Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer
File:                     1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer (raw, json)
Hash identifier:          GI9Vy1eY/XZWeF+2D1b5QlK7FmJJo84qmgxIhwD9HEc=
Subject key identifier:   74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584733F7972E7369B7CEB3AD5980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 13 Sep 2024 18:05:02 +0000
Certificate not after:    Thu 17 Dec 2026 19:05:02 +0000
Subordinate resources:    AS: 40205
                          IP: 23.189.216.0/24
                          IP: 2620:cd:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:f7:97:2e:73:69:b7:ce:b3:ad:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 13 18:05:02 2024 GMT
            Not After : Dec 17 19:05:02 2026 GMT
        Subject: CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:71:44:44:7c:41:1c:a6:5b:25:cd:d2:87:
                    e7:1c:e8:a0:84:29:99:9b:c5:83:71:d1:9b:fc:f6:
                    af:fd:cc:88:e8:30:4a:d0:1b:ef:70:af:15:89:44:
                    ed:c6:2d:70:14:20:6e:4b:76:4f:de:81:53:ac:1a:
                    bd:7a:6a:de:c3:18:b4:18:46:4c:51:a0:da:ad:2d:
                    4a:1c:fc:26:4d:1a:76:06:2a:22:61:bd:d5:30:17:
                    0e:29:16:ca:02:17:8d:8f:40:a2:b7:a7:c1:86:9f:
                    1b:12:1a:d2:12:29:d6:fb:07:0c:5e:a9:7a:19:dd:
                    c1:73:2b:a3:24:fc:2d:3d:b4:47:e4:96:95:73:87:
                    36:c6:12:43:57:d4:f4:1b:4a:41:41:e0:16:6f:e5:
                    aa:20:8f:c7:0c:be:e5:4b:8b:17:1c:8b:4a:95:b2:
                    18:42:ac:fe:d8:a6:74:bd:76:fe:3f:f5:b8:cc:b5:
                    3b:86:24:a1:e2:c1:aa:87:14:0a:0f:25:79:13:31:
                    7b:b1:86:b9:5d:57:2b:c6:3a:94:df:ef:92:64:73:
                    31:fe:98:aa:0b:6a:73:37:ec:b3:a5:ea:37:d2:5d:
                    c9:70:0d:f8:bf:71:10:34:53:c2:64:88:78:60:89:
                    a4:0a:4e:7b:0f:ac:fe:ae:6c:0b:3e:e0:67:19:5c:
                    46:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.216.0/24
                IPv6:
                  2620:cd:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40205

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ef:2b:6c:9f:2a:f5:3b:9a:64:ed:75:13:56:88:c2:d4:5e:
         68:13:11:7e:fc:99:f2:15:13:82:e7:42:a4:76:0b:68:99:f2:
         59:9c:e3:0a:bb:63:9d:80:c4:c7:45:46:7b:d1:ce:39:74:e2:
         71:1d:eb:47:bf:56:4f:d3:0a:11:c0:c3:a0:4b:bf:be:ae:77:
         a6:3a:e8:21:da:d7:b2:e5:17:cb:11:98:f4:8d:98:57:e0:24:
         17:57:c6:27:0c:32:5b:a5:ce:a1:b5:b6:ec:09:95:6f:fc:94:
         1f:9d:4e:85:ab:25:11:ee:5e:ea:eb:93:c8:6a:18:c4:48:28:
         64:af:65:7f:dd:63:11:45:9f:1e:ab:01:d0:fb:0f:2a:77:05:
         6d:39:5c:2f:b0:ce:47:63:bb:e6:72:51:88:96:5c:c4:56:20:
         a6:81:ff:f9:1a:de:99:cd:97:ee:c4:3a:9b:dd:38:9f:b7:d5:
         50:87:72:99:ab:4c:16:ed:7d:00:77:21:bc:09:82:c8:b9:64:
         f8:fc:ba:d9:49:bb:59:de:d8:d4:21:9a:97:33:22:56:25:3a:
         cc:36:62:a0:16:e2:f0:f9:f4:7f:26:74:61:e5:0c:f3:df:a1:
         3e:4d:e7:f6:9d:42:0a:6b:0e:1e:ab:6c:19:47:6a:40:19:e6:
         64:6d:16:47
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----