Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/605a4857-c047-4a96-8bd5-b63092db11e5.cer
File:                     605a4857-c047-4a96-8bd5-b63092db11e5.cer (raw, json)
Hash identifier:          CjFXWnheVmueDoSb7DuV93kRG4m1hja430n0nBI7TOU=
Subject key identifier:   38:C5:AA:A0:57:A8:2F:91:DD:F1:B2:E4:E2:10:BC:E1:4C:86:6D:29
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847ADBC70F17769CA0C47DE1480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/605a4857-c047-4a96-8bd5-b63092db11e5/605a4857-c047-4a96-8bd5-b63092db11e5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/605a4857-c047-4a96-8bd5-b63092db11e5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 27 Oct 2024 08:54:29 +0000
Certificate not after:    Sat 30 Jan 2027 09:54:29 +0000
Subordinate resources:    AS: 401407

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ad:bc:70:f1:77:69:ca:0c:47:de:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 27 08:54:29 2024 GMT
            Not After : Jan 30 09:54:29 2027 GMT
        Subject: CN=605a4857-c047-4a96-8bd5-b63092db11e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:71:9b:da:f1:b8:50:ff:51:e5:df:d5:be:
                    39:b6:ce:39:65:cf:64:60:e4:a9:76:7c:ae:15:07:
                    1e:a4:e4:5c:f5:d2:17:66:9c:be:4d:dd:6a:a8:0e:
                    88:6d:05:4c:ce:02:a1:35:71:74:d9:a9:71:a8:97:
                    8f:76:e5:c3:ef:4c:79:ce:b0:12:a4:e9:97:0a:62:
                    7c:65:94:9e:ab:d5:6e:63:24:e2:9f:89:bb:b8:a5:
                    97:d8:fc:8a:00:19:52:f7:b4:1a:ee:34:ac:a7:32:
                    33:53:d6:46:9c:a6:f1:40:50:93:27:64:56:16:70:
                    f8:4b:70:09:07:ba:ab:5a:09:6e:76:bb:95:90:4a:
                    db:9c:4f:45:33:bb:7a:51:6c:2c:af:01:76:bf:b6:
                    e4:2f:77:f8:c4:ea:ed:07:59:cb:5d:63:5a:fb:58:
                    a9:80:8e:a8:1b:8f:ff:af:ee:6d:15:6e:29:56:c8:
                    2f:cd:e6:15:73:13:f8:87:19:2c:1d:61:dd:f0:42:
                    31:05:39:2b:45:03:61:f1:ab:7b:78:b4:df:cb:0b:
                    65:c6:73:41:89:6c:db:3c:13:9b:ff:4b:c2:2a:30:
                    ac:aa:69:5d:67:38:6d:b4:dc:19:45:e8:f2:11:a1:
                    97:ff:29:c9:02:a5:4a:9f:bd:10:45:95:ab:45:31:
                    e6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C5:AA:A0:57:A8:2F:91:DD:F1:B2:E4:E2:10:BC:E1:4C:86:6D:29
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/605a4857-c047-4a96-8bd5-b63092db11e5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/605a4857-c047-4a96-8bd5-b63092db11e5/605a4857-c047-4a96-8bd5-b63092db11e5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401407

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d1:34:97:ba:77:ec:c1:ae:5a:27:15:f8:e2:b6:58:05:2a:
         4d:57:04:a3:4a:da:0f:04:8a:b1:32:fd:2f:4e:4f:bf:9f:5d:
         5e:9d:a9:ae:d8:3e:ca:1d:b1:4a:64:85:b2:af:c0:18:a1:34:
         26:4d:d6:df:52:46:32:cf:29:5e:37:3a:08:3f:4c:80:70:ce:
         41:49:c7:de:e1:01:cc:5b:21:99:61:4b:19:31:74:d2:02:c8:
         d3:b7:f4:35:06:74:31:33:6f:f4:66:f4:d2:c2:4e:be:85:64:
         db:68:a5:e5:ac:9a:2d:fb:5d:27:e3:80:94:b8:d9:d9:fa:7b:
         82:6d:b6:72:0a:80:ee:37:e1:47:1e:5d:ca:c6:a3:a2:cd:e7:
         b7:1d:17:f0:c9:8f:4f:ba:60:ae:4b:89:b8:73:77:9e:8e:e5:
         1c:06:64:06:8e:af:88:69:5e:68:47:92:00:97:28:5e:5a:e6:
         67:1f:c5:2e:1c:7d:99:f3:13:e6:89:65:c1:92:84:e0:26:27:
         0a:cc:ab:03:23:82:14:e2:af:78:7b:e0:52:a7:57:ce:b8:ab:
         07:4a:6e:0c:38:d3:b5:df:cb:cd:57:c4:08:d3:b1:d3:b1:09:
         17:02:23:bc:e8:35:6b:bf:39:7a:7c:c2:3d:a7:4b:24:42:8e:
         39:90:17:ee
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEetvHDxd2nKDEfeFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MTAyNzA4NTQyOVoXDTI3MDEzMDA5NTQyOVowLzEtMCsGA1UEAxMk
NjA1YTQ4NTctYzA0Ny00YTk2LThiZDUtYjYzMDkyZGIxMWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+Zxm9rxuFD/UeXf1b45ts45Zc9kYOSpdnyu
FQcepORc9dIXZpy+Td1qqA6IbQVMzgKhNXF02alxqJePduXD70x5zrASpOmXCmJ8
ZZSeq9VuYyTin4m7uKWX2PyKABlS97Qa7jSspzIzU9ZGnKbxQFCTJ2RWFnD4S3AJ
B7qrWgludruVkErbnE9FM7t6UWwsrwF2v7bkL3f4xOrtB1nLXWNa+1ipgI6oG4//
r+5tFW4pVsgvzeYVcxP4hxksHWHd8EIxBTkrRQNh8at7eLTfywtlxnNBiWzbPBOb
/0vCKjCsqmldZzhttNwZRejyEaGX/ynJAqVKn70QRZWrRTHmNQIDAQABo4ID+jCC
A/YwHQYDVR0OBBYEFDjFqqBXqC+R3fGy5OIQvOFMhm0pMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82
MDVhNDg1Ny1jMDQ3LTRhOTYtOGJkNS1iNjMwOTJkYjExZTUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzYwNWE0ODU3LWMwNDctNGE5Ni04
YmQ1LWI2MzA5MmRiMTFlNS82MDVhNDg1Ny1jMDQ3LTRhOTYtOGJkNS1iNjMwOTJk
YjExZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBh//MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADLRNJe6d+zBrlonFfjitlgFKk1X
BKNK2g8EirEy/S9OT7+fXV6dqa7YPsodsUpkhbKvwBihNCZN1t9SRjLPKV43Ogg/
TIBwzkFJx97hAcxbIZlhSxkxdNICyNO39DUGdDEzb/Rm9NLCTr6FZNtopeWsmi37
XSfjgJS42dn6e4JttnIKgO434UceXcrGo6LN57cdF/DJj0+6YK5Libhzd56O5RwG
ZAaOr4hpXmhHkgCXKF5a5mcfxS4cfZnzE+aJZcGShOAmJwrMqwMjghTir3h74FKn
V864qwdKbgw407Xfy81XxAjTsdOxCRcCI7zoNWu/OXp8wj2nSyRCjjmQF+4=
-----END CERTIFICATE-----