Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer
File:                     4a55c0a6-eaa8-4039-be15-220f288acd5a.cer (raw, json)
Hash identifier:          xqTSCoAwrGkJnR+4QyPas3iBadAKVv5le8fm84pbqak=
Subject key identifier:   46:2A:E0:63:81:62:E2:AA:74:7C:20:E2:C9:6A:14:60:99:22:35:A0
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847A762B550FBC03A191EB30700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 25 Oct 2024 02:18:50 +0000
Certificate not after:    Thu 28 Jan 2027 03:18:50 +0000
Subordinate resources:    IP: 140.235.164.0/22
                          IP: 2602:f7d5::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:62:b5:50:fb:c0:3a:19:1e:b3:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 25 02:18:50 2024 GMT
            Not After : Jan 28 03:18:50 2027 GMT
        Subject: CN=4a55c0a6-eaa8-4039-be15-220f288acd5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3e:d7:df:2d:04:75:7f:ce:b2:7d:47:12:b5:
                    47:7e:aa:58:a9:c5:48:14:ff:b9:88:bb:6b:0e:4b:
                    d9:5e:91:7c:bc:66:36:b1:ef:e7:5f:36:72:a4:ae:
                    82:85:8a:61:82:90:28:8d:03:58:a0:9d:6d:ae:2a:
                    d7:6e:a4:29:38:65:d4:3d:1a:95:2d:70:1d:19:40:
                    33:76:9d:fd:56:e4:53:b4:db:37:09:80:51:92:67:
                    5e:39:c4:b1:c3:07:c9:ce:62:e8:74:28:12:b6:f3:
                    26:a6:82:ba:11:55:4a:cc:16:7b:eb:44:3c:95:4c:
                    24:e7:04:7a:46:74:d5:e1:c8:83:6d:f2:ec:1a:78:
                    dd:46:b0:f3:46:f1:c6:c0:0f:97:83:b3:21:7e:9d:
                    0c:10:61:8a:e0:7a:e9:dd:7a:f8:0e:0f:67:09:78:
                    85:8b:ee:31:dc:a6:52:b6:3e:1c:6c:87:d4:5a:f1:
                    54:f4:6c:c3:a2:da:e7:5a:7a:0e:38:b5:2e:2d:21:
                    95:23:23:a6:37:0d:44:1e:67:b0:36:a7:cf:e4:ba:
                    49:b9:1f:ad:d9:55:02:29:b5:ac:4c:5f:e9:d6:0a:
                    92:8d:11:fa:56:3b:d1:5b:59:b4:26:80:79:e8:07:
                    88:91:94:43:18:16:55:66:fb:3a:2a:07:f2:de:a8:
                    2b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2A:E0:63:81:62:E2:AA:74:7C:20:E2:C9:6A:14:60:99:22:35:A0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.164.0/22
                IPv6:
                  2602:f7d5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:f3:e5:1e:5d:e4:80:7b:7e:1c:fe:98:10:e7:09:26:6a:a2:
         8b:5a:18:39:2a:ad:aa:e6:ee:99:ca:ea:ca:19:2a:c1:75:d8:
         be:e0:ac:5c:1e:44:8f:3a:32:fe:b2:23:93:8f:e6:f8:88:3b:
         2d:a6:c9:ba:87:b1:8f:3c:96:86:a1:dc:22:ae:09:1d:e2:aa:
         05:f7:d9:ac:8b:a4:de:19:bd:29:d5:ec:07:b0:d9:c7:85:b2:
         7a:91:83:39:95:dd:4b:cb:e9:e9:50:d4:21:a7:23:99:ec:f1:
         b8:87:2a:96:b6:19:0f:c4:86:47:86:e9:16:cc:b3:be:ad:e7:
         4e:34:33:40:1b:2b:37:d7:ff:bf:da:c8:34:ff:b8:a9:00:bc:
         ae:50:74:00:bb:54:b8:64:d5:92:7e:7f:89:24:1c:58:d1:3f:
         8f:ab:4e:55:8e:85:70:27:61:d3:af:e9:7a:58:77:89:b7:fa:
         36:d9:0d:d6:63:18:97:35:60:23:8d:92:e1:b0:cd:70:4a:f8:
         04:6b:cd:a7:4d:87:31:fc:b2:44:4c:07:08:00:f2:98:c3:42:
         80:b9:28:52:7d:b8:d8:81:e1:01:79:61:5f:b0:c6:2b:8b:c3:
         94:4f:b1:09:de:e7:40:1f:3c:6b:1e:4a:33:ba:ba:0d:e4:ff:
         82:72:54:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----