Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bbbed997-14fd-4b9e-93f3-829e4eda182a.cer
File:                     bbbed997-14fd-4b9e-93f3-829e4eda182a.cer (raw, json)
Hash identifier:          QbwJB62NrDEg27w37Tnjw7JX37PNXM1naqK59h1CtOw=
Subject key identifier:   4D:DE:72:DC:0C:97:10:04:CC:82:83:57:62:CE:22:A9:7F:0C:16:70
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858473010469C3B6757165171FF80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bbbed997-14fd-4b9e-93f3-829e4eda182a/bbbed997-14fd-4b9e-93f3-829e4eda182a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bbbed997-14fd-4b9e-93f3-829e4eda182a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 12 Sep 2024 08:31:33 +0000
Certificate not after:    Wed 16 Dec 2026 09:31:33 +0000
Subordinate resources:    AS: 27313

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:10:46:9c:3b:67:57:16:51:71:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 12 08:31:33 2024 GMT
            Not After : Dec 16 09:31:33 2026 GMT
        Subject: CN=bbbed997-14fd-4b9e-93f3-829e4eda182a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:52:4e:a1:55:d5:4d:66:8a:fb:07:d3:38:f8:
                    99:d5:dc:7c:71:3f:80:59:82:59:5c:15:15:fa:58:
                    c4:61:ac:5a:e6:a9:24:e8:50:ab:8f:1f:3c:52:e0:
                    29:20:32:7d:bf:ee:37:4f:c7:92:32:4c:e1:5d:a0:
                    95:46:d0:3a:83:02:7f:a0:f4:95:0f:8a:af:30:d8:
                    95:5b:83:b7:7a:59:51:2a:1f:55:e8:69:da:28:87:
                    18:9a:12:95:3b:3a:09:ce:bf:73:dd:54:b0:51:67:
                    73:2e:99:e5:d0:6b:cf:4b:28:c9:2a:1b:a8:b6:00:
                    aa:2b:d2:6d:47:15:46:78:89:0c:2a:59:20:df:46:
                    b8:23:8c:ab:bc:ad:08:b4:68:67:f0:ca:7f:f6:f1:
                    3e:c1:6b:56:bd:17:d8:3c:9e:db:1b:64:65:74:73:
                    0d:13:70:c0:4c:d9:c3:b8:50:77:55:97:1d:20:a1:
                    57:cb:d4:49:7f:40:54:94:49:9f:74:e2:25:12:f8:
                    d3:58:c9:55:b9:d1:89:49:3f:98:4d:1a:93:42:d7:
                    30:e2:24:b9:eb:f9:6e:fb:58:f5:4c:85:8d:0e:d4:
                    44:ff:3e:56:13:95:bf:58:75:f8:c8:de:0a:be:c4:
                    0f:84:1d:3f:cc:b8:f7:42:4f:94:55:fe:b1:e9:e2:
                    f8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DE:72:DC:0C:97:10:04:CC:82:83:57:62:CE:22:A9:7F:0C:16:70
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bbbed997-14fd-4b9e-93f3-829e4eda182a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bbbed997-14fd-4b9e-93f3-829e4eda182a/bbbed997-14fd-4b9e-93f3-829e4eda182a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27313

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e8:b8:d7:96:90:c5:21:f8:5f:30:81:13:33:0d:a3:dc:3b:
         07:af:6a:0c:eb:46:e9:6f:9d:18:ac:cf:0d:5f:87:5a:09:89:
         ab:cf:13:55:2b:92:b6:31:b1:64:c3:75:2e:b2:e1:3f:e6:ec:
         e5:63:eb:e1:d9:bf:0a:5d:a1:3a:26:a4:1c:1e:10:b8:48:b3:
         ba:31:ff:1b:60:3e:db:32:e5:91:7d:88:2c:cc:77:e1:36:89:
         6c:a1:66:2b:ef:f7:99:65:d9:41:51:6e:d0:3f:5f:04:83:11:
         00:5d:ce:f0:06:83:84:ff:b1:51:a4:c5:36:b8:59:c2:5e:33:
         dd:fc:74:99:2e:a1:2e:70:3b:c0:f1:fe:c8:32:f4:a6:97:a5:
         6f:f3:be:60:c4:67:c8:12:9b:c3:4a:9b:44:89:5f:47:56:9c:
         6c:9f:24:37:60:ee:5d:85:22:2a:93:a8:af:d6:86:51:02:d9:
         62:a0:0e:88:d8:12:a0:fe:ad:d8:87:52:b2:94:45:93:93:36:
         e8:77:53:8b:99:c0:83:e0:9f:a7:da:c6:be:08:b2:0e:ae:a5:
         8a:b8:5b:ba:84:15:4b:1d:c5:b7:7d:f3:4c:6a:33:f3:c0:18:
         03:65:e0:0d:38:fd:70:d3:83:60:33:66:ba:d3:b2:bc:ee:14:
         a4:12:ed:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----