Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer
File:                     20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer (raw, json)
Hash identifier:          +jUladv5i002JiAZdKFpHXrYtlNO9BkiK8fiOTr3erY=
Subject key identifier:   B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846F34DAF6F02F7AFBC3D0E04C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 21 Aug 2024 14:10:58 +0000
Certificate not after:    Tue 24 Nov 2026 15:10:58 +0000
Subordinate resources:    AS: 21790
                          IP: 64.190.140.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f3:4d:af:6f:02:f7:af:bc:3d:0e:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 21 14:10:58 2024 GMT
            Not After : Nov 24 15:10:58 2026 GMT
        Subject: CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:93:89:95:15:64:92:6a:fc:da:df:5a:14:
                    08:aa:59:62:9a:c5:f9:87:ab:f2:e9:e9:8f:1c:27:
                    a5:84:f2:72:a1:23:0f:60:ee:f5:41:e1:ee:58:0b:
                    0d:5b:d0:9b:38:ea:a7:3a:ad:b5:2a:68:b2:20:f6:
                    96:93:0a:01:cd:7c:3f:2a:b8:11:41:15:52:5d:09:
                    7a:12:51:cb:23:4d:09:5c:2b:df:79:be:67:5b:2c:
                    1d:59:52:6c:77:17:8d:f2:71:34:23:93:11:34:69:
                    55:06:47:d5:00:b8:29:78:ac:66:0a:8f:cd:6f:d3:
                    30:a3:98:da:b2:fe:97:46:2d:cb:17:e0:e4:6c:31:
                    4a:ef:a8:0b:19:7c:e8:08:bc:99:b0:d9:8e:bb:bf:
                    a8:97:3f:16:9a:7d:a1:c7:8f:6a:e4:54:58:8b:a1:
                    aa:35:d3:0d:8c:d0:88:a9:14:58:86:15:a6:e1:09:
                    fa:35:de:3a:49:9e:d8:93:4d:64:87:af:c7:15:a8:
                    8e:a8:a8:93:fc:d3:5b:27:6a:1e:d7:c5:42:60:4f:
                    8c:9c:7b:e6:b5:86:dc:e8:37:bb:98:2e:ba:ca:50:
                    3d:fb:c3:c9:6b:9f:ff:84:6f:82:86:07:19:d4:cf:
                    70:a6:02:1f:42:47:3f:c0:9c:c9:6e:44:d1:f1:77:
                    b4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.140.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21790

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:43:ad:4a:7d:c9:38:f7:02:67:a1:0e:0c:38:de:f7:98:b5:
         6b:1c:9e:29:1f:0d:7e:98:c9:2f:f7:3b:4c:09:6e:b8:52:cd:
         2c:91:0c:90:d6:6c:09:a9:f2:01:7b:30:92:12:11:96:b5:2b:
         16:51:2b:d9:30:4b:f1:55:f2:ff:8b:6f:d4:2b:99:f6:ac:b8:
         50:b7:93:62:7e:1c:09:d7:cf:70:9e:99:7e:2a:b9:4d:da:7b:
         38:81:43:ed:e1:fc:67:38:93:0b:f7:3b:cd:9e:1c:77:16:95:
         ee:6e:67:bb:1a:c8:57:85:92:31:61:e7:64:f7:ad:6f:74:71:
         2d:89:ef:5f:da:f0:66:ee:ae:56:be:45:c6:64:a0:fd:69:c2:
         85:4e:cc:e2:0b:4e:06:1d:f0:4d:b3:de:bb:b4:19:2a:77:55:
         c5:77:66:84:44:75:ea:47:7d:30:40:5c:7d:3f:af:1b:2e:20:
         8f:c1:0e:43:c1:15:12:d7:21:86:4f:60:06:b5:ac:12:62:47:
         04:6a:3f:35:38:20:cd:7a:72:3a:37:3e:31:0b:75:d5:32:e5:
         ac:c0:57:6e:2c:ee:ba:90:f2:bf:e2:98:ed:91:9c:a7:84:92:
         85:9d:db:d3:12:7c:2a:10:08:4f:dc:06:e7:c4:43:77:6f:88:
         c3:ad:e6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----