Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
File:                     0be9634a-0674-471a-bb54-7866e12ded7a.cer (raw, json)
Hash identifier:          PPRN4oGNUnVN1cJh0EaCc9rGaVtKwKkKZYIWdlW7SXI=
Subject key identifier:   99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847520EF40F14642F6A1654CC80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 24 Sep 2024 12:46:22 +0000
Certificate not after:    Mon 28 Dec 2026 13:46:22 +0000
Subordinate resources:    AS: 18888
                          IP: 64.42.184.0/21
                          IP: 192.211.12.0/22
                          IP: 2620:115::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:0e:f4:0f:14:64:2f:6a:16:54:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 24 12:46:22 2024 GMT
            Not After : Dec 28 13:46:22 2026 GMT
        Subject: CN=0be9634a-0674-471a-bb54-7866e12ded7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:04:a5:1d:12:bb:0d:cd:2f:a7:82:9d:a2:
                    5e:1f:da:df:b9:64:d6:5e:4d:41:04:93:9a:3e:7e:
                    5a:43:cd:72:71:5b:b0:8a:e3:b0:d3:70:69:5c:14:
                    e1:15:ba:ea:cc:b4:c4:35:08:93:77:02:0b:bd:65:
                    5c:35:de:d9:26:cb:7b:d3:d0:0e:50:9e:66:3f:8b:
                    6b:8a:ef:aa:52:43:26:5a:a6:d9:63:91:e7:59:68:
                    bb:bd:22:fd:43:b9:f8:8e:14:0a:c2:85:cb:77:4e:
                    45:d2:76:a8:c1:45:90:41:5b:25:c5:2f:b6:56:9f:
                    40:91:f0:e2:81:c1:f6:6b:38:09:3a:ce:55:73:30:
                    cd:36:2c:ae:9a:de:cb:4e:33:a2:86:bc:25:c7:d5:
                    e0:bc:50:16:6c:2f:87:dd:64:8e:77:84:c4:a3:c8:
                    11:09:00:c1:45:a0:f5:52:11:99:af:33:7c:c4:3a:
                    25:47:de:0f:e3:5b:11:37:90:64:65:df:35:3d:8d:
                    63:97:ac:26:d0:d8:b3:d4:1a:49:13:94:72:cf:1a:
                    ed:34:87:12:cc:ed:ec:5c:6b:5a:56:dd:dc:97:c9:
                    95:a3:1c:19:37:a0:b2:7b:5f:8f:22:57:7f:44:03:
                    7b:ca:ba:58:1a:ec:06:8a:00:13:e5:a3:be:34:81:
                    9c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.42.184.0/21
                  192.211.12.0/22
                IPv6:
                  2620:115::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18888

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:61:63:f9:91:3d:c1:2f:86:66:05:62:dc:34:d7:af:f3:12:
         8f:83:90:05:30:7c:1d:4f:64:b2:2f:16:59:f7:b8:52:57:b7:
         19:27:17:cd:f3:4d:43:83:33:26:d0:db:d3:b5:34:60:b4:65:
         2a:60:d9:43:9a:3a:ee:aa:c7:0b:88:0f:4a:a6:d1:d0:ca:e8:
         13:2f:09:b7:84:93:f9:9d:f7:5f:a1:a3:2b:47:e5:79:9a:9f:
         5d:bd:6a:d6:26:37:fa:d0:58:49:1d:dc:d2:59:f3:7b:84:99:
         75:0f:50:85:9e:08:5e:ac:73:95:9b:38:87:c8:e6:a8:36:19:
         ed:61:67:a7:f9:ec:6b:de:53:d6:e6:6a:a8:7c:5e:6b:7f:e8:
         29:d3:f9:36:98:e2:80:1a:65:a8:85:03:83:2f:4b:64:c0:c9:
         d3:7d:a3:87:fd:4a:3f:3f:04:f7:cb:2b:a1:c3:f4:52:32:75:
         a1:0c:a0:65:25:a1:cd:3a:f1:89:5a:c3:db:26:52:47:a0:6a:
         00:8d:37:18:3c:ae:95:6b:93:51:db:9b:27:6b:b9:ce:f5:f5:
         a2:8f:3c:d4:7d:ef:c7:37:87:bd:92:8d:04:ab:5a:f0:2b:f0:
         69:d1:14:a6:73:13:b2:a3:1a:3c:75:c2:53:48:ef:d6:b3:c3:
         28:f8:40:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----