Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
File:                     1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer (raw, json)
Hash identifier:          k0XLvw7hUcr8UeiXQQSx8trJZGcZI95ftHyJKczvNuE=
Subject key identifier:   02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846B9845D2FC33A82DB14C27E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 31 Jul 2024 21:24:15 +0000
Certificate not after:    Mon 02 Nov 2026 15:07:08 +0000
Subordinate resources:    AS: 36530
                          IP: 23.185.104.0/24
                          IP: 2602:f864::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b9:84:5d:2f:c3:3a:82:db:14:c2:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 31 21:24:15 2024 GMT
            Not After : Nov  2 15:07:08 2026 GMT
        Subject: CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:71:23:72:ba:2c:f8:07:36:2a:56:ce:88:11:
                    b4:c7:4c:67:1b:be:0f:ca:24:fd:07:f3:d0:37:41:
                    7f:91:b8:d2:53:05:ca:78:7d:58:00:a4:e7:a8:a4:
                    6c:ab:1e:49:db:e9:8e:c4:d1:ec:1c:ff:00:fc:0f:
                    51:29:49:8b:0a:93:e1:67:9d:49:8d:e6:65:f9:35:
                    40:ce:c5:06:01:55:0d:78:f8:87:5f:52:03:0c:e5:
                    ce:ec:a7:02:14:b8:d1:21:ff:6b:c0:7f:e1:16:b0:
                    ef:1d:0c:a3:92:9c:b3:0c:16:cf:ae:36:d7:55:93:
                    f7:8b:06:30:88:c0:dc:31:e4:ed:de:48:e5:9c:18:
                    a7:ea:4e:4a:27:b2:99:d9:32:85:e6:36:c2:03:73:
                    f0:30:ab:07:2a:22:e7:6e:78:23:54:e4:6b:2a:3a:
                    13:e7:d3:8c:e3:38:7d:76:3e:ea:9c:bd:ae:75:fe:
                    30:98:b3:f2:29:b0:07:09:19:25:b0:a5:db:a4:41:
                    ad:a1:f2:2d:8f:ac:ac:3f:e7:50:a8:02:24:a4:17:
                    e4:92:59:11:58:93:52:e8:90:00:4b:d0:cd:2a:af:
                    c1:0b:70:77:19:44:86:91:6b:8b:61:34:51:8c:e6:
                    35:21:b0:22:a2:1f:33:fd:db:2c:41:aa:29:a0:13:
                    80:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.104.0/24
                IPv6:
                  2602:f864::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36530

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:b8:c6:4a:54:b1:17:d7:d9:a4:c1:93:c0:06:32:59:11:3f:
         34:72:60:60:39:ea:52:bb:53:df:6b:a8:82:0f:6b:97:d7:47:
         d1:31:50:2e:51:4e:2e:26:4e:53:9b:9c:78:45:57:d5:95:a0:
         68:97:a6:2c:72:29:9e:cf:9f:77:ed:e2:63:19:c9:58:52:09:
         30:54:f5:66:95:d8:4f:25:25:65:59:07:e0:75:88:88:7c:1e:
         37:c9:ee:38:6c:88:45:ed:68:96:51:50:3e:37:14:1a:aa:3a:
         7e:cd:47:fe:70:be:75:30:fa:30:b3:fd:81:2f:05:7d:56:f5:
         7a:55:9b:69:d2:4c:70:27:c8:c5:a0:3c:e9:ba:67:87:46:bf:
         0d:85:a4:ab:65:6a:ba:18:b2:26:4b:30:63:f7:d1:9a:ee:14:
         6a:e9:44:d7:75:37:1b:2b:59:cb:9b:4c:8a:0e:49:b0:08:20:
         c5:5b:ae:3a:62:64:e6:a5:75:76:ed:16:8b:77:fe:ce:1f:5d:
         3e:cb:b2:e5:bb:f8:a0:8a:cb:56:d4:a9:c5:6f:32:50:00:27:
         e7:d5:94:db:a1:88:62:3b:5e:57:3a:39:5f:8c:9d:d0:e5:0e:
         20:4d:56:5f:88:bd:81:84:a6:dd:4a:b4:26:9b:b5:c2:82:16:
         c8:42:76:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----