
         f5:c4:96:b8:11:64:a4:51:a2:95:34:60:40:0c:4d:cc:82:9f:
         41:07:0e:bd:e6:f5:bf:2d:6c:86:e5:90:cd:92:55:6c:dd:5a:
         f2:d5:36:1f:3d:c3:80:75:69:97:2f:ce:22:90:2d:06:58:87:
         db:2b:57:78:67:49:dc:56:06:95:9f:60:17:de:74:db:88:29:
         3a:9f:f4:39:2f:58:83:c7:db:2a:42:7d:71:70:41:c3:57:2f:
         55:24:e0:4f:eb:f1:cb:b5:a7:a9:6c:cd:cd:dc:cb:87:35:cd:
         16:dc:dc:40:a7:ad:62:90:a8:57:c7:90:1c:41:24:99:c2:11:
         53:1b:d5:f7:50:19:2f:71:4f:ae:f9:6f:ca:13:4d:7a:b9:4e:
         44:75:ac:15:1f:5a:42:cc:d5:75:a5:78:4f:90:b9:63:5f:a9:
         55:99:a0:cf:05:6c:72:fa:1e:9c:d3:ce:c9:04:28:e3:ef:97:
         41:65:85:75:fc:02:3c:7a:43:04:d2:fe:b2:33:5a:d1:f1:be:
         ef:4c:24:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----