Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b184054-7bfc-4d1a-b3d9-ff051b28b6b5.cer
File:                     8b184054-7bfc-4d1a-b3d9-ff051b28b6b5.cer (raw, json)
Hash identifier:          sS5XhzPheiRxrw4Y9qqP+rnlEpmfDF+Q2evee9ELdQ4=
Subject key identifier:   BB:7D:94:94:57:B9:8A:63:1A:FC:67:6B:5F:69:E5:26:8D:08:34:CE
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847F745CC6098F51AF9F78CE780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b184054-7bfc-4d1a-b3d9-ff051b28b6b5/8b184054-7bfc-4d1a-b3d9-ff051b28b6b5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b184054-7bfc-4d1a-b3d9-ff051b28b6b5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 22 Nov 2024 17:05:15 +0000
Certificate not after:    Thu 25 Feb 2027 17:05:15 +0000
Subordinate resources:    AS: 393330

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f7:45:cc:60:98:f5:1a:f9:f7:8c:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 22 17:05:15 2024 GMT
            Not After : Feb 25 17:05:15 2027 GMT
        Subject: CN=8b184054-7bfc-4d1a-b3d9-ff051b28b6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:64:04:ca:bb:75:8a:95:f4:62:b0:af:3a:03:
                    cc:b0:eb:36:37:22:04:76:3c:3f:e5:0f:59:41:87:
                    d9:07:09:32:6f:bd:27:42:d9:8a:44:ca:2b:97:d5:
                    54:34:c0:4a:11:29:7c:10:fb:be:53:76:72:79:89:
                    a7:83:8d:68:66:41:9e:3c:f4:f3:a0:85:61:fd:00:
                    6e:93:53:88:b9:0a:a1:fe:84:d4:60:e6:c2:15:04:
                    34:d2:e9:2c:b2:45:a6:64:cb:b1:94:d8:25:18:a2:
                    6f:ed:b5:02:de:7d:d3:d1:4e:b9:e7:c9:02:a1:24:
                    76:6a:df:0b:76:4e:91:13:ad:31:0a:51:b6:b3:97:
                    e2:8c:14:86:91:0f:66:3d:a3:d2:68:19:39:12:10:
                    66:d5:54:8f:51:f1:bf:ca:32:b5:9b:e0:ae:9e:61:
                    fc:20:87:1a:0f:1c:6b:c2:64:68:f1:f6:54:f8:1c:
                    2d:9c:8b:2d:c5:3b:5a:53:3d:d7:d3:d0:a6:e3:ab:
                    bc:46:73:32:9f:e8:4d:b6:93:6a:75:9c:4e:fc:cb:
                    d7:0f:63:7e:33:cf:17:c2:f7:0c:83:f9:5f:9d:99:
                    28:f6:23:76:4c:63:bd:e2:ed:31:3e:95:a6:e2:cd:
                    b6:a9:5a:e7:3a:a4:a8:0f:ab:a6:f7:96:0b:e7:0c:
                    09:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7D:94:94:57:B9:8A:63:1A:FC:67:6B:5F:69:E5:26:8D:08:34:CE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b184054-7bfc-4d1a-b3d9-ff051b28b6b5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b184054-7bfc-4d1a-b3d9-ff051b28b6b5/8b184054-7bfc-4d1a-b3d9-ff051b28b6b5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393330

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a2:5b:dd:a7:7c:10:6d:e7:34:3e:b3:33:37:dc:e0:a1:88:
         c2:64:f2:3a:ae:a6:a9:ff:a5:42:82:46:8d:c5:bd:d6:32:03:
         da:52:c6:6f:d8:38:24:54:1f:2c:95:de:f9:86:98:33:42:d3:
         ea:6e:5c:c3:e6:d1:51:81:ff:9c:26:d9:98:57:1c:7f:3a:b4:
         ea:0e:ff:d3:cc:3a:22:b9:db:a5:36:dc:c0:fe:84:65:d1:59:
         0d:ff:b9:8f:8d:4b:0c:78:71:1b:b8:01:e3:67:45:48:32:27:
         9e:49:6b:d6:86:bf:3f:db:a6:f9:54:9f:3e:a4:30:51:b1:1f:
         24:ea:b7:51:08:97:67:3b:8f:d2:07:1d:e9:f3:f0:b7:d8:86:
         1b:6d:fc:f4:00:af:64:85:82:c1:71:2f:72:ef:8e:6c:62:fc:
         11:c1:7c:a5:1e:4c:19:6d:59:10:6f:00:9a:f9:74:29:62:c5:
         77:99:a6:c9:60:9c:cf:c2:b3:9b:a1:61:5e:39:37:48:47:86:
         13:ee:3d:4a:cb:68:23:c3:24:3c:f6:e5:84:7e:9e:92:6f:79:
         4f:61:a0:00:11:b1:84:08:ac:74:36:52:9f:51:7a:1a:ff:fb:
         ce:67:a3:c9:19:3e:81:7b:85:40:82:a9:87:5c:5f:d5:2c:a2:
         17:e7:9f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----