Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer
File:                     1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer (raw, json)
Hash identifier:          UfmYq5V7a8O1MGqCA9SyzIDTh+niUGeT82EXXs+P9Xk=
Subject key identifier:   38:8B:95:35:2C:AD:AF:3C:EE:68:E0:29:45:86:0F:27:48:D0:D4:C1
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858462ABD1336B24FABD6C9CEB560
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 10 Jun 2024 17:57:56 +0000
Certificate not after:    Sun 13 Sep 2026 17:57:56 +0000
Subordinate resources:    AS: 21529
                          IP: 74.118.48.0/22
                          IP: 149.112.12.0/24
                          IP: 199.195.142.0/23
                          IP: 2606:1fc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2a:bd:13:36:b2:4f:ab:d6:c9:ce:b5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 10 17:57:56 2024 GMT
            Not After : Sep 13 17:57:56 2026 GMT
        Subject: CN=1934fa05-d7a3-4b7d-be5d-dc83d4a7199d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:26:b8:21:bd:a1:30:ec:a7:2c:c3:ef:8c:
                    ba:51:f9:5f:2b:23:ef:fd:d5:b7:fa:e3:d9:78:37:
                    9d:68:d1:76:d9:56:52:89:d9:6e:75:57:cf:33:af:
                    5b:6f:00:bd:d3:b4:7a:38:6c:1c:f7:c4:e3:d0:6f:
                    97:95:2f:da:24:fa:0a:3a:5b:c7:5e:38:ba:91:55:
                    17:16:4b:61:90:34:66:64:16:e6:0b:f9:0a:f6:fb:
                    65:85:79:16:39:61:3a:7a:88:3d:dc:f2:07:36:67:
                    9e:52:83:b8:cb:dd:cd:d9:37:ee:3d:2f:fc:d3:5c:
                    28:8e:35:d8:ca:9f:bd:55:c5:b1:99:f0:24:31:5f:
                    7e:9a:89:d3:47:23:4e:de:0d:17:f6:80:1e:b9:92:
                    62:92:a5:64:4c:80:80:b8:4f:54:8a:96:37:80:3f:
                    c2:33:85:cd:90:9d:63:23:6e:f3:09:db:f8:71:e9:
                    a7:a0:fa:91:91:b8:89:b5:05:c9:54:24:41:09:71:
                    38:92:a1:59:d5:06:ef:28:ca:94:6c:4b:0c:e6:85:
                    18:ba:d8:a4:90:f7:dc:eb:36:de:24:5a:6e:1b:8b:
                    e2:c6:ea:5c:54:e0:0e:2c:03:c4:b8:86:56:27:e5:
                    64:0f:5f:97:bb:ef:99:6f:d8:4c:a0:2a:99:75:ab:
                    0e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8B:95:35:2C:AD:AF:3C:EE:68:E0:29:45:86:0F:27:48:D0:D4:C1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.48.0/22
                  149.112.12.0/24
                  199.195.142.0/23
                IPv6:
                  2606:1fc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21529

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:5c:3b:2d:4f:a4:8f:19:52:4f:c6:7a:df:8f:c3:e2:06:99:
         84:18:e9:9b:c7:14:7a:67:30:5c:bc:f7:33:c5:3b:64:a5:62:
         a3:c1:73:e1:68:11:7e:0c:87:c0:14:42:37:07:bd:57:be:f5:
         3e:3d:9e:5c:08:4d:f7:66:b4:cc:b8:5e:de:3b:39:c4:6c:ac:
         e3:8a:be:df:9b:99:71:fc:43:6c:17:62:40:ea:c9:80:0a:f1:
         51:89:fd:df:53:7e:f2:2d:f4:31:98:5c:6f:21:b5:c8:aa:63:
         47:83:85:77:34:58:d5:7a:94:f3:e1:c5:0b:ed:80:9d:b2:a2:
         e6:36:0e:c5:57:d4:bd:d9:ec:7a:ef:42:aa:c5:5e:ee:4b:40:
         4e:b0:5d:00:f1:c5:d4:62:03:c3:fb:31:cd:d0:19:71:b1:5e:
         c8:07:21:b1:e1:21:b2:e4:a2:4e:11:99:e8:38:57:ce:fc:46:
         a6:7d:56:39:f4:f8:a2:c4:f0:be:d1:5a:4d:0f:6b:23:39:9d:
         b0:12:e3:e1:69:07:ee:17:d1:b7:ec:a9:7c:fc:d2:21:64:d0:
         8f:0f:c6:1a:65:07:ab:62:64:4c:68:61:3f:23:5a:56:18:7f:
         1a:83:80:5e:45:a1:80:c0:ac:ad:1d:0a:6a:c9:81:9a:49:e8:
         59:68:99:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----