Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cada6a48-d0c8-4e9d-a867-b68a41d02177.cer
File:                     cada6a48-d0c8-4e9d-a867-b68a41d02177.cer (raw, json)
Hash identifier:          rmRBN4VaAqlszZIYgEwzESnp6O25gyiPsh/44l+hGRk=
Subject key identifier:   A2:E9:89:86:50:FF:78:1F:27:1B:AF:0C:DE:B5:B3:C7:98:BE:DC:3E
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584726C8E421E8916F70BD90D940
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cada6a48-d0c8-4e9d-a867-b68a41d02177/cada6a48-d0c8-4e9d-a867-b68a41d02177.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cada6a48-d0c8-4e9d-a867-b68a41d02177/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 09 Sep 2024 00:45:26 +0000
Certificate not after:    Sun 13 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 400188

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:c8:e4:21:e8:91:6f:70:bd:90:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep  9 00:45:26 2024 GMT
            Not After : Dec 13 01:45:26 2026 GMT
        Subject: CN=cada6a48-d0c8-4e9d-a867-b68a41d02177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:4c:83:17:5a:86:01:19:2a:88:52:0b:75:
                    1f:82:3f:59:0f:2c:e8:81:11:b5:dd:83:6b:52:aa:
                    44:df:c1:a9:c5:e5:0b:b8:75:88:9a:5d:b7:b4:1c:
                    0d:9b:6f:40:b6:09:83:a2:77:79:21:fd:04:c1:c9:
                    ff:24:0d:d1:ae:a0:f1:55:51:8f:a6:e4:26:a8:58:
                    2e:2f:48:99:44:bf:bb:41:a0:57:53:fe:db:74:ad:
                    d4:be:44:dd:32:67:fe:df:15:3b:e5:c1:a4:f2:96:
                    2d:13:50:e0:b8:e2:95:fc:e5:da:59:82:b7:32:6b:
                    a6:cd:50:5c:9f:b0:6b:f2:73:9d:81:b7:9e:dc:c5:
                    5e:02:d8:2a:d7:47:3a:9e:c5:3e:3c:fc:b9:f6:ae:
                    76:ec:0e:c3:54:76:f1:84:20:0e:01:5b:51:8f:d6:
                    95:e9:a4:c4:21:70:03:70:1d:b7:5c:de:5f:95:45:
                    f2:a6:e3:b4:2a:67:24:2e:5f:35:0e:f1:08:20:62:
                    9a:00:40:67:1a:93:c4:90:ae:78:fe:8a:8d:11:55:
                    c2:4a:4c:4b:17:6c:5d:9b:6c:d2:59:ef:dc:86:15:
                    42:90:a4:6a:0b:9c:b2:7a:20:da:c4:f9:5c:21:eb:
                    22:81:ee:8d:6f:cd:c2:f9:ea:69:01:6f:38:98:d4:
                    07:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E9:89:86:50:FF:78:1F:27:1B:AF:0C:DE:B5:B3:C7:98:BE:DC:3E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cada6a48-d0c8-4e9d-a867-b68a41d02177/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cada6a48-d0c8-4e9d-a867-b68a41d02177/cada6a48-d0c8-4e9d-a867-b68a41d02177.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400188

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:9e:9b:0e:81:44:55:2e:70:83:ef:53:10:50:12:25:8c:7f:
         a9:4a:6f:a0:9e:f6:d6:95:6f:27:10:89:96:0c:ee:dc:46:3d:
         b7:11:16:c3:e6:51:5a:cb:39:09:b9:88:5e:c0:83:65:82:6c:
         3e:92:fc:80:73:6c:fd:b6:90:27:f9:9e:e2:41:4d:71:f6:68:
         5f:ed:a7:e7:59:72:21:bd:bf:6d:23:a1:d9:37:95:31:40:4c:
         68:a0:7e:0e:25:71:6d:ae:1b:c9:ec:a9:39:b1:ee:dd:d3:0b:
         df:18:72:ba:5c:c6:66:68:6d:2b:39:9a:be:6e:63:74:f2:0f:
         b1:77:38:56:26:f2:dc:22:c5:b6:41:9f:1e:09:56:e6:21:5a:
         5d:59:da:cb:47:78:e4:2c:6d:7b:38:f5:21:89:77:8c:1b:ff:
         fc:90:a0:b1:bf:48:8a:f2:f0:fd:33:cc:94:fb:5d:d7:1b:8c:
         90:74:56:58:f4:89:6b:fd:42:52:c3:2d:cd:42:67:c6:b3:70:
         04:70:da:4e:01:b7:48:3b:5b:b8:88:d5:1f:e5:51:3b:72:85:
         13:02:93:ac:0e:f0:db:d7:f4:e5:6b:f4:02:d1:a9:82:42:95:
         83:36:0b:7e:10:aa:55:1a:9b:39:88:a5:9e:54:5e:fc:1b:df:
         84:b6:e7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----