Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f6925e-12e0-4839-9205-d2d092f33ac3.cer
File:                     52f6925e-12e0-4839-9205-d2d092f33ac3.cer (raw, json)
Hash identifier:          1f3nFZ8nZhUPnjdpKSqZAzGjilOCYZfL7xglcujp9S4=
Subject key identifier:   6F:90:83:56:93:9E:8B:29:CA:2B:FA:1E:F2:3B:3A:CD:C7:9C:55:85
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584793287D9257480AEBA5F35D8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f6925e-12e0-4839-9205-d2d092f33ac3/52f6925e-12e0-4839-9205-d2d092f33ac3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f6925e-12e0-4839-9205-d2d092f33ac3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 17 Oct 2024 20:25:22 +0000
Certificate not after:    Wed 20 Jan 2027 21:25:22 +0000
Subordinate resources:    AS: 395481
                          IP: 149.97.116.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:28:7d:92:57:48:0a:eb:a5:f3:5d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 17 20:25:22 2024 GMT
            Not After : Jan 20 21:25:22 2027 GMT
        Subject: CN=52f6925e-12e0-4839-9205-d2d092f33ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:ba:73:ee:ba:dc:8e:a5:e6:7a:b0:b7:a2:
                    ac:94:f6:85:2f:d3:d0:ba:33:58:e8:2b:e5:10:2c:
                    5d:55:be:f0:72:f4:80:33:e1:bc:52:c4:8a:c4:19:
                    af:fb:64:07:43:e3:94:f9:a3:81:f8:45:75:5b:f3:
                    bb:23:4c:10:71:53:95:49:35:c2:76:35:c0:4c:e7:
                    18:04:53:cc:e0:b7:85:c8:e2:3d:25:16:8a:17:81:
                    f5:de:c0:98:60:1b:b2:81:48:37:2d:d9:dd:4f:53:
                    3c:3c:6e:38:18:81:14:a4:84:35:94:34:30:a9:8e:
                    03:3f:b9:39:4b:ed:23:60:a8:fc:12:e5:eb:0b:fc:
                    53:34:e7:fd:62:da:9b:5c:3f:71:d0:67:ab:d8:0f:
                    2f:20:f7:41:55:73:10:a7:55:d7:f4:0c:52:86:2c:
                    76:6d:bd:ac:7f:d5:98:79:47:73:a6:21:bb:ca:e3:
                    46:df:b7:a3:76:bc:8a:c2:eb:03:fb:ee:e5:21:61:
                    b9:e5:5b:f4:70:47:52:a0:fe:b3:47:8e:b4:a3:b3:
                    ba:61:96:38:f4:73:07:36:f3:8b:99:08:a2:83:ef:
                    a2:27:85:c7:05:99:03:88:23:be:df:84:9d:23:6f:
                    7a:f3:63:da:d9:df:64:5b:3f:42:a7:d9:6f:80:65:
                    4a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:90:83:56:93:9E:8B:29:CA:2B:FA:1E:F2:3B:3A:CD:C7:9C:55:85
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f6925e-12e0-4839-9205-d2d092f33ac3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f6925e-12e0-4839-9205-d2d092f33ac3/52f6925e-12e0-4839-9205-d2d092f33ac3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.97.116.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395481

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:0e:f3:6b:7c:c0:d7:16:53:b7:08:44:6e:d9:ab:bf:17:90:
         6a:c1:c1:f4:f2:1c:4c:9c:2b:59:79:d0:9f:2d:2e:e8:94:33:
         89:6a:aa:00:b9:1f:14:57:3d:ad:bc:ed:07:6a:8f:2e:e4:d5:
         b2:0e:75:06:1f:08:ab:35:1c:8a:ed:8a:3d:92:d5:04:11:49:
         fd:20:a7:50:39:62:44:e8:ae:1a:e6:82:5e:4f:c2:c6:4d:58:
         e9:c8:a5:74:bb:9d:a2:47:ef:d7:59:a5:53:0c:b1:68:06:cc:
         04:7d:6e:41:52:49:bf:ce:48:b2:4d:86:79:be:0f:52:ab:71:
         93:89:ba:3e:be:03:a9:15:04:25:6f:9a:77:4d:b5:bb:79:26:
         3d:68:48:0f:67:a4:f3:90:c6:4d:f3:c0:02:1c:fb:4f:54:fe:
         9f:57:30:ab:95:1c:d5:96:b9:b9:06:85:3d:8c:15:03:e4:33:
         73:25:04:5b:a0:47:8a:7f:2e:eb:e9:1a:86:5d:7f:e2:07:0e:
         98:68:c5:a0:47:e3:23:6f:65:58:2e:18:d1:a2:ab:4c:3f:b0:
         16:77:f5:bd:c5:dd:ef:1a:10:c0:dd:e2:3c:6c:5b:16:50:60:
         af:5a:ab:04:39:0c:a5:8c:0b:cc:4c:3b:51:06:05:8e:d5:bd:
         ac:ec:44:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----