Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9f738dca-74db-40d9-aca5-1f931e76a9f5.cer
File:                     9f738dca-74db-40d9-aca5-1f931e76a9f5.cer (raw, json)
Hash identifier:          odZfzA4FRI3+gn91FAGlnA7hTpt4wJcWTfZ1eV95GJA=
Subject key identifier:   77:DA:0A:EC:10:FB:84:70:C0:F3:19:A2:89:B8:B5:A9:B6:4B:50:23
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858477C58EDBD4262E375F6C61280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9f738dca-74db-40d9-aca5-1f931e76a9f5/9f738dca-74db-40d9-aca5-1f931e76a9f5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9f738dca-74db-40d9-aca5-1f931e76a9f5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 09 Oct 2024 16:19:22 +0000
Certificate not after:    Tue 12 Jan 2027 17:19:22 +0000
Subordinate resources:    AS: 55127
                          IP: 198.97.228.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7c:58:ed:bd:42:62:e3:75:f6:c6:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct  9 16:19:22 2024 GMT
            Not After : Jan 12 17:19:22 2027 GMT
        Subject: CN=9f738dca-74db-40d9-aca5-1f931e76a9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3a:a3:21:e3:35:47:17:3f:00:93:0c:2b:13:
                    98:38:a2:4c:2d:01:b7:af:cb:6c:26:f0:41:07:c5:
                    eb:81:ea:bb:2c:cd:90:c4:52:17:c0:ea:05:53:ee:
                    47:fe:ee:f7:3f:1a:09:d3:8b:50:16:2c:60:d4:c7:
                    95:0e:6f:f3:bf:b5:82:0a:45:2b:f3:ac:b4:27:eb:
                    60:bc:e9:24:94:6c:e5:38:70:7d:ee:bc:5e:0c:ac:
                    37:3c:70:40:67:89:cc:b6:b7:bf:28:dc:99:97:6a:
                    06:bc:2a:7d:a6:cc:d3:56:71:60:4f:87:7d:ac:d2:
                    32:4f:bc:2f:49:b6:96:51:98:15:e5:28:6b:15:1f:
                    63:e7:69:3f:2b:95:09:66:88:aa:b6:89:20:cb:c5:
                    ca:85:d8:59:67:73:27:80:a7:42:62:1a:d3:f7:9a:
                    b9:3c:f2:c4:44:3c:77:eb:05:1d:f9:20:3c:8b:e8:
                    a5:14:f0:cc:f9:15:4c:14:27:68:6e:8e:8f:07:6a:
                    76:a9:82:21:a4:62:f7:25:d5:0a:a9:56:10:47:21:
                    d7:a0:26:96:95:9f:50:60:4a:39:90:58:fc:9d:8d:
                    ae:b9:6b:f5:83:fc:04:bb:bd:58:47:fd:8c:4f:47:
                    fe:db:97:9b:f8:f0:e3:b6:55:2a:13:b1:25:62:e9:
                    fd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DA:0A:EC:10:FB:84:70:C0:F3:19:A2:89:B8:B5:A9:B6:4B:50:23
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9f738dca-74db-40d9-aca5-1f931e76a9f5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9f738dca-74db-40d9-aca5-1f931e76a9f5/9f738dca-74db-40d9-aca5-1f931e76a9f5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.97.228.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55127

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:3b:c0:31:e4:c0:24:d9:a2:32:a3:73:2c:f3:0d:7f:c1:bc:
         ca:c9:1c:e9:d7:30:8e:fa:ff:e4:4a:9b:1e:aa:b6:70:8e:a2:
         3b:f8:46:47:1e:11:63:7f:35:3c:88:44:63:49:4c:ae:a0:b4:
         14:53:61:ad:e7:9e:8c:ae:48:23:ef:48:09:7a:e1:0c:59:d2:
         d4:5a:f1:29:38:35:90:46:0c:21:e4:99:96:15:67:c1:c2:fb:
         92:f9:54:e4:1e:e4:ca:38:88:c7:5f:eb:fb:de:98:0c:c3:4c:
         61:7e:e2:2f:ae:c9:8e:c3:af:09:b0:65:67:40:87:bc:6b:6d:
         57:50:dd:ea:70:2a:47:d5:e1:7d:10:6a:ce:2b:2c:3c:55:28:
         d9:d1:ac:8b:db:60:cc:cc:fb:40:99:a5:de:78:63:be:b1:01:
         bb:92:da:aa:3b:3d:a5:c5:ea:c2:41:c2:54:81:e4:0d:e4:b8:
         9b:34:97:32:6a:77:03:48:81:38:93:c7:b3:5e:f8:67:15:28:
         b2:70:37:bd:96:99:6f:41:ae:f5:76:be:68:70:3c:92:5a:40:
         9e:b0:43:aa:8b:46:8f:94:d2:35:9c:f4:96:e5:0c:40:62:0a:
         3e:de:be:e8:b2:35:dc:8a:d8:a1:94:92:91:29:55:c0:54:22:
         a6:a7:23:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----