Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.cer
File:                     2cc7763e-7f76-4992-8aa2-f572d5b0bf60.cer (raw, json)
Hash identifier:          Trl7I2WAb4Q9I09MUu40JiBK4QzQDqi5O7wMwCaOrrM=
Subject key identifier:   56:7F:07:58:16:A5:74:32:2B:7C:68:E8:EF:4A:FE:9F:C1:46:E7:4E
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847EC1926ED683258FBB6494200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 18 Nov 2024 17:01:24 +0000
Certificate not after:    Sun 21 Feb 2027 17:01:24 +0000
Subordinate resources:    AS: 397059
                          IP: 208.92.154.0/24
                          IP: 2620:4a:2000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ec:19:26:ed:68:32:58:fb:b6:49:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 18 17:01:24 2024 GMT
            Not After : Feb 21 17:01:24 2027 GMT
        Subject: CN=2cc7763e-7f76-4992-8aa2-f572d5b0bf60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:5f:7d:ba:a5:93:f1:c9:c9:69:a9:09:3b:
                    ca:ea:76:b7:2c:c1:10:98:aa:db:e1:63:51:7e:46:
                    a0:59:e8:09:b1:00:34:2e:08:ce:c5:df:ff:8f:9a:
                    c5:07:b9:13:c0:0b:1a:73:6e:02:82:f7:24:3a:47:
                    01:0d:41:cd:32:5d:e2:11:55:08:bc:b4:b9:b5:fb:
                    34:a1:6c:bb:80:98:38:88:41:77:6a:e3:a5:7c:64:
                    29:f0:c8:02:f0:f3:97:cd:43:69:20:2f:4b:14:e9:
                    7b:ac:f9:22:83:a6:6f:b5:e4:26:23:52:ec:1f:1d:
                    4d:c1:f4:08:8a:79:8a:43:60:30:cb:73:63:dd:4a:
                    02:38:94:af:9e:eb:c8:e4:c4:c3:72:e7:63:57:2e:
                    b4:d1:74:a7:f4:32:2b:ae:78:39:99:e9:19:9c:59:
                    da:ae:83:6b:a0:6d:36:4f:53:4a:3d:24:33:d5:4f:
                    9c:50:1f:c6:d9:31:8d:da:85:ef:bd:b9:6c:14:32:
                    18:16:ca:49:42:79:ef:ee:bf:13:b2:46:3b:5e:01:
                    69:2d:f8:c0:ba:00:9d:d4:ca:29:34:0d:83:29:1a:
                    54:84:29:ec:21:a7:7e:77:8e:3d:43:8c:a0:fe:54:
                    dc:d4:dc:81:a9:29:e7:e8:6b:c8:d4:93:05:b3:8a:
                    66:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7F:07:58:16:A5:74:32:2B:7C:68:E8:EF:4A:FE:9F:C1:46:E7:4E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.92.154.0/24
                IPv6:
                  2620:4a:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397059

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:2c:f7:4d:75:d9:28:9b:26:ac:d9:6d:9b:67:f3:72:f6:1c:
         7e:09:71:a6:87:ad:c2:61:61:1e:f9:af:0d:e7:53:a2:c6:40:
         ae:89:a8:84:1a:55:45:61:fd:fd:fb:67:71:22:11:22:69:e4:
         72:29:70:6d:0d:53:fc:52:16:81:90:4a:6c:bd:f4:6c:10:cf:
         a5:d1:5d:a3:62:5c:aa:75:54:50:dc:6b:4c:08:e7:e0:ac:4f:
         2d:26:04:ab:89:14:46:39:84:d5:35:c8:db:b7:aa:4a:7f:a8:
         1a:14:ed:5a:db:fb:07:48:03:24:01:26:68:34:8a:01:66:dd:
         9f:a0:6a:af:af:51:cd:52:f2:7d:c4:73:91:6e:be:57:57:ff:
         a0:f8:9d:d1:cb:e0:13:c9:12:8f:6c:d6:fd:18:6c:c5:7a:32:
         60:d1:eb:89:4a:20:3f:43:71:75:a0:50:af:d6:91:ed:49:74:
         19:12:68:5c:4d:b2:8c:f6:a9:41:19:3f:e0:d5:a8:77:0b:24:
         c3:3c:36:eb:f1:eb:2d:3a:48:a2:de:85:86:af:07:ee:ec:0b:
         3e:d7:07:ca:75:c8:c1:24:f3:51:fa:eb:2c:96:f3:a0:52:9b:
         88:a7:fc:da:79:0e:d7:56:74:9c:8f:85:af:3a:59:fe:75:cb:
         ba:45:e2:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----