Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd/c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8.cer
File:                     c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8.cer (raw, json)
Hash identifier:          2HrKBn63tAmAusDBRH8sQeLJgnrKU22Q+/f9vM10fXI=
Subject key identifier:   3A:50:8A:E4:C1:CB:8D:35:E5:67:A6:26:66:69:7F:B6:9A:BC:77:9C
Authority key identifier: D4:2A:A1:BD:92:77:D7:81:78:2C:C6:E1:76:FC:3B:48:02:A4:A2:07
Certificate issuer:       /CN=d2ff74f3-d413-4ff6-822f-f26b277589fd
Certificate serial:       010D0C9F432858476599481CBA73F5B3D5CC0800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3A508AE4C1CB8D35E567A62666697FB69ABC779C.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 01 Oct 2024 12:45:26 +0000
Certificate not after:    Mon 04 Jan 2027 13:45:26 +0000
Subordinate resources:    AS: 29777
                          IP: 204.10.18.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd/d2ff74f3-d413-4ff6-822f-f26b277589fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd/d2ff74f3-d413-4ff6-822f-f26b277589fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:99:48:1c:ba:73:f5:b3:d5:cc:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ff74f3-d413-4ff6-822f-f26b277589fd
        Validity
            Not Before: Oct  1 12:45:26 2024 GMT
            Not After : Jan  4 13:45:26 2027 GMT
        Subject: CN=c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3b:79:2b:7f:53:f8:24:b4:7d:61:ce:f1:85:
                    4b:c3:23:4e:08:5f:d6:3b:36:cd:46:14:ef:fb:90:
                    49:0f:3b:56:16:22:3e:99:08:14:b0:2e:ce:fc:1f:
                    30:51:d0:db:c2:80:85:bf:02:25:76:20:1a:86:0d:
                    c0:df:31:b5:85:76:31:a4:9d:85:c3:7c:5f:f4:88:
                    e8:bd:fc:39:78:73:f8:b9:90:7f:21:c3:de:17:bf:
                    07:ec:2f:31:03:21:8a:d9:bd:48:8d:1d:8b:53:ed:
                    52:d0:49:d7:e1:9e:28:4e:72:e4:96:44:e4:aa:aa:
                    9e:5e:fd:5e:cf:27:bd:24:44:7b:fb:39:d3:56:bb:
                    33:77:52:c6:0f:4d:72:80:62:f8:dc:a7:2d:a6:5c:
                    1b:5e:1d:10:20:44:3f:8d:14:ef:e1:e5:7b:62:fc:
                    d9:18:35:72:14:bc:65:d8:58:d8:2d:c3:fe:63:5d:
                    7c:6c:2e:ac:18:34:75:ff:c0:64:33:3f:64:e6:b6:
                    5f:56:a9:57:44:3f:12:b7:a4:ed:ad:48:fe:92:f8:
                    1b:1e:d0:72:b9:a3:ad:7f:45:e4:33:77:4c:3f:67:
                    30:21:d7:9f:49:f3:0e:f3:07:09:f8:13:3a:a8:63:
                    c2:ec:b5:8f:52:2c:13:c5:6a:6b:03:db:c9:af:dc:
                    9b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:50:8A:E4:C1:CB:8D:35:E5:67:A6:26:66:69:7F:B6:9A:BC:77:9C
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3A508AE4C1CB8D35E567A62666697FB69ABC779C.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd/d2ff74f3-d413-4ff6-822f-f26b277589fd.crl

            X509v3 Authority Key Identifier:
                keyid:D4:2A:A1:BD:92:77:D7:81:78:2C:C6:E1:76:FC:3B:48:02:A4:A2:07

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.18.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29777

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:6e:0b:2d:a5:d4:de:6a:10:b8:91:9d:8b:d9:b2:98:09:b4:
         be:cd:48:e4:06:bc:d6:0a:e2:7b:09:a9:32:d5:20:98:e0:22:
         a2:e1:53:36:cc:6f:62:37:0d:34:b4:cf:0e:91:1b:e0:91:2a:
         3a:8b:d6:3f:f0:d3:43:78:68:ea:e5:de:0c:3e:91:5e:12:fb:
         6e:d5:7d:43:6a:10:1a:38:80:ed:d5:b3:de:18:fb:b6:be:7f:
         6e:0d:b4:c9:ac:9d:05:08:f2:d2:f4:ad:d0:19:87:80:60:0a:
         98:78:d7:3e:e6:e2:fd:d3:f3:54:a1:df:e3:cf:c4:e6:e9:ca:
         89:67:24:49:6f:0d:21:04:2f:19:fb:48:06:d9:34:3e:ef:95:
         9c:e8:3f:a1:78:59:ad:aa:35:72:a3:c6:54:73:36:90:34:11:
         d9:7e:2e:52:85:16:93:4d:04:e8:a9:17:07:15:31:42:f7:9c:
         fa:1e:a3:e3:ec:77:a4:d9:bb:44:99:11:87:c3:08:9f:7c:03:
         a0:d1:d8:1e:b9:c0:ae:5e:34:e9:4e:e7:76:e6:26:1f:1e:6f:
         b7:e7:ca:88:b1:69:f0:1a:4d:2f:df:b2:68:e4:db:1f:54:ac:
         a5:50:97:fc:50:bd:32:56:08:61:b2:72:03:8f:98:fe:15:ba:
         93:9b:08:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----