Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/46b1b092-1d99-46bf-809e-c61a37bda309.cer
File:                     46b1b092-1d99-46bf-809e-c61a37bda309.cer (raw, json)
Hash identifier:          xSxiJRWNXtQ+Nk8yf+hMWcBzCB35xZS9T0YzZ99CZKA=
Subject key identifier:   35:8C:C5:69:37:FC:4A:5B:B1:A2:E3:6F:02:48:38:91:97:24:36:8F
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847933159D7593070B39589DF00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/46b1b092-1d99-46bf-809e-c61a37bda309/46b1b092-1d99-46bf-809e-c61a37bda309.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/46b1b092-1d99-46bf-809e-c61a37bda309/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 17 Oct 2024 20:43:13 +0000
Certificate not after:    Wed 20 Jan 2027 21:43:13 +0000
Subordinate resources:    AS: 398159

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:31:59:d7:59:30:70:b3:95:89:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 17 20:43:13 2024 GMT
            Not After : Jan 20 21:43:13 2027 GMT
        Subject: CN=46b1b092-1d99-46bf-809e-c61a37bda309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:e1:65:10:1a:cd:c4:fa:21:6e:06:0d:e9:
                    31:e9:d1:ba:b6:8b:4c:a5:bf:4f:3c:09:bd:8d:62:
                    ab:91:c6:00:9e:36:40:bd:a4:d7:d8:b6:2b:0f:22:
                    13:d7:9f:f1:47:c7:6f:a9:b3:52:0c:91:39:46:66:
                    d9:16:9e:b8:67:ea:de:60:fc:6e:8e:b4:d7:5f:11:
                    09:14:be:7f:0d:c0:80:55:18:6b:c3:23:be:85:b4:
                    bb:a7:90:d3:45:f8:86:dd:e5:b0:33:8a:ed:77:fa:
                    40:aa:4f:06:e8:0a:b7:3a:af:97:82:b6:78:f7:ef:
                    cb:37:8b:4b:a6:fe:5d:f3:9e:0f:5a:4c:bd:7d:e6:
                    b3:47:e2:b4:5f:7f:a0:88:76:f9:8d:5e:93:a4:e6:
                    f1:54:20:92:51:0e:66:b4:ad:be:d7:f7:79:64:c0:
                    93:a5:15:18:e8:f1:97:ff:f4:6b:d1:18:c7:81:5a:
                    f6:51:1e:c9:e2:28:4c:5c:21:6c:a5:d0:61:d2:e9:
                    ea:27:b8:5b:c9:34:ba:bc:48:0f:42:cd:d2:1e:15:
                    db:1b:f1:75:6a:73:7e:32:aa:2e:29:12:c8:63:cd:
                    4e:73:f0:67:00:d5:b5:bb:83:38:f2:ef:41:5f:f5:
                    2d:d3:36:f6:48:f9:0f:1e:38:70:f2:2e:f2:65:54:
                    22:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8C:C5:69:37:FC:4A:5B:B1:A2:E3:6F:02:48:38:91:97:24:36:8F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/46b1b092-1d99-46bf-809e-c61a37bda309/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/46b1b092-1d99-46bf-809e-c61a37bda309/46b1b092-1d99-46bf-809e-c61a37bda309.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398159

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:83:df:8f:bd:b5:8a:bd:64:1f:44:c2:4a:8b:81:11:3e:4a:
         7e:e4:d2:68:8f:fe:9b:6a:bc:79:6c:e0:23:31:ea:3f:17:ac:
         37:50:4c:e1:d6:38:ed:24:4a:84:ab:6f:d9:ec:ef:9e:af:12:
         34:96:4a:19:cb:5e:ae:b8:23:53:ef:55:b5:c2:a6:e4:aa:7a:
         5a:a3:ac:25:65:88:3d:06:43:e4:9b:05:71:54:41:b3:2a:d5:
         23:18:1d:aa:25:6b:f8:09:7d:bf:f8:68:c6:de:ce:ab:95:29:
         ea:fa:3c:13:07:76:ae:b0:9e:df:a4:0b:db:c9:d7:5a:98:61:
         0f:5d:56:f2:98:9b:e2:39:64:8d:ed:fc:8b:fc:fc:e1:38:48:
         9b:81:70:bf:94:61:99:f2:5c:c1:12:51:9e:f9:82:0d:29:4b:
         09:34:aa:cf:0a:f6:3b:cb:26:b7:a1:97:fc:54:3b:40:ce:35:
         ac:25:cf:c6:82:f2:bc:9f:f5:d4:5a:31:ca:2c:f0:30:86:55:
         45:ef:08:9a:56:8d:6d:d2:a1:5e:98:dd:77:23:21:2e:91:d5:
         f5:fa:11:8a:7e:2b:52:13:44:78:f0:8a:61:d4:1a:1e:eb:51:
         b1:dd:58:c4:bf:59:f5:05:de:e1:34:f6:92:e7:fd:40:dc:ac:
         42:b3:05:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----