Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer
File:                     8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer (raw, json)
Hash identifier:          7/cod53Q0BIJ3V9DI0WtIOAHbenNM5u9J7w50JHylE0=
Subject key identifier:   A0:9C:62:3B:6D:64:FD:4F:08:01:60:97:F8:DB:8F:44:DF:97:B9:DF
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846F83C4B7211404DB51A175480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 23 Aug 2024 08:34:58 +0000
Certificate not after:    Thu 26 Nov 2026 09:34:58 +0000
Subordinate resources:    AS: 32797
                          IP: 23.156.40.0/24
                          IP: 2602:2ef::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f8:3c:4b:72:11:40:4d:b5:1a:17:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 23 08:34:58 2024 GMT
            Not After : Nov 26 09:34:58 2026 GMT
        Subject: CN=8b72935c-ac1b-4aa0-b408-9c3271a8a2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b7:e6:a0:fa:b8:91:f0:7d:7d:e9:0e:55:77:
                    df:4c:7c:c5:33:8e:f7:e3:f6:09:fc:d9:78:99:fd:
                    97:be:99:78:f6:89:d4:22:67:66:97:c5:93:2c:74:
                    be:96:65:64:d9:3a:f1:d1:4d:40:6d:1d:3a:2e:99:
                    d9:7e:d9:3e:0b:5e:bb:b4:82:b1:88:9d:78:a9:13:
                    ce:48:b4:cc:44:49:3c:4d:c9:f9:53:68:2b:ca:b5:
                    9b:95:42:02:ad:dc:8f:03:13:cd:16:60:6d:0f:2a:
                    67:c1:63:ec:19:2f:c1:5a:d3:7a:e5:00:99:07:da:
                    ec:f0:da:27:b9:c6:5e:17:03:5d:e8:1d:bd:db:90:
                    b2:6b:42:9e:f1:1a:d0:5c:63:19:f7:11:e1:fc:8c:
                    8c:54:4a:18:ef:b5:16:ee:3c:b6:6b:64:b0:6f:a4:
                    92:94:24:1e:61:3a:b6:ef:07:8c:a5:0a:59:c9:99:
                    1b:ec:46:39:fe:1c:bb:6c:b2:1f:60:62:40:35:03:
                    a7:4c:29:75:6a:95:4f:2a:4c:9d:5a:bf:de:85:88:
                    2f:1b:d7:15:e2:04:26:77:45:48:b5:3b:ab:9e:59:
                    6b:4b:96:55:f9:f2:3c:c4:2c:01:1c:a3:78:0b:a4:
                    95:8c:74:35:f4:f4:cc:2c:16:5a:2c:78:5e:5e:81:
                    88:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9C:62:3B:6D:64:FD:4F:08:01:60:97:F8:DB:8F:44:DF:97:B9:DF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.40.0/24
                IPv6:
                  2602:2ef::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32797

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a5:1b:66:48:c1:50:21:db:b6:b4:3d:8f:de:65:f5:08:ee:
         84:32:48:04:d5:24:05:c4:e5:40:08:de:9f:18:1e:24:f3:10:
         8f:6a:4a:39:27:e2:29:1e:d8:00:25:2a:99:7e:80:bd:69:56:
         42:e1:54:be:80:c6:f6:94:7e:70:66:7c:f6:dd:ff:0a:84:6f:
         e4:00:bd:a8:f2:9a:55:a7:b5:99:2e:56:d3:40:68:d2:54:b7:
         15:3c:e4:10:81:15:e5:e3:72:b8:fa:c7:46:b8:14:b2:42:68:
         2a:cb:70:76:19:f6:82:89:1f:b3:5c:4f:4f:b8:bc:60:a9:18:
         b3:53:9c:c5:95:4c:b6:1e:11:b7:49:6d:9a:6b:48:4e:37:a2:
         cf:0a:27:c4:78:76:d0:a5:53:0d:7d:51:43:bd:35:b1:44:8c:
         84:7a:e2:1e:46:1e:6d:37:ee:28:8e:5e:b3:c0:96:70:32:38:
         ca:89:70:1a:88:33:bc:e1:2b:55:74:c7:7a:dd:34:cb:c9:12:
         39:5f:ce:4e:e8:4b:b8:a9:c8:03:50:78:4a:f1:fb:28:92:ed:
         ef:ba:73:37:6a:6a:1a:83:e0:2a:fd:25:c7:21:54:26:1f:bf:
         35:89:8a:e8:a0:51:cb:65:26:b2:af:88:3c:7e:ec:18:77:5c:
         1c:61:b2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----