Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541.cer
File:                     a20b951e-7538-41fb-97d2-2dd9393d3541.cer (raw, json)
Hash identifier:          DkWSsk+mGSHcvY+a9GLpetHWYV0AFTNkuF7hcQPzYw0=
Subject key identifier:   96:27:65:3E:C6:BD:84:56:0E:B6:57:26:94:51:C8:51:03:03:D8:88
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858478834AE9E6DC65BFD94357680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 13 Oct 2024 22:16:02 +0000
Certificate not after:    Sat 16 Jan 2027 23:16:02 +0000
Subordinate resources:    AS: 36038

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:34:ae:9e:6d:c6:5b:fd:94:35:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 13 22:16:02 2024 GMT
            Not After : Jan 16 23:16:02 2027 GMT
        Subject: CN=a20b951e-7538-41fb-97d2-2dd9393d3541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fe:1e:2e:08:d9:67:8e:c2:00:bf:70:c7:0a:
                    c7:e6:38:d3:8b:a9:e2:ed:99:9d:54:45:38:fe:59:
                    13:6e:70:34:50:28:ce:89:75:e5:ed:5a:04:15:5e:
                    2b:80:d4:72:93:9d:18:f8:fe:38:d5:12:d6:91:64:
                    4f:1b:7f:00:3d:4d:f9:09:59:cf:d2:60:40:db:db:
                    c8:22:b9:0f:a6:e7:7f:bc:8c:c8:dd:cf:e4:89:a3:
                    8e:93:9f:e1:6d:2c:9b:4c:26:79:37:1e:42:3d:ce:
                    57:9a:3b:65:2d:a4:13:a6:32:29:96:f6:0f:d0:2c:
                    47:8a:59:da:40:3e:51:45:4a:af:6d:39:70:6d:3d:
                    c0:af:e8:48:41:34:25:fb:8f:12:1b:24:0c:56:ca:
                    f0:74:be:3a:32:3b:73:e7:89:66:90:b6:84:57:cc:
                    52:33:b7:85:a2:09:6b:db:20:55:9f:23:6b:a1:f4:
                    25:c7:01:00:66:71:54:0b:b7:52:a6:0d:f4:fa:cf:
                    d6:a3:0a:ff:04:33:d9:70:aa:c3:da:03:01:b0:3f:
                    c1:0f:2c:cf:6c:d8:77:3c:a1:b5:43:32:22:76:6b:
                    64:bb:a8:2a:77:88:fd:7c:35:5d:3b:e4:25:04:bc:
                    0f:37:07:17:ca:4c:9a:9e:29:cd:5b:8d:ab:17:02:
                    ee:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:27:65:3E:C6:BD:84:56:0E:B6:57:26:94:51:C8:51:03:03:D8:88
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36038

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:d0:8e:3b:0c:2e:fb:94:7f:be:a8:d8:24:fd:ae:cc:d2:ea:
         1f:96:a9:d1:a1:fe:e6:d4:40:46:94:0d:b9:8f:8d:46:9b:e8:
         81:e4:3b:4d:bd:3b:10:f3:15:c9:1f:92:89:3b:32:8c:6f:d3:
         4e:3c:9c:90:4c:0f:33:21:35:6f:06:60:a6:d0:90:f3:d0:4b:
         aa:d9:ea:b7:2b:09:46:c3:5b:c6:21:3a:d2:d9:ec:27:43:28:
         e7:44:3c:fb:55:6a:b0:a4:e6:95:1d:e2:f6:f4:84:b5:38:d7:
         76:5d:64:e5:8c:21:4f:85:97:18:9c:8e:7d:e0:f4:93:9d:a0:
         d7:a8:70:41:39:6b:74:b0:14:57:05:cb:6c:7f:e0:04:e3:0a:
         bf:b4:b6:b2:ee:7a:d5:26:4e:4f:e7:5e:a0:7e:1c:9b:27:6e:
         b9:4c:08:41:d0:3f:4a:d9:d9:0a:c5:20:4c:4f:ba:6c:21:42:
         b6:a6:a7:3f:36:38:89:42:19:c5:df:48:4a:40:fb:19:4c:a2:
         e0:43:73:3b:bd:0a:cc:a7:78:1b:34:07:27:12:79:0e:10:84:
         80:82:d7:30:ce:0d:92:71:78:97:02:17:19:65:bc:5c:51:91:
         db:72:4a:c9:b1:b3:5e:c9:26:a3:e5:ed:78:c8:a7:4c:0c:0a:
         d7:7c:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----