Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer
File:                     f95a39d1-400d-423a-89c4-37f7f1a145f2.cer (raw, json)
Hash identifier:          fzI7o7jQ9huGYXXVQZPAMt6sRfkJmVh0sB35QMvMvq4=
Subject key identifier:   45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847CD6810FC62735ED5FF62F2C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 07 Nov 2024 17:10:21 +0000
Certificate not after:    Wed 10 Feb 2027 17:10:21 +0000
Subordinate resources:    AS: 397335
                          IP: 2620:68:2000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:68:10:fc:62:73:5e:d5:ff:62:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov  7 17:10:21 2024 GMT
            Not After : Feb 10 17:10:21 2027 GMT
        Subject: CN=f95a39d1-400d-423a-89c4-37f7f1a145f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ed:ee:df:63:c9:3b:ec:68:67:61:4d:d1:48:
                    11:61:25:8c:4f:06:c6:e4:04:78:ee:49:6a:6d:e6:
                    35:52:41:aa:e3:dc:99:42:ff:90:0a:5c:f9:fb:c8:
                    16:35:39:80:cd:82:68:3a:65:bc:e9:3c:ab:78:7c:
                    7d:49:38:f5:65:5d:0a:61:44:8d:b3:ac:cb:2d:81:
                    bd:c5:4a:76:9c:26:d2:ca:20:0c:65:2c:df:ce:fc:
                    8a:fe:da:da:3b:1c:94:5e:ca:40:90:b0:57:1f:b7:
                    8a:0a:67:95:76:ca:03:c5:f4:be:6f:63:a1:af:93:
                    fe:b3:71:18:6d:66:c6:0d:79:5c:1d:5a:94:0b:ce:
                    c8:dd:ac:f7:af:53:4c:06:08:c7:d4:73:5e:0b:71:
                    bc:c3:44:21:01:79:07:b6:14:eb:29:fd:4a:d1:73:
                    4c:93:68:d6:76:a5:69:14:2b:db:35:e1:6e:1b:8f:
                    2a:c4:7d:0e:42:e0:a6:7b:89:d6:2f:7f:8a:a0:b9:
                    60:8c:b2:eb:93:1f:c2:4d:a7:d5:9a:61:68:69:9f:
                    61:5e:c8:bc:12:a4:44:c2:0a:b7:5a:e9:6f:4d:0e:
                    c0:18:00:40:2a:48:da:92:16:8e:f5:cf:bb:91:ac:
                    f5:92:41:1b:94:3b:1f:76:93:bd:21:0c:a2:40:e0:
                    8f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:68:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397335

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9f:7f:c7:19:df:4e:a9:6c:61:c7:23:89:45:fb:84:0f:82:
         4e:4f:a7:94:c0:d5:1b:2a:96:a2:db:b9:9d:8c:16:2b:6a:b0:
         ad:44:c7:64:9e:0e:63:10:37:15:10:a2:22:d4:e1:35:c5:3f:
         28:33:89:af:c6:65:8b:46:0d:db:5e:d4:57:c9:e3:4d:ea:65:
         6b:33:46:44:43:6d:28:91:a6:cc:e5:75:df:6b:85:62:2f:dc:
         ae:85:38:5a:34:63:b8:fa:15:91:e1:9f:d4:62:8a:a1:64:df:
         70:10:db:af:50:19:ab:32:84:81:0a:54:cf:7f:9a:34:c9:9f:
         2d:82:1b:45:a2:9d:01:08:44:f2:e6:db:e7:a5:95:fc:b2:ba:
         d2:da:83:59:a8:fb:c5:0b:15:f9:d7:f5:39:60:a5:21:ce:e1:
         21:f3:85:d0:59:0d:27:4c:68:fe:26:e2:11:83:7f:c1:4a:ab:
         1f:ed:83:80:92:72:5b:2f:2d:1d:ef:29:27:fe:04:1c:7b:1f:
         3b:e4:43:8b:95:30:e0:81:71:ce:eb:38:a2:ce:27:e5:fe:1f:
         13:c9:6f:25:9d:db:bb:2f:d3:6b:6f:ef:95:6a:33:93:75:f5:
         ba:6d:ed:a7:f0:db:f8:bc:9f:e2:78:6e:8e:5f:4f:e7:5c:05:
         43:56:ae:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:22 2024 by rpki-client on console-ams.rpki-client.org