Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.cer
File:                     f7b341cf-abc9-42c3-a0bb-31f569a1ae02.cer (raw, json)
Hash identifier:          7lnoryc+4Ac0qxMdkPUljDjU1XIEyyHrtC5QeTM9w8U=
Subject key identifier:   1C:C0:E5:FB:79:04:3F:EA:4D:3D:1F:AA:35:AC:85:4A:99:A6:D4:AD
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858473F8BB02A29EF4B4E31ED9710
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 17 Sep 2024 21:37:20 +0000
Certificate not after:    Mon 21 Dec 2026 22:37:20 +0000
Subordinate resources:    AS: 14532
                          IP: 66.203.0.0/20
                          IP: 2607:abc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:8b:b0:2a:29:ef:4b:4e:31:ed:97:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 17 21:37:20 2024 GMT
            Not After : Dec 21 22:37:20 2026 GMT
        Subject: CN=f7b341cf-abc9-42c3-a0bb-31f569a1ae02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c2:01:79:a0:02:7e:f1:88:47:ee:77:b7:71:
                    19:10:38:cd:7c:1a:f9:a7:e1:c3:d8:56:fb:be:17:
                    03:43:45:85:0a:6c:e2:77:2b:eb:52:0c:27:e5:41:
                    bf:7b:ff:7f:5a:cb:ce:51:0e:25:30:87:54:20:6e:
                    48:56:11:e8:e6:69:23:2b:94:35:97:ed:64:9d:cd:
                    3f:14:14:06:62:97:c9:f0:22:0e:06:01:e4:36:ea:
                    5d:53:d6:fb:9b:9b:73:d4:9c:0d:86:27:2f:39:6b:
                    60:6c:08:38:0b:72:40:2f:c7:37:3d:85:e2:78:c0:
                    98:d4:e3:72:b2:9c:e7:a0:16:29:25:1e:ab:a7:24:
                    f0:8c:f8:37:a2:cf:6c:4c:57:b0:e5:32:f4:dc:13:
                    a4:4e:59:ed:e8:14:3d:01:c1:c8:67:4f:cd:75:ab:
                    4f:1c:3c:06:71:77:2e:5d:98:2c:ed:88:51:3b:0e:
                    2f:ad:7e:d8:b7:d6:d6:52:0e:ff:eb:33:37:c9:73:
                    aa:9a:0c:1d:6b:ee:93:b6:69:20:6b:71:49:a2:85:
                    af:3e:47:73:03:24:04:cb:87:4e:97:70:8a:a3:a0:
                    7f:2d:1c:50:3e:21:e1:48:b6:eb:d4:2e:92:4b:98:
                    9a:34:52:b7:b3:f0:19:cc:d4:89:08:0f:fa:64:4c:
                    28:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C0:E5:FB:79:04:3F:EA:4D:3D:1F:AA:35:AC:85:4A:99:A6:D4:AD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.203.0.0/20
                IPv6:
                  2607:abc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14532

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:3b:b0:0e:5d:0b:aa:48:1a:76:89:18:bb:e0:d4:c6:bb:bd:
         8a:cb:ae:0d:8c:59:07:ed:fc:d1:00:62:7c:1e:5b:23:42:65:
         d2:3d:4c:d3:c4:89:48:14:30:d3:58:0d:3a:d2:fd:dd:a3:10:
         6d:f0:3f:9a:52:ab:68:83:ee:35:44:73:ce:3d:ed:60:7e:a3:
         f8:43:56:71:76:b6:0c:12:90:a7:b0:49:3c:71:f1:34:f0:26:
         95:5b:68:ea:7a:c0:6f:29:d8:82:e2:b5:92:90:a2:c4:72:a5:
         54:51:87:82:42:15:68:2e:63:4c:a6:9f:cd:ce:41:db:44:da:
         b5:6d:b2:21:e0:01:f2:50:36:81:f0:11:89:0d:60:9f:8a:0d:
         46:e1:51:2f:50:7d:33:5a:bc:07:67:ff:49:7d:ee:a1:50:bb:
         82:df:a0:af:97:54:a1:8c:69:ce:08:57:e8:a6:df:c2:1d:23:
         28:91:1e:62:b8:64:32:dc:f3:8a:36:64:ca:c7:ec:c7:48:c4:
         fc:7e:da:0a:5b:be:0d:0c:0b:f4:7b:f8:b2:06:85:f2:d2:9e:
         70:dc:24:bd:73:b2:d4:62:b1:1f:42:5c:93:d1:c6:c0:8c:cd:
         6b:f0:cc:10:22:31:c5:e9:52:29:da:10:cd:c3:64:b1:ca:0e:
         b7:30:96:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----