Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f3790ac7-a6d2-4fc6-a3c4-5900f57dc0d4.cer
File:                     f3790ac7-a6d2-4fc6-a3c4-5900f57dc0d4.cer (raw, json)
Hash identifier:          mdmn7J+8tmLOJz4nzBI9TlNUKCMjY663j9hs+JkvQyg=
Subject key identifier:   15:DA:C2:44:32:AE:B7:46:FE:99:69:A0:3F:8B:A1:E3:57:C3:86:FF
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847445979E06F03526ADC5CFB00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f3790ac7-a6d2-4fc6-a3c4-5900f57dc0d4/f3790ac7-a6d2-4fc6-a3c4-5900f57dc0d4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f3790ac7-a6d2-4fc6-a3c4-5900f57dc0d4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 19 Sep 2024 14:55:12 +0000
Certificate not after:    Wed 23 Dec 2026 15:55:12 +0000
Subordinate resources:    AS: 30056

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:59:79:e0:6f:03:52:6a:dc:5c:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 19 14:55:12 2024 GMT
            Not After : Dec 23 15:55:12 2026 GMT
        Subject: CN=f3790ac7-a6d2-4fc6-a3c4-5900f57dc0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8a:ad:2d:f7:2e:c0:74:87:16:78:05:74:a6:
                    8b:65:bb:47:41:8a:c5:d7:c8:3c:8f:2a:c8:a1:37:
                    6c:22:25:d4:c0:6e:55:f9:d6:40:06:d7:6b:2d:ef:
                    13:10:cc:3c:d3:3e:0e:6b:69:ad:81:2f:83:1a:47:
                    5a:43:37:5f:ac:bb:8e:b5:d4:96:1d:b6:23:94:1d:
                    8e:3d:f5:fe:6d:d3:7e:72:27:e3:20:05:9e:ac:d3:
                    7d:00:4e:06:ed:b3:2b:a4:d7:d6:09:a0:79:39:f9:
                    f2:8d:86:32:7c:0b:df:55:0d:39:2f:1c:08:54:2d:
                    8d:2e:bd:13:7e:85:ca:cb:93:be:e1:4d:58:10:22:
                    61:5d:18:8b:5b:cf:61:22:29:b9:a3:c0:32:63:c9:
                    6c:de:b5:66:33:89:ce:e4:a1:e9:c3:f6:e7:ad:0c:
                    8c:a3:b0:79:ba:22:ee:82:c8:ee:28:fb:ac:9f:6c:
                    9b:9b:f1:71:a5:0a:1b:3b:f1:97:ba:67:ed:05:12:
                    24:e7:68:11:a5:a0:3b:1f:a0:51:a7:57:e8:09:21:
                    a4:7f:8a:c0:8a:0c:46:2a:c7:84:3e:74:a1:2b:1a:
                    78:2b:91:4c:fb:da:20:6d:e3:f8:e5:4e:e3:e4:da:
                    84:aa:b7:a5:35:88:5e:e0:a6:1e:49:b9:dd:81:29:
                    da:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DA:C2:44:32:AE:B7:46:FE:99:69:A0:3F:8B:A1:E3:57:C3:86:FF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f3790ac7-a6d2-4fc6-a3c4-5900f57dc0d4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f3790ac7-a6d2-4fc6-a3c4-5900f57dc0d4/f3790ac7-a6d2-4fc6-a3c4-5900f57dc0d4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30056

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:24:01:50:c0:a7:03:5c:b8:ce:35:06:4e:0f:87:be:fc:88:
         05:e5:2e:4c:03:19:b4:87:9b:39:9a:40:a8:1d:73:c5:5c:0a:
         62:61:c6:33:61:41:ba:8c:7a:2b:71:ed:40:85:41:5c:b6:7c:
         53:48:07:1c:be:0e:a1:e7:09:75:8d:ca:44:56:6d:31:c6:09:
         e5:1f:29:72:3d:c9:23:18:8b:cc:bc:8d:34:02:2e:07:c2:c0:
         6c:56:08:9f:42:b8:47:79:f5:5a:17:8b:2b:72:69:3c:b2:6b:
         5a:8e:8f:07:1d:2f:ad:39:58:83:f6:66:1e:de:80:2d:a6:94:
         57:ba:d9:a6:a4:78:de:eb:c2:bb:a2:2e:ed:dc:ad:f1:b0:d8:
         99:12:3a:6a:28:6f:85:45:6d:03:57:e7:5d:d1:e0:98:91:05:
         f0:31:8f:fa:73:de:12:63:b4:95:d2:aa:55:7b:a6:e4:3a:56:
         85:8c:47:90:6e:15:b8:e1:cb:d4:1d:75:52:3f:67:fd:8c:ba:
         b2:20:34:7a:21:ae:53:e5:02:05:1b:a1:ea:09:d4:cc:44:3c:
         81:4d:ff:b1:d0:24:54:e0:d4:94:e6:94:1e:0f:c3:5d:24:15:
         4f:12:3c:98:ce:81:44:88:74:2e:46:bb:8e:f8:b4:b8:79:0b:
         76:0c:ef:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----