Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a.cer
File:                     09a6e101-d379-454b-8947-39f1f150481a.cer (raw, json)
Hash identifier:          go1TilSaGM0XXI/KqZDY826UHri9I56tZShHLtwcZ1Y=
Subject key identifier:   BD:4D:C0:AA:9B:E0:60:F8:77:5B:E3:76:97:40:14:1B:93:A2:A8:D0
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846E1D0B72EC9DB064DC9085900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/09a6e101-d379-454b-8947-39f1f150481a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 15 Aug 2024 07:50:26 +0000
Certificate not after:    Wed 18 Nov 2026 08:50:26 +0000
Subordinate resources:    AS: 63409
                          IP: 216.12.160.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e1:d0:b7:2e:c9:db:06:4d:c9:08:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 15 07:50:26 2024 GMT
            Not After : Nov 18 08:50:26 2026 GMT
        Subject: CN=09a6e101-d379-454b-8947-39f1f150481a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:78:d8:d7:12:37:89:90:69:f8:6a:71:84:
                    d7:20:3f:b8:d2:cf:85:a3:49:d6:36:73:fe:f6:4b:
                    bd:17:81:9c:6d:a3:66:e4:f0:f4:30:02:a6:28:3e:
                    40:b0:94:8d:18:fc:ea:03:b8:be:ab:73:f6:ae:c4:
                    8f:29:3d:f3:c0:5a:7d:26:d5:85:01:d6:bb:80:ce:
                    15:99:fa:21:3f:41:64:97:e5:4a:06:14:86:47:4b:
                    07:c8:46:71:ed:5d:7c:7d:fe:81:8c:16:fe:4f:68:
                    d0:45:5e:03:40:e8:35:91:51:2e:bc:5a:d1:a2:11:
                    6a:62:16:97:68:0c:c8:70:6b:78:6b:d0:e0:4c:ca:
                    ba:d6:e6:b1:43:91:fd:4c:29:12:c7:fb:7e:7c:c2:
                    fa:2c:04:2a:53:aa:58:aa:30:40:76:c5:f6:67:c0:
                    c4:3c:03:78:99:03:44:d8:51:c2:97:35:09:c0:6f:
                    af:da:a0:fd:93:c7:ae:a8:43:2f:ce:7a:05:8a:fa:
                    71:46:f3:69:24:e2:31:94:a4:4a:a3:9d:7d:dc:5c:
                    c3:c3:f6:9e:48:4e:f7:89:0e:f2:26:ee:af:b3:fc:
                    e2:00:e4:f3:1d:0e:83:96:b2:27:2d:53:61:99:d9:
                    47:dc:e3:b4:7b:f9:76:0f:07:d1:ab:a7:f4:f0:34:
                    5b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4D:C0:AA:9B:E0:60:F8:77:5B:E3:76:97:40:14:1B:93:A2:A8:D0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/09a6e101-d379-454b-8947-39f1f150481a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.12.160.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63409

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:18:82:94:7d:16:11:e1:96:18:bc:62:2d:4f:a2:47:38:6d:
         cd:d3:b7:7d:14:d3:0b:f7:32:20:e3:0b:92:1f:e9:0f:1a:50:
         77:74:66:78:6d:a7:04:53:a2:a9:28:c0:05:13:1f:45:9c:8a:
         1f:3c:2d:27:52:c7:13:67:db:14:92:0a:85:be:99:ad:b7:95:
         58:76:46:e3:9d:c5:0d:20:9e:22:ea:6e:6b:1f:3c:51:47:60:
         01:de:87:13:dd:7b:fa:72:0c:08:e6:4e:7d:e3:ee:fb:f6:69:
         b5:09:94:c4:84:57:2d:da:99:f6:44:00:41:2d:6f:dd:13:48:
         a6:8d:12:39:9c:ab:4f:88:fc:ab:32:8c:03:fe:52:63:a3:f3:
         0f:8e:51:be:bf:6f:1c:24:aa:3d:31:be:e3:5d:8a:8d:f3:72:
         1e:59:44:e6:90:fb:52:78:4d:e4:6f:f2:2f:b8:bb:b5:ea:8b:
         f3:93:9e:7b:cb:77:a1:13:79:e9:9d:80:ec:89:a5:53:15:eb:
         19:e5:67:f2:1d:87:ef:5a:93:51:aa:86:98:41:6c:17:70:cf:
         68:de:5d:7a:3c:aa:f1:21:8c:0b:40:54:dc:c6:1c:a3:8f:60:
         2e:d1:87:a0:e1:06:a6:6f:59:9d:86:1c:dc:fa:5c:d0:9c:16:
         83:89:50:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----