Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879.cer
File:                     d84d90bc-9144-4684-9270-edf2e53d3879.cer (raw, json)
Hash identifier:          ljYcsNEeVR0EldjGLjKoCk82di90lGtdu+SCRT2Tmro=
Subject key identifier:   9C:A3:EB:05:F2:7C:77:DC:14:D8:1E:03:7C:31:03:FA:8B:B5:12:D0
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847A899B2F73FD258B9467CA880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/d84d90bc-9144-4684-9270-edf2e53d3879.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 25 Oct 2024 12:45:26 +0000
Certificate not after:    Thu 28 Jan 2027 13:45:26 +0000
Subordinate resources:    AS: 399674
                          IP: 104.247.104.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a8:99:b2:f7:3f:d2:58:b9:46:7c:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 25 12:45:26 2024 GMT
            Not After : Jan 28 13:45:26 2027 GMT
        Subject: CN=d84d90bc-9144-4684-9270-edf2e53d3879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:23:58:14:37:90:0e:92:ca:11:dc:34:4b:96:
                    38:f3:1e:09:26:b4:33:af:40:13:b9:6e:9c:b5:15:
                    4e:83:eb:d7:50:7e:da:66:ed:1c:69:0e:af:2d:12:
                    2d:b0:6e:75:ea:60:f0:c4:08:b8:8d:7e:3f:9d:b0:
                    ad:e0:47:4c:32:67:88:51:21:cd:1f:56:75:53:39:
                    97:e2:db:6f:61:5e:22:2a:7d:4a:4b:06:81:df:c9:
                    85:25:31:64:75:87:ba:67:6e:38:fb:d9:86:86:da:
                    05:7a:73:ab:ba:d6:93:b5:33:2f:be:cd:6a:61:54:
                    fd:4c:1d:50:c7:45:10:c2:d6:53:85:42:0c:bd:d8:
                    c7:02:3c:3d:31:c6:6a:e7:6e:f6:80:18:59:d6:f8:
                    91:f7:a3:3d:84:c2:20:af:10:90:de:96:9e:63:7f:
                    3d:ae:d2:f0:f8:58:47:6b:5d:42:b3:f6:4e:10:b5:
                    ba:e6:24:3b:8a:14:ad:ec:3d:e4:c5:ac:44:5b:c1:
                    6e:31:44:e1:da:89:a5:4d:76:f1:1a:45:29:d9:9f:
                    97:7d:67:00:41:2b:07:b8:6d:d1:fc:26:b3:ef:71:
                    95:e8:d6:1c:2a:ef:c3:c1:d4:af:a7:35:31:c0:6d:
                    13:aa:cb:23:7b:e2:40:20:23:a7:c8:6e:61:01:be:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A3:EB:05:F2:7C:77:DC:14:D8:1E:03:7C:31:03:FA:8B:B5:12:D0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/d84d90bc-9144-4684-9270-edf2e53d3879.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.104.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399674

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ae:81:8f:00:1a:6b:f1:b0:d0:ea:f7:48:b7:af:f1:0a:83:
         48:81:9d:c8:b6:0a:34:0a:3e:8e:0b:83:0c:c6:7e:6a:52:5f:
         d0:79:72:4f:d9:9a:1b:60:64:17:86:73:9d:65:fb:1a:33:8d:
         92:fe:f4:3d:52:2f:a2:43:b1:e6:55:1f:b1:62:6d:e9:50:ec:
         e8:b5:21:ce:c7:44:9f:74:7b:ff:a9:61:16:cc:99:ef:f3:53:
         a7:65:0a:4b:8f:44:4c:c5:1d:18:82:9c:16:67:d7:3c:0e:a9:
         be:fa:92:c5:ee:c9:81:a7:f0:5c:cd:00:f3:12:d0:51:e8:f2:
         d1:4d:fb:ed:f5:7e:6a:7a:4b:48:f3:dc:3e:94:cd:60:03:c5:
         d5:45:af:64:d6:8a:94:8a:c5:9f:1a:d7:99:e4:fe:24:c8:53:
         97:fd:10:8c:c5:4c:2c:99:83:35:3e:b1:7c:93:31:6b:b3:f7:
         e0:f8:fa:9e:39:af:05:10:f6:94:cf:3e:ae:a3:84:2d:15:99:
         28:e4:a0:e0:80:35:58:2c:39:4e:9a:78:41:e7:f4:97:51:74:
         20:b2:1f:e0:c5:f2:3e:e8:32:f4:70:34:ac:1e:f0:6f:7c:98:
         5a:4b:75:dc:ec:c5:e5:65:54:4f:26:b0:93:2c:44:5a:83:66:
         fe:c0:74:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----