Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5.cer
File:                     112b9ff8-31bc-4ba4-b852-11826fa336d5.cer (raw, json)
Hash identifier:          TqSEoNs3FBDpRsUchg078DaaqCddTx83nSKBoICzO6A=
Subject key identifier:   88:24:CE:9B:C9:2F:15:68:37:5D:8A:4A:21:97:9D:E0:38:F7:39:8C
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584757CE2835E8F2EA8705D8C800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/112b9ff8-31bc-4ba4-b852-11826fa336d5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 26 Sep 2024 14:10:39 +0000
Certificate not after:    Wed 30 Dec 2026 15:10:39 +0000
Subordinate resources:    AS: 53566
                          IP: 2606:dd80::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ce:28:35:e8:f2:ea:87:05:d8:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 26 14:10:39 2024 GMT
            Not After : Dec 30 15:10:39 2026 GMT
        Subject: CN=112b9ff8-31bc-4ba4-b852-11826fa336d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:8a:29:ab:45:56:70:e5:46:58:fc:d7:bc:
                    21:f6:e2:18:7f:10:ef:5c:3d:23:14:0a:77:29:ec:
                    dc:4f:83:3a:3a:3a:52:34:59:29:28:4f:ed:54:d9:
                    01:68:33:bb:ae:b8:d9:7a:72:19:4d:a7:be:1a:0c:
                    0f:a4:3f:34:d7:0b:18:54:65:9b:9d:aa:b3:f0:91:
                    01:9d:a7:45:83:b5:31:ea:b0:89:91:7b:99:f7:a0:
                    84:8a:ff:75:33:6e:89:a0:64:d4:a4:57:7e:05:99:
                    c0:3e:d9:7f:0b:8d:d8:80:f8:9f:8b:8d:ea:58:db:
                    e3:25:99:a6:98:0e:e4:2e:8c:0f:2d:b0:fe:a6:ae:
                    8c:53:87:35:9d:8a:35:53:b4:97:32:0b:3d:fb:37:
                    e7:c4:61:f2:9a:d3:93:84:bb:b5:46:5c:33:5c:1a:
                    9f:1d:76:50:dd:1f:f4:b9:66:69:38:49:68:b5:59:
                    65:b1:f6:96:97:03:92:f5:6b:f9:bb:20:d5:d0:c8:
                    b9:30:36:4d:7e:2d:08:9d:6a:45:4f:93:25:83:2c:
                    80:1b:7d:b1:96:c5:f6:f9:ec:15:d0:f4:d6:d7:50:
                    f4:f5:c6:9a:5b:ab:ec:33:7d:02:f2:7b:35:ac:d3:
                    62:f2:62:3a:c7:74:b0:0c:97:a4:6f:ed:ce:fd:f3:
                    43:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:24:CE:9B:C9:2F:15:68:37:5D:8A:4A:21:97:9D:E0:38:F7:39:8C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/112b9ff8-31bc-4ba4-b852-11826fa336d5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dd80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53566

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:cd:18:5a:0f:81:97:95:75:33:d6:8e:b0:65:90:8b:2f:6a:
         fc:2b:e7:b4:84:4b:a4:60:e9:68:66:87:b0:f5:14:0c:e2:30:
         53:05:10:bc:cb:eb:0f:03:a3:dc:23:15:92:0d:70:0d:ce:f5:
         81:b5:b5:50:31:6b:7b:8c:b7:d9:7a:35:bb:46:1e:3f:b4:5e:
         4e:6d:30:91:c7:bc:fd:e1:46:09:74:15:51:99:ea:55:7a:a5:
         11:f8:70:f3:cf:b9:03:9d:0b:aa:d7:b8:f1:ff:01:e3:22:ad:
         84:61:69:7d:d1:2e:f6:25:d5:55:f7:fa:30:ec:e6:21:3d:2c:
         59:5f:27:f2:9a:42:60:15:3e:38:74:e2:a2:98:b9:e5:bb:41:
         76:10:00:d9:f7:2e:67:85:27:06:c0:a5:79:cf:19:52:e1:55:
         69:7c:7c:57:39:8d:cb:c2:5a:9f:f2:e4:c6:2a:25:8b:4a:14:
         c6:fd:94:e5:e7:5c:80:42:6a:06:71:d0:41:e9:1b:fb:ea:21:
         d8:d2:86:62:d2:fd:fe:41:6f:f4:68:3a:57:12:73:cf:fd:f6:
         bd:f7:75:49:c7:89:b4:46:84:ce:a7:12:ab:20:fc:09:06:ea:
         37:17:26:91:a5:19:4d:54:15:70:b1:22:a1:22:86:7e:68:d3:
         54:0a:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----