Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d74cc1a-1916-42f0-a2fe-e8e6c9bfca0a.cer
File:                     1d74cc1a-1916-42f0-a2fe-e8e6c9bfca0a.cer (raw, json)
Hash identifier:          6aNXxN0J8JY7gQwQq6Zduwnix6QvnH4FS18Ilfno5PY=
Subject key identifier:   6C:40:E0:E7:98:88:FC:43:61:FA:A7:03:91:1D:34:57:EA:AF:7A:D1
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846F5E74A740D0761931075AA40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d74cc1a-1916-42f0-a2fe-e8e6c9bfca0a/1d74cc1a-1916-42f0-a2fe-e8e6c9bfca0a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d74cc1a-1916-42f0-a2fe-e8e6c9bfca0a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 22 Aug 2024 12:32:05 +0000
Certificate not after:    Wed 25 Nov 2026 13:32:05 +0000
Subordinate resources:    AS: 27374
                          IP: 208.92.32.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f5:e7:4a:74:0d:07:61:93:10:75:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 22 12:32:05 2024 GMT
            Not After : Nov 25 13:32:05 2026 GMT
        Subject: CN=1d74cc1a-1916-42f0-a2fe-e8e6c9bfca0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ea:3c:53:c5:3a:d5:88:ff:81:b7:e8:12:49:
                    5c:9d:a6:f4:4e:2a:37:c3:54:5b:fe:33:64:6f:d2:
                    8f:23:0f:44:7f:f7:7a:55:82:be:a6:46:5f:3e:92:
                    2f:0f:18:e6:0a:68:50:4a:7c:62:23:5e:d6:7e:21:
                    83:52:c9:3a:9c:a8:89:25:57:ef:c7:19:35:34:bc:
                    a0:3d:a7:37:b9:bc:33:33:f7:51:38:ff:2d:02:40:
                    1d:6b:0b:51:7f:e0:00:cc:26:75:92:0c:29:96:8e:
                    fb:72:78:48:e7:c3:29:2f:47:c4:e2:04:d1:44:71:
                    60:73:a2:c0:11:65:d1:6a:e9:36:05:d5:8d:0a:d1:
                    de:04:83:f8:0f:00:a9:8d:55:28:b8:1a:14:2b:ae:
                    17:9f:24:cd:38:d8:3e:b0:5e:fa:46:0e:f0:f5:a7:
                    01:ba:a1:dc:fa:db:52:6d:dd:8f:99:93:2f:e6:1b:
                    c8:4d:4a:6b:88:72:74:86:7a:1d:e1:4f:a2:bb:44:
                    9f:26:5f:8a:36:23:ce:92:15:1e:a3:ff:57:c0:23:
                    85:ae:af:42:aa:1b:a9:d2:20:fb:56:38:2f:e9:65:
                    45:10:bd:09:98:20:e5:c5:89:aa:10:0b:a8:d2:2e:
                    0b:04:72:eb:7a:7b:c8:c2:7b:61:b7:88:bd:19:0f:
                    97:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:40:E0:E7:98:88:FC:43:61:FA:A7:03:91:1D:34:57:EA:AF:7A:D1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d74cc1a-1916-42f0-a2fe-e8e6c9bfca0a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d74cc1a-1916-42f0-a2fe-e8e6c9bfca0a/1d74cc1a-1916-42f0-a2fe-e8e6c9bfca0a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.92.32.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27374

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:92:65:d2:bd:91:85:6c:74:2d:b0:7c:34:03:4a:33:b4:76:
         7a:31:78:0e:3c:5d:ac:a3:09:28:4b:6e:44:07:8a:76:bd:b7:
         a5:f6:8e:c6:f7:8c:90:96:9f:a8:34:1a:fe:1a:27:ba:b1:d7:
         50:25:73:2e:a1:5c:8b:1e:28:3e:73:8f:3a:92:85:31:10:ac:
         ad:90:7e:60:68:e1:e6:fa:79:1d:dc:9c:bd:40:d2:e4:b3:c7:
         bd:82:07:cc:8f:a6:d7:83:4c:01:8a:1b:00:ca:36:fe:d1:1b:
         93:24:c2:d6:2f:6c:57:24:16:cd:18:83:65:89:4c:ef:c8:72:
         2d:8d:83:ba:a9:0f:d7:f2:f4:9a:75:f6:f7:df:0c:08:9c:d1:
         b3:c6:0f:de:b8:41:66:b0:44:db:ad:16:59:b4:f2:74:c4:07:
         e6:de:62:67:f3:88:40:cf:34:aa:97:e7:a7:f1:2b:87:92:d1:
         20:8c:e4:5f:93:a8:cf:cb:f9:77:e1:2c:a9:70:f5:da:a8:1a:
         42:62:b8:55:b2:10:39:e3:68:56:07:85:25:e5:12:5e:3c:19:
         56:79:c8:d0:3c:7a:dd:2f:33:f8:37:76:45:77:8f:e6:ff:a6:
         57:3b:a9:14:d4:b2:6a:36:03:49:c9:6d:30:be:3f:c8:8b:88:
         63:34:2d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----