Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514.cer
File:                     7a870649-61cf-4a59-a195-226a35c00514.cer (raw, json)
Hash identifier:          N8GamjXUvRkN3SmjxvxzVFwAyDEDKYC2AsMG9OUovDs=
Subject key identifier:   89:32:94:27:6F:E0:A0:38:82:E5:3D:D9:29:B6:C7:33:5E:86:C0:4C
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858472CD7829642A61DD6E76B1180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a870649-61cf-4a59-a195-226a35c00514.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 11 Sep 2024 04:49:45 +0000
Certificate not after:    Tue 15 Dec 2026 05:49:45 +0000
Subordinate resources:    AS: 26406
                          IP: 2620:0:c80::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:d7:82:96:42:a6:1d:d6:e7:6b:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 11 04:49:45 2024 GMT
            Not After : Dec 15 05:49:45 2026 GMT
        Subject: CN=7a870649-61cf-4a59-a195-226a35c00514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0f:f7:42:05:95:c8:6e:a1:9e:52:d8:b9:4c:
                    eb:d7:33:c7:ba:c6:bd:f5:d8:2b:90:91:c4:09:46:
                    03:f4:e9:94:ce:0e:74:6e:6e:0d:e2:a8:de:36:e8:
                    d4:0b:14:da:59:2d:61:25:4e:28:a5:6e:e4:d8:90:
                    d0:e1:86:6f:7d:1c:fe:de:ed:ed:0c:15:5d:1a:11:
                    5f:b5:89:ef:35:01:53:b5:79:a0:f6:30:37:24:4d:
                    ed:93:12:02:9d:3b:d7:53:ad:fa:d6:83:2b:ab:10:
                    8c:c1:e1:e7:7a:6d:49:36:df:cb:99:a1:9b:48:af:
                    10:55:72:aa:ab:3e:12:b1:4f:90:e7:99:e5:65:9c:
                    56:44:39:d8:23:94:57:3f:37:ea:4b:b4:77:51:d7:
                    0a:d7:c4:3f:19:a4:88:46:b4:4b:56:97:e9:9b:a3:
                    4a:e4:5e:b9:ad:08:35:60:df:3b:02:1f:dd:c7:0e:
                    5e:82:b8:e3:87:5a:eb:d6:e9:9e:03:58:95:1a:19:
                    c3:2e:86:50:a4:a7:fb:a5:21:44:33:e9:a4:b1:d1:
                    1a:8c:eb:f9:91:40:80:4e:f5:f2:31:f2:88:61:ac:
                    ad:f8:33:56:00:ff:3f:56:11:05:df:d3:e6:3f:ff:
                    8c:04:d4:c0:38:b2:ba:99:24:5a:b7:94:47:f8:c1:
                    73:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:32:94:27:6F:E0:A0:38:82:E5:3D:D9:29:B6:C7:33:5E:86:C0:4C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a870649-61cf-4a59-a195-226a35c00514.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:c80::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26406

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:89:7d:77:b8:ab:3b:9a:93:24:b0:6e:77:40:d1:fa:34:45:
         c4:18:ee:ab:cd:bd:8b:09:cb:d4:e9:3e:31:62:47:a8:bb:f1:
         fa:42:5e:ba:8e:ea:3f:24:66:ec:f3:a9:e4:81:fc:20:6c:d0:
         c0:e5:2a:57:a6:d8:6c:e6:ac:92:03:6d:a0:d2:6f:86:c7:07:
         1a:59:44:d1:b6:af:6c:00:9b:a6:82:4c:72:e0:4c:55:72:b3:
         8a:7c:26:9b:07:3f:fb:cd:f4:18:dd:66:53:82:bd:b1:47:91:
         4e:fc:56:a0:62:1c:1b:85:18:3f:8a:11:e6:f3:41:7a:3f:72:
         69:bd:a6:e6:af:86:de:b7:f9:17:72:cd:ef:a5:7c:17:67:d4:
         2a:48:2d:3e:d5:67:a2:fc:1a:e8:1f:10:34:66:9c:86:83:c4:
         eb:0e:6e:b7:bc:be:78:c1:dd:f8:84:b1:68:8d:37:aa:d7:63:
         8c:01:92:bd:e3:86:f3:12:b4:9c:a9:3b:9d:74:4d:da:51:90:
         cc:13:e9:80:57:c1:68:79:31:62:1c:3e:f5:0a:af:31:b5:09:
         cf:27:e2:58:61:5c:9c:fb:c0:bf:0e:99:c1:95:6d:a4:fd:f0:
         f6:e0:c5:31:3d:11:b0:e3:84:16:fe:ed:0e:70:59:77:81:24:
         bb:10:ff:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----