Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b.cer
File:                     f070d399-4921-4247-a612-64e6e53f9f2b.cer (raw, json)
Hash identifier:          4aiYhw1xVxqgkytS67SSBtED9zqfKVU0P+5JmA4kOQY=
Subject key identifier:   61:7C:EB:83:28:62:01:5E:92:49:7B:33:A2:DB:13:67:E0:32:59:C0
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846F122534BA6E75BCDEDEA8D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/f070d399-4921-4247-a612-64e6e53f9f2b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 20 Aug 2024 19:31:59 +0000
Certificate not after:    Mon 23 Nov 2026 20:31:59 +0000
Subordinate resources:    AS: 401274
                          IP: 23.186.24.0/24
                          IP: 2602:f84d::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f1:22:53:4b:a6:e7:5b:cd:ed:ea:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 20 19:31:59 2024 GMT
            Not After : Nov 23 20:31:59 2026 GMT
        Subject: CN=f070d399-4921-4247-a612-64e6e53f9f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:16:0b:04:87:d0:2a:c8:06:ef:c6:27:ed:64:
                    15:04:37:c4:ad:5d:ea:72:75:12:d0:53:35:90:68:
                    c5:64:7b:61:65:b7:73:33:63:f4:8b:22:3b:d6:1d:
                    ed:43:5d:27:48:e4:02:84:64:44:f0:15:d4:e4:fe:
                    95:06:0d:74:26:1a:63:41:2a:e5:6a:a6:2f:2d:f6:
                    81:3a:f3:69:6e:da:bf:9e:b2:e7:de:c3:c3:a5:00:
                    00:e4:12:07:f0:8f:af:81:97:d2:cb:91:da:73:b4:
                    be:cc:35:df:3c:1d:07:28:f2:47:16:22:c9:1e:e4:
                    61:af:f9:95:2c:33:ec:05:8b:82:37:82:6e:c5:1d:
                    05:2f:42:a2:4d:60:a6:aa:ce:fc:91:da:2b:c3:3e:
                    fb:6d:7b:a4:92:e5:a6:ae:ee:5d:63:7b:51:48:40:
                    fe:eb:d5:bd:76:91:59:db:fa:91:0e:a1:a1:13:86:
                    c1:39:4e:c0:94:60:65:14:94:97:45:5e:cf:01:bd:
                    d8:b7:d7:e8:9c:9f:c3:cb:cc:7e:15:69:c4:1d:b9:
                    34:62:2c:17:19:81:75:0b:c9:cb:a7:bf:01:3f:c0:
                    d0:f4:b4:53:72:77:21:cd:e7:df:3b:79:19:8a:d1:
                    f6:78:a0:91:59:f6:51:e0:1f:8d:cd:59:bb:d3:39:
                    7a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7C:EB:83:28:62:01:5E:92:49:7B:33:A2:DB:13:67:E0:32:59:C0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/f070d399-4921-4247-a612-64e6e53f9f2b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.24.0/24
                IPv6:
                  2602:f84d::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401274

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:a9:9c:09:7f:de:b1:ef:da:51:bc:6c:5f:af:9a:f3:aa:d8:
         50:0f:3c:e2:66:04:ee:d5:e8:a0:5c:02:6f:34:fb:f1:4d:1b:
         37:32:1f:f3:6d:73:4d:dd:f9:47:37:00:c1:c6:05:cb:78:6e:
         13:d2:f8:e9:71:67:9a:c0:b7:bb:1e:46:9f:8f:a4:ff:7b:1e:
         59:48:b6:6d:4a:37:96:87:6e:e1:7a:b5:30:01:c1:e5:57:b7:
         20:1a:89:df:03:3e:a5:2e:87:38:8a:a5:43:b4:45:09:6a:c7:
         26:15:49:a6:84:56:7c:30:a1:82:c6:bf:e7:eb:08:e9:23:b3:
         99:8e:86:4c:39:07:4e:77:c0:a8:1a:ed:0c:2b:1f:13:eb:b6:
         85:1f:7c:d8:7d:7a:25:c5:41:f1:33:9a:dd:d7:ef:3e:5b:5b:
         26:5f:3b:45:55:e2:0a:2c:fe:ae:14:e0:7d:4e:c6:b0:21:3e:
         da:14:6b:f8:d1:d4:8d:ea:d5:bd:70:54:e6:a3:61:83:3a:95:
         bf:23:a9:de:f8:07:85:20:9d:50:25:27:17:b4:fc:b7:16:c5:
         ec:1c:1f:ba:45:03:5e:65:a5:49:fd:7f:de:1b:ce:10:96:25:
         89:09:db:6a:eb:5b:8c:d4:3c:be:b7:76:7c:ab:2e:d6:72:e0:
         77:81:08:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----