Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4bb7fca0-3aed-4890-a6dc-51894ec87706.cer
File:                     4bb7fca0-3aed-4890-a6dc-51894ec87706.cer (raw, json)
Hash identifier:          nY4F58JG79pCj0R5uJakJQ+nDr8gZ+mQm5tEzyMAUpA=
Subject key identifier:   E2:FC:79:B5:20:08:5D:F0:DC:9E:89:18:70:59:D7:CA:9D:A6:7A:92
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584757B7D45D52C36E255F171980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4bb7fca0-3aed-4890-a6dc-51894ec87706/4bb7fca0-3aed-4890-a6dc-51894ec87706.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4bb7fca0-3aed-4890-a6dc-51894ec87706/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 26 Sep 2024 13:25:40 +0000
Certificate not after:    Wed 30 Dec 2026 14:25:40 +0000
Subordinate resources:    AS: 396150
                          IP: 162.246.96.0/22
                          IP: 2620:12e:6000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:b7:d4:5d:52:c3:6e:25:5f:17:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 26 13:25:40 2024 GMT
            Not After : Dec 30 14:25:40 2026 GMT
        Subject: CN=4bb7fca0-3aed-4890-a6dc-51894ec87706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:28:63:11:cd:81:9b:7d:2f:fa:94:ee:7c:18:
                    46:3a:c4:9f:8c:cb:45:ce:ab:b4:46:c1:1e:22:11:
                    ef:a3:ec:ff:11:28:dd:80:68:8c:48:db:38:c3:1b:
                    6c:c3:9f:4e:37:fe:49:ea:a7:3f:1e:97:f3:3a:56:
                    3d:51:5d:d1:76:92:59:73:e2:08:71:da:a4:4b:5e:
                    44:c1:b2:ef:4d:f8:df:88:7a:5a:98:39:c1:b2:4d:
                    7d:4a:fa:ad:74:29:22:79:d0:26:74:1c:fd:39:0c:
                    3c:aa:8b:dd:62:31:76:08:19:05:78:ec:9f:76:4c:
                    5a:d6:ff:b1:1e:3f:65:88:45:d3:eb:14:e5:2f:0e:
                    11:da:d3:61:73:d0:5f:dc:f7:dc:12:f8:f4:e8:09:
                    11:94:5c:f9:49:2a:a4:f9:01:95:30:c1:07:7a:b9:
                    57:ed:4b:3f:5c:3a:51:4a:ad:bc:76:b1:b8:c3:70:
                    db:91:22:a5:7f:4c:80:77:15:1a:d5:08:9d:37:be:
                    77:c2:9e:47:bb:9e:c3:f1:91:6c:97:62:a9:6b:5f:
                    46:5e:9d:b9:1c:e1:c7:da:14:2b:10:5b:1c:54:63:
                    15:99:cc:1b:98:d1:bf:c5:0c:fc:e3:05:f4:83:bc:
                    86:22:8d:e0:80:5a:c5:e3:4a:eb:9b:ac:4b:03:3a:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FC:79:B5:20:08:5D:F0:DC:9E:89:18:70:59:D7:CA:9D:A6:7A:92
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4bb7fca0-3aed-4890-a6dc-51894ec87706/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4bb7fca0-3aed-4890-a6dc-51894ec87706/4bb7fca0-3aed-4890-a6dc-51894ec87706.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.96.0/22
                IPv6:
                  2620:12e:6000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396150

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a5:64:41:eb:15:33:15:35:95:cc:54:7e:6a:8d:88:25:2f:
         5b:a2:54:c9:8b:a7:ce:5a:eb:dd:ed:df:25:5e:87:a6:97:c0:
         60:24:08:2b:91:2b:de:4e:e8:27:84:d5:32:8d:03:d5:25:6c:
         e5:10:79:ec:1e:83:04:61:61:10:62:4a:c1:b4:2c:7e:1e:6f:
         d2:ce:47:3a:29:50:57:88:f5:84:e3:30:a3:75:7f:37:33:bc:
         3d:c7:ea:9b:0c:f0:46:bb:78:b8:95:fb:e1:85:f8:ae:bf:6e:
         3e:49:c6:04:11:4b:5f:c4:f9:43:b0:2b:35:ff:03:7c:6a:47:
         f0:10:cb:d4:b0:2f:9e:04:cc:73:1b:3f:f7:56:b3:1b:61:94:
         53:bb:79:0f:12:36:f6:d5:e1:97:0c:06:c8:6b:1c:a0:3f:b1:
         53:a4:54:31:39:e2:2c:6b:5e:f2:8d:de:de:49:e1:68:1a:e2:
         af:4c:88:78:7c:0b:67:a3:d2:4b:f0:4e:fe:57:3e:91:b1:95:
         cd:f4:1f:42:e3:be:b0:39:d8:ab:72:da:d8:35:ea:eb:5b:d9:
         de:14:b6:e7:d7:35:f0:54:2d:3c:ba:4b:cf:e4:2b:13:f6:d8:
         1f:53:ab:09:b1:98:72:cc:04:1e:bf:b0:64:3b:73:a2:fe:8c:
         3e:a6:9a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----