Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc678353-c6ef-4b01-96c2-d080eea23415.cer
File:                     cc678353-c6ef-4b01-96c2-d080eea23415.cer (raw, json)
Hash identifier:          Now62uiOhS6I/uOXJwJPs1ECpxM4l3R6DemlkaFbyjg=
Subject key identifier:   A6:29:F5:59:05:17:32:68:A8:62:40:50:8D:51:4F:D3:7F:AF:0A:CF
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584330E3071A910EA974A7E3EAE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc678353-c6ef-4b01-96c2-d080eea23415/cc678353-c6ef-4b01-96c2-d080eea23415.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc678353-c6ef-4b01-96c2-d080eea23415/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 11 Sep 2023 20:28:26 +0000
Certificate not after:    Sun 14 Dec 2025 21:28:26 +0000
Subordinate resources:    AS: 394684

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:30:e3:07:1a:91:0e:a9:74:a7:e3:ea:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 11 20:28:26 2023 GMT
            Not After : Dec 14 21:28:26 2025 GMT
        Subject: CN=cc678353-c6ef-4b01-96c2-d080eea23415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:c1:6b:ab:f9:b0:7a:62:61:e1:45:b7:ff:
                    8b:6d:3e:a8:cb:5e:36:b1:53:0c:75:1b:b1:32:4d:
                    e6:1a:aa:31:09:78:5e:1a:7b:d7:a6:33:05:22:03:
                    55:02:26:70:c2:2f:37:0e:ac:5c:96:f9:7c:0d:95:
                    15:d5:64:1d:ac:54:5e:51:1d:86:33:19:72:ee:da:
                    07:16:7a:89:39:f8:16:9d:64:2f:69:da:f0:ef:46:
                    b2:b8:4a:0d:ee:78:15:cb:07:c7:60:ea:68:a2:b1:
                    03:94:1b:fe:ab:73:ba:bb:e5:72:8b:4c:a7:fa:fb:
                    80:3b:e3:b7:6c:6b:ee:58:51:4e:cd:81:f7:41:aa:
                    36:c4:ff:4d:7e:10:ec:58:66:62:d7:19:57:3a:67:
                    c5:56:6a:f6:f3:b1:af:03:8b:76:3a:8b:ac:8c:29:
                    26:64:44:5f:d4:27:c9:68:a1:17:05:d5:f8:52:f8:
                    29:d2:8e:cf:38:3d:58:d8:a7:19:d7:1e:0c:ad:b1:
                    e5:d1:d4:01:2b:b6:89:5a:ce:ab:e2:ce:9f:97:8e:
                    1b:a3:e9:b3:28:f3:f1:b1:aa:5d:99:13:20:e0:48:
                    aa:2e:ec:ed:86:7f:86:ba:b0:7c:f9:96:a8:c1:1c:
                    6e:cc:47:f7:13:d8:94:1f:1c:b3:ec:39:49:7a:c7:
                    e0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:29:F5:59:05:17:32:68:A8:62:40:50:8D:51:4F:D3:7F:AF:0A:CF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc678353-c6ef-4b01-96c2-d080eea23415/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc678353-c6ef-4b01-96c2-d080eea23415/cc678353-c6ef-4b01-96c2-d080eea23415.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394684

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ad:45:8f:1e:fb:6b:0c:5b:96:27:d2:7d:03:cd:3c:64:e5:
         90:80:85:9a:31:41:1f:f1:6d:b5:0c:b4:c7:a3:a2:2d:05:66:
         07:a6:13:ea:b4:59:19:34:f8:68:0d:7a:17:80:45:42:00:cc:
         78:10:9d:64:90:a1:61:3a:4a:f5:e5:cb:5e:8e:af:19:88:c6:
         51:c5:4e:74:61:b4:a7:3f:eb:7c:9e:a0:51:3f:6d:f5:ac:ba:
         17:f9:61:ab:93:65:ac:30:e6:be:80:5c:be:fc:6a:1e:b6:3d:
         a4:bf:10:23:b1:59:f6:0d:be:5d:4c:c7:3f:11:62:57:c5:7e:
         22:55:79:88:c6:41:8a:10:df:cc:4b:95:89:71:dd:3e:ea:b9:
         4c:3c:b0:da:91:c0:55:ff:68:a9:eb:91:7c:4c:b9:d9:72:14:
         9a:3f:02:fb:65:d5:51:11:48:44:58:7d:32:35:af:9d:4d:44:
         2a:7c:75:60:d9:71:85:e8:aa:41:14:95:24:08:e2:5e:75:d7:
         a5:e2:28:88:94:c2:b3:20:db:3f:82:cf:d5:31:9f:02:79:45:
         0c:17:12:2d:19:4c:d9:08:e2:c8:78:42:d4:87:d6:9f:e2:39:
         56:74:30:77:0d:7b:54:c1:a9:16:d4:bc:d5:4d:b2:75:9f:e3:
         57:45:f2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----