Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
File:                     1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer (raw, json)
Hash identifier:          of4XWVU+WET47QpNGEw8MIl9dkHfCSpFcwFOaNkcmBc=
Subject key identifier:   2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858476031237BAAE3A5C8845F8560
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 29 Sep 2024 14:16:34 +0000
Certificate not after:    Sat 02 Jan 2027 15:16:34 +0000
Subordinate resources:    AS: 394106

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:31:23:7b:aa:e3:a5:c8:84:5f:85:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 29 14:16:34 2024 GMT
            Not After : Jan  2 15:16:34 2027 GMT
        Subject: CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d3:ab:ce:e5:b9:9d:59:d8:cf:19:b2:c9:df:
                    43:51:9f:ba:38:0b:6b:08:dd:53:3e:c8:fa:9f:cf:
                    6f:19:30:7a:79:b1:dd:2f:a5:44:63:9e:24:df:40:
                    0e:cb:7d:33:9e:22:d9:1b:f4:29:55:a2:a8:7a:aa:
                    51:0c:f2:f9:cd:d7:b6:dd:7d:ca:fb:bb:44:cb:3e:
                    79:c5:4a:01:71:3d:d5:60:0d:f4:a3:38:25:c2:3a:
                    5c:5a:c4:f6:72:83:26:73:76:94:c1:d2:1e:92:5b:
                    7a:66:c1:52:8f:1a:60:8f:19:35:81:45:aa:61:dd:
                    0a:3e:06:1c:27:8a:32:71:12:41:2b:d5:f6:ac:cb:
                    76:73:df:4d:af:4b:ab:06:49:73:b0:f9:6d:ca:ee:
                    00:51:5c:fb:da:d7:79:8f:44:02:00:7b:6c:e7:a3:
                    f3:93:4a:01:47:78:c8:c6:ae:e0:1d:83:79:27:97:
                    0e:e8:03:e3:83:d7:05:1a:2a:4c:39:e3:bd:21:67:
                    12:48:97:72:38:fc:e5:61:4f:2c:ab:70:bf:f4:e3:
                    7b:4d:53:b3:f7:84:36:e0:3c:7a:c6:87:bc:fa:82:
                    45:b0:d4:ee:81:92:21:1c:1e:87:70:56:86:e2:ca:
                    fc:cd:0a:2f:10:a9:97:4d:85:21:b8:5c:e2:69:2a:
                    c1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394106

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ae:b6:f4:de:cc:04:cb:f9:d0:d6:82:fd:c0:f3:07:0c:63:
         b0:d0:7e:1e:80:8f:50:18:1f:2f:9a:ca:3d:b0:71:b6:57:ee:
         b2:f0:bc:c1:ba:eb:f3:3b:1b:4e:65:05:67:1c:03:1e:b9:e1:
         d8:86:d2:9f:6a:0e:92:07:83:6e:6a:eb:4d:31:d9:79:9d:70:
         dc:83:7f:2f:40:21:33:40:89:bd:8c:14:8d:9b:8a:15:3e:13:
         c3:52:b3:c9:01:06:e0:e9:db:9e:be:9e:3c:d6:c9:68:d0:98:
         c2:17:49:d2:9f:33:19:69:d3:7b:aa:27:12:a3:96:29:56:e8:
         6f:04:9e:fc:d6:42:72:b6:19:22:49:83:20:56:4f:e0:54:73:
         ce:be:dc:af:63:77:08:fd:d9:2c:94:80:54:31:e3:f8:a0:5a:
         1e:20:07:aa:35:2d:93:1a:4b:02:25:75:70:91:ea:ae:e5:d0:
         88:4e:e3:c7:b1:1b:fc:a2:f7:c1:e6:47:54:b5:86:2c:34:1e:
         14:ff:82:1c:38:1e:76:c5:45:73:54:cf:e4:4f:80:91:24:aa:
         2d:99:72:ab:57:6e:74:46:89:d2:26:18:04:11:7e:80:70:0b:
         2a:6b:ec:20:45:8c:29:da:18:ab:25:d2:b9:05:e4:f1:55:ae:
         9f:cc:84:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----