Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer
File:                     24c594b2-08c8-4864-afae-a607d79beb73.cer (raw, json)
Hash identifier:          U1HkBn1MV5TXLYslv5ZsN6ZlBNMm3ThNDU/rXOxMBHg=
Subject key identifier:   82:87:85:2A:0A:F8:0A:4E:29:3F:AC:1A:62:02:E4:4F:A8:EC:30:60
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846B39A23E9A2E9735BEE786E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 29 Jul 2024 18:33:17 +0000
Certificate not after:    Tue 27 Oct 2026 21:19:11 +0000
Subordinate resources:    AS: 398178
                          IP: 138.43.208.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b3:9a:23:e9:a2:e9:73:5b:ee:78:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 29 18:33:17 2024 GMT
            Not After : Oct 27 21:19:11 2026 GMT
        Subject: CN=24c594b2-08c8-4864-afae-a607d79beb73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d1:4c:d2:64:96:e5:09:5b:de:a3:d1:d2:1e:
                    c0:ed:75:e7:5c:e0:e3:19:ad:fe:99:cd:84:95:c0:
                    e0:53:04:0d:4a:d9:9e:ca:57:14:d1:89:ce:4f:b9:
                    33:ed:8d:e2:52:8f:44:d1:7b:06:17:ae:b8:7b:c3:
                    33:5f:5c:1c:b0:2a:5a:a8:f1:df:46:18:3c:6d:5e:
                    37:d5:f9:c2:b9:76:e5:e6:fc:59:e6:a5:b7:ac:6c:
                    9c:0b:2e:53:87:90:df:d5:f1:9c:32:a3:e8:a9:b6:
                    4b:9b:97:8f:61:e3:21:2b:24:94:87:7b:c0:19:2b:
                    f5:bb:eb:46:dc:27:37:a9:eb:d0:83:db:7f:92:ef:
                    f4:f2:77:1c:0b:49:77:c4:72:ef:17:ab:38:ed:1f:
                    be:a8:e1:ff:34:a5:a0:48:11:d8:da:fb:49:58:f5:
                    e1:9c:b5:c8:16:9c:e3:34:ad:ea:99:ca:4a:fb:3e:
                    54:40:7d:1d:26:74:84:2b:f6:f6:95:e9:06:06:83:
                    e6:b5:95:69:96:35:ea:da:b7:63:28:e2:bc:21:17:
                    c7:f2:83:41:bf:bf:d6:c4:83:5a:86:5b:97:68:d8:
                    01:49:30:f2:16:86:66:0d:0a:9c:71:04:11:d8:06:
                    8e:b3:56:5c:24:a0:9a:34:e4:e0:7d:cc:f2:1a:9b:
                    e2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:87:85:2A:0A:F8:0A:4E:29:3F:AC:1A:62:02:E4:4F:A8:EC:30:60
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.208.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398178

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:0d:dd:76:2d:9d:03:cc:a2:80:fe:2c:7a:e5:f8:87:8c:4f:
         19:b9:49:0b:da:df:74:73:53:60:2e:15:ce:4a:a8:f3:c1:98:
         41:e4:b2:9e:55:e3:67:16:10:2b:e6:ad:a4:0d:2b:df:8f:76:
         d5:41:1a:7e:ee:7b:20:92:59:64:1d:ab:48:4f:1a:c4:2f:8d:
         d7:a8:5f:90:42:50:58:e1:b6:3f:77:bb:95:5c:6f:03:7a:0a:
         bc:50:c2:c2:68:4a:46:16:fd:78:80:d7:d7:d1:15:c6:81:9c:
         e9:e6:1e:0c:77:51:97:65:a8:0c:83:38:3e:50:b4:a1:2a:d1:
         f4:a3:70:50:c8:dc:fc:10:aa:c6:14:2c:ec:ef:19:51:7c:48:
         11:2c:f1:3e:0c:5a:90:91:a2:04:1c:4a:bf:11:61:73:21:fe:
         34:7d:e9:09:f2:4e:fb:35:d2:63:c4:29:68:32:a3:a9:8f:65:
         f0:7d:80:41:af:6b:5e:ec:6d:64:54:ac:32:95:e6:28:9f:e9:
         2c:55:1e:fd:10:06:0e:e9:55:5b:7e:92:1e:9c:91:b3:16:8a:
         af:02:87:da:70:b6:4e:cc:5b:25:63:28:26:3a:9e:a4:b1:0d:
         10:ac:b8:9a:19:a6:23:b0:40:05:a3:6f:15:cf:c1:53:ac:a3:
         2a:83:be:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----