Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1.cer
File:                     35c42a25-42c3-46fe-9914-5b8394eae9b1.cer (raw, json)
Hash identifier:          uE8FH9RDNmmNjkpMVuBGto44VwYhtZxZfa/lVG67ZPA=
Subject key identifier:   03:BA:AD:1D:6A:A5:E8:52:56:17:AE:8D:E4:EB:87:44:65:38:E6:FB
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846E1CC9DFA5D1D7FB27AB5C780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 15 Aug 2024 07:42:10 +0000
Certificate not after:    Wed 18 Nov 2026 08:42:10 +0000
Subordinate resources:    AS: 21684
                          IP: 45.42.80.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e1:cc:9d:fa:5d:1d:7f:b2:7a:b5:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 15 07:42:10 2024 GMT
            Not After : Nov 18 08:42:10 2026 GMT
        Subject: CN=35c42a25-42c3-46fe-9914-5b8394eae9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d9:72:e8:11:95:b8:3f:86:84:09:6c:89:a0:
                    3c:92:15:b8:7b:5d:a7:6d:2e:43:0c:70:e2:cd:44:
                    f1:86:0f:c9:b4:39:9d:19:c4:6a:51:74:4f:d1:e8:
                    da:42:dc:04:96:d5:7e:b9:88:9c:2f:29:54:79:7d:
                    a3:e3:75:aa:8a:25:4c:ca:ec:b4:22:da:fd:29:ff:
                    70:4d:4a:8f:d4:cc:4f:bd:b3:ec:25:65:bc:4a:2f:
                    57:1e:f0:99:27:55:9d:e4:78:4f:37:8a:38:8f:6f:
                    48:ef:50:83:2c:9b:43:00:84:a3:8d:07:10:6f:ac:
                    2b:e3:45:b7:46:03:5b:da:36:fb:d7:12:61:b6:fe:
                    6b:c0:85:bd:90:80:6d:3c:b7:31:8c:e4:94:35:3d:
                    9d:8a:0e:bd:63:e9:92:ef:0d:e1:f7:00:4b:2e:b6:
                    a2:9a:56:62:69:c9:94:f2:6a:59:db:01:32:83:ed:
                    55:2b:22:79:20:3a:99:4e:3f:28:a3:8e:60:2b:6e:
                    c2:59:c6:dc:16:c1:f8:f9:66:fb:2e:75:26:63:25:
                    38:ac:a6:5f:9b:2e:bd:87:0d:89:d7:94:1b:47:c2:
                    fd:13:2f:83:33:03:58:2c:69:0b:ae:98:a8:4a:1e:
                    c5:56:49:da:0b:d1:57:54:d8:bd:9c:4c:4e:db:97:
                    c5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BA:AD:1D:6A:A5:E8:52:56:17:AE:8D:E4:EB:87:44:65:38:E6:FB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.80.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21684

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:47:4a:d4:f3:e0:2e:fb:1f:c8:28:c4:5b:89:a7:23:9c:37:
         78:66:09:80:70:28:ff:67:19:c3:e9:9e:8d:1c:cc:23:40:c3:
         36:9a:47:ab:e7:f1:15:22:bd:55:88:f0:33:59:fe:5e:46:a5:
         9b:1b:af:fd:40:e0:79:1d:a7:a0:96:95:1c:90:0f:3d:a9:72:
         82:92:de:cf:9a:ea:8c:7c:d3:ed:9c:3c:7a:a2:97:08:19:d0:
         dd:2d:3f:e4:2b:30:1b:23:01:1e:e3:65:02:85:a9:cc:5c:91:
         07:d7:57:32:ba:2e:2b:b7:90:74:8d:f3:3d:87:6a:f4:50:3a:
         4b:d9:a1:01:86:82:8f:cb:06:d2:c6:82:00:95:fb:3c:3b:0a:
         af:c0:e1:f8:e5:95:05:64:de:3a:df:fe:cd:e6:ea:18:89:aa:
         af:ef:68:c5:45:cf:53:40:97:66:e7:86:d8:e5:42:c6:2b:7f:
         84:ff:3b:ce:63:1b:d8:39:5a:29:07:4c:67:52:93:08:1b:12:
         0b:2b:2f:1e:bc:fb:ec:ec:72:8b:57:21:e8:fd:04:f1:f7:ec:
         ef:e8:e4:86:66:00:e4:48:75:c3:73:d8:34:87:fb:ab:2b:7b:
         2b:ae:89:8c:f3:c3:d1:8b:4e:1a:fc:0e:94:8c:f8:05:5c:db:
         14:3f:c7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----