Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92.cer
File:                     c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92.cer (raw, json)
Hash identifier:          Q3kG4x1YAlu4a4bYCEz+oAdxsJfKlhZRWCZ+jbWT+zU=
Subject key identifier:   87:7C:67:99:50:4F:CE:A6:C9:1F:C0:56:69:1E:E6:A5:08:C4:7B:DB
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584793A99270C25A6C62710D6880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 18 Oct 2024 00:45:26 +0000
Certificate not after:    Thu 21 Jan 2027 01:45:26 +0000
Subordinate resources:    IP: 192.154.94.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:a9:92:70:c2:5a:6c:62:71:0d:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 18 00:45:26 2024 GMT
            Not After : Jan 21 01:45:26 2027 GMT
        Subject: CN=c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:04:a3:fc:5d:ce:6f:14:46:b8:10:81:10:
                    a4:cb:1c:93:78:f2:a7:08:82:2d:1f:fd:08:a6:7f:
                    7a:f5:23:6a:a7:6f:f9:5a:5d:16:10:d4:47:c9:71:
                    da:ab:78:01:59:bf:90:86:03:da:36:27:36:52:30:
                    4e:7c:99:2e:de:0a:3f:fe:3f:9f:a9:45:5c:4a:80:
                    77:f7:a5:28:35:2d:56:5c:9d:a2:c9:61:0d:eb:9f:
                    34:b1:4c:32:b5:69:e4:3f:93:57:ca:12:e9:51:72:
                    83:33:3f:c5:78:89:ff:1a:79:16:b2:54:63:1e:0b:
                    99:53:02:14:cf:9e:83:dd:ad:30:1e:7c:e9:28:b9:
                    ff:fe:89:ec:b5:35:57:5c:60:5f:1a:6c:c2:0a:e0:
                    02:18:e3:b2:4a:6a:bb:89:4e:e6:61:09:4c:0d:e0:
                    9d:eb:2b:1b:e4:d4:ad:56:98:29:8c:96:d1:f6:cc:
                    0a:cb:7e:a5:19:43:39:9d:68:67:4a:dd:fb:3b:9e:
                    3f:ee:4c:b2:4f:fa:0c:e2:63:7a:5d:cc:ba:23:45:
                    92:e9:a6:b0:6c:21:bc:f3:53:53:b7:bf:d3:78:23:
                    39:f2:8f:ba:76:e7:f6:71:7b:f2:5a:14:62:fd:a0:
                    ca:93:08:40:e6:de:ca:cd:2c:98:23:e1:66:88:13:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7C:67:99:50:4F:CE:A6:C9:1F:C0:56:69:1E:E6:A5:08:C4:7B:DB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:52:27:13:f3:67:ee:f6:80:36:d8:96:c3:04:4b:5d:41:a1:
         b4:3f:4a:27:44:f9:d2:de:64:76:ad:e3:68:59:bb:4c:93:0e:
         4f:07:58:48:88:12:96:93:79:59:8f:3e:a0:5a:43:18:c6:33:
         f2:3c:8d:36:87:12:42:33:a2:dc:d7:43:e3:94:ad:d5:73:4b:
         f7:3a:23:c4:4a:47:2e:5f:8c:23:13:19:e6:c7:5d:68:cc:b2:
         d4:b4:bc:3f:33:50:0e:00:45:06:9d:8a:70:58:9b:18:58:a5:
         02:13:fc:1d:0c:84:39:9b:72:20:28:1f:2d:98:62:5b:49:ff:
         90:45:e1:85:8e:ad:46:39:f1:85:11:d2:89:55:59:40:2c:14:
         5c:30:02:76:79:0a:d6:15:21:77:fc:e3:20:dd:04:93:72:c8:
         1c:21:a2:72:c7:a9:54:d9:33:8d:fe:1e:c6:fa:f6:2a:44:ba:
         8b:a5:e7:f3:14:d9:9c:73:3e:bd:2e:3d:ed:19:87:19:76:60:
         9f:47:55:5b:da:20:22:b4:12:40:fc:83:30:28:24:44:68:41:
         66:23:39:63:a2:1c:d7:64:83:4c:e4:bd:3c:12:90:ae:b8:c4:
         93:d1:91:91:1c:db:98:21:ff:43:3d:33:cb:46:0a:11:49:db:
         6e:fb:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----