Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8b2ed9-3f07-420f-a388-1b343b569d01.cer
File:                     3f8b2ed9-3f07-420f-a388-1b343b569d01.cer (raw, json)
Hash identifier:          Vk9VkYQwhOVdWf2bBE/JW+jQ7HjWy1jzBdfxS57gwqY=
Subject key identifier:   A3:A2:D2:BD:4E:DA:44:C5:EE:39:3F:A6:D3:41:C7:A8:81:72:81:E8
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846187D5E0F3EEA71F4DBA81E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8b2ed9-3f07-420f-a388-1b343b569d01/3f8b2ed9-3f07-420f-a388-1b343b569d01.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8b2ed9-3f07-420f-a388-1b343b569d01/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 04 Jun 2024 05:05:01 +0000
Certificate not after:    Mon 07 Sep 2026 05:05:01 +0000
Subordinate resources:    AS: 399671

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:18:7d:5e:0f:3e:ea:71:f4:db:a8:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun  4 05:05:01 2024 GMT
            Not After : Sep  7 05:05:01 2026 GMT
        Subject: CN=3f8b2ed9-3f07-420f-a388-1b343b569d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a1:b0:a8:b2:97:ca:4d:39:e6:ee:6d:66:42:
                    b4:2d:80:6b:b8:9d:65:23:a5:ed:14:63:5b:18:b8:
                    b3:0f:4b:c6:b1:18:cd:bd:f4:73:8d:db:d2:d7:6b:
                    f5:73:c8:f8:47:0e:76:bf:e1:81:fa:af:a4:7a:e4:
                    24:24:44:79:c2:99:2a:31:4d:55:49:36:e1:5f:22:
                    82:5a:52:a5:72:66:48:56:5c:50:ef:8b:ab:fd:a4:
                    1a:a4:44:1a:10:dc:8e:d9:b6:ab:70:95:bb:8b:50:
                    2a:30:57:93:68:33:20:73:85:b6:4b:9e:73:fa:00:
                    98:84:4b:a1:9b:ea:ee:f7:2f:43:66:19:f7:04:ba:
                    5e:7f:98:69:45:1f:67:c4:73:38:e5:c8:33:78:1f:
                    d2:6f:20:44:21:02:b9:17:b4:c7:1e:e0:9f:69:0d:
                    14:45:7f:2f:6f:51:ab:67:fd:06:a5:33:d1:68:37:
                    d2:69:33:03:aa:d6:53:63:af:3c:2e:58:d8:df:2f:
                    fe:8e:2d:51:b8:9d:15:f5:87:83:62:58:f5:94:50:
                    5f:e9:d1:7e:19:70:06:45:60:4e:0f:32:89:5b:24:
                    86:fd:d3:94:80:be:25:75:41:e1:e0:e1:07:a3:b0:
                    25:e5:6f:8c:84:66:76:6c:5c:df:31:76:79:92:6c:
                    df:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A2:D2:BD:4E:DA:44:C5:EE:39:3F:A6:D3:41:C7:A8:81:72:81:E8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8b2ed9-3f07-420f-a388-1b343b569d01/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8b2ed9-3f07-420f-a388-1b343b569d01/3f8b2ed9-3f07-420f-a388-1b343b569d01.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399671

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:31:24:19:c2:94:e7:f6:1c:ae:3b:c5:de:4a:3a:34:21:2b:
         d8:aa:d3:88:e7:0f:84:d8:16:82:a1:9e:81:71:03:fd:50:8f:
         05:ce:60:96:5a:85:da:fb:f5:59:52:83:70:bd:c0:3b:b6:0e:
         b0:bd:a5:3e:40:c5:ce:ce:2d:07:1a:33:34:77:4e:06:a8:35:
         45:fc:bf:a2:33:db:77:55:1a:10:03:98:97:11:81:31:44:81:
         2d:07:80:40:6d:de:4f:f3:ba:d4:18:f7:6a:f7:9b:a8:61:40:
         08:f5:5c:95:5c:23:30:b6:03:5f:75:6e:9c:36:94:24:ba:2e:
         e1:e0:98:35:c4:9f:66:d1:06:f5:67:cc:b9:dd:07:6a:2b:58:
         9c:53:67:d7:b5:49:81:13:b3:e3:2c:aa:01:0d:8d:6e:25:7b:
         02:40:3a:e2:88:3d:c4:1d:ea:b1:08:0b:d4:fb:ce:7d:4d:1b:
         4d:a3:a3:a8:ad:c2:fe:77:4e:d7:5c:b5:b7:6a:62:85:75:25:
         1f:9b:42:70:f4:5f:b4:b2:2a:61:e0:66:90:92:95:0b:1e:c4:
         b9:fc:10:13:5e:e4:f8:1c:fa:72:04:26:63:86:41:70:55:a5:
         ad:eb:7f:f0:56:8e:c3:29:31:9a:5b:de:24:6b:00:f4:2a:dc:
         e5:6f:b7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----