Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20f0dadc-baac-4b65-a724-bd07aee97582.cer
File:                     20f0dadc-baac-4b65-a724-bd07aee97582.cer (raw, json)
Hash identifier:          0ot1af71+wwsNwaqi15uYLTW32vzcgQkwO1kZri6gJ4=
Subject key identifier:   78:AB:BB:88:28:1D:F4:05:27:3C:B9:7B:C5:3A:6C:00:91:6D:EC:61
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845A22B611E60C95CA485802380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20f0dadc-baac-4b65-a724-bd07aee97582/20f0dadc-baac-4b65-a724-bd07aee97582.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20f0dadc-baac-4b65-a724-bd07aee97582/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 22 Apr 2024 19:54:26 +0000
Certificate not after:    Sun 26 Jul 2026 19:54:26 +0000
Subordinate resources:    AS: 30081

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:2b:61:1e:60:c9:5c:a4:85:80:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Apr 22 19:54:26 2024 GMT
            Not After : Jul 26 19:54:26 2026 GMT
        Subject: CN=20f0dadc-baac-4b65-a724-bd07aee97582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b3:d6:1e:67:17:4f:81:9e:d3:12:72:7a:61:
                    7f:2c:d3:ef:4f:9c:7d:e6:d9:02:fc:b3:f7:f1:44:
                    f9:c2:bb:38:15:82:a3:b7:76:ef:df:d2:dc:e3:3c:
                    af:de:8b:ab:fe:ab:93:16:ad:b7:17:84:03:80:43:
                    08:29:78:31:45:19:18:66:cd:17:ca:33:f0:b3:28:
                    90:30:bb:21:e1:5d:ac:16:4f:6a:eb:40:f1:a8:83:
                    5e:01:e5:4a:33:92:69:2a:0d:b8:ba:b9:fc:6b:09:
                    40:7a:5c:35:21:52:05:29:05:dc:8c:b5:68:24:15:
                    68:2f:fc:0b:11:46:52:2b:5d:45:3e:e9:72:ed:ce:
                    2a:56:7a:73:eb:c7:dc:d1:7b:b8:09:a9:03:ae:35:
                    c4:24:26:dd:61:17:a9:4f:f4:94:4f:31:6e:cd:43:
                    36:f6:b8:18:82:a0:20:64:d0:f3:1b:58:32:ac:9c:
                    17:0a:38:f4:14:87:b6:49:a7:b9:45:b3:c3:55:1d:
                    72:ca:a5:11:33:60:3e:6b:3e:c8:ef:07:55:f3:25:
                    66:4d:c4:94:35:3e:d2:f6:34:3d:16:99:61:47:de:
                    ab:b8:f0:8a:9f:3b:f3:48:f8:42:c5:81:87:8f:6b:
                    a2:18:9c:6c:ec:51:89:b2:33:ae:d4:18:e8:c9:d6:
                    3c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AB:BB:88:28:1D:F4:05:27:3C:B9:7B:C5:3A:6C:00:91:6D:EC:61
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20f0dadc-baac-4b65-a724-bd07aee97582/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20f0dadc-baac-4b65-a724-bd07aee97582/20f0dadc-baac-4b65-a724-bd07aee97582.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30081

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:88:c4:ca:6b:e6:17:0e:93:87:59:98:9d:d0:62:8f:cd:ba:
         6c:94:80:e9:c1:6d:af:33:4f:2e:8b:f1:4d:21:3a:19:a8:13:
         d9:e2:6d:fc:48:9e:fe:01:81:72:41:24:8f:eb:6b:bb:f8:5c:
         90:f9:c9:65:4d:76:b6:1f:9f:a2:c5:b7:0d:d6:79:83:9e:b1:
         27:35:72:3f:44:ce:c1:60:31:ce:60:c4:b1:94:57:aa:43:5b:
         6a:08:d1:2a:fb:88:14:14:94:d5:df:97:39:fa:40:d7:11:53:
         5c:cf:8a:49:5b:f8:2e:17:37:9f:ec:11:88:28:15:e1:6b:d7:
         38:9f:ab:c3:55:1a:3b:f1:b7:9e:cb:e1:78:58:ed:99:a7:7d:
         b4:12:d5:cd:fb:86:90:d8:18:d6:d9:20:df:e7:87:32:e8:53:
         54:7f:25:99:a8:1a:e8:39:ff:b7:7d:df:75:d3:6d:bf:93:b7:
         89:fd:8d:df:98:cb:8d:77:26:7d:d4:7f:ff:0b:98:b1:33:f5:
         a2:09:90:f2:fd:8d:09:bd:22:8a:0f:cb:3f:20:e1:d9:c2:d6:
         e9:74:d2:eb:12:07:7a:dc:2d:ce:00:8d:42:de:e5:a1:65:87:
         88:75:67:bf:cf:6f:49:e6:ff:b6:32:4f:ac:8d:55:eb:83:51:
         11:39:67:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----