Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9.cer
File:                     5204fe74-822a-4ff7-8d74-0c02c7243bd9.cer (raw, json)
Hash identifier:          8LTwqD+o8R7gyIMQQW0MEXB1MEbt5jKJxSMbkWl9uIw=
Subject key identifier:   49:20:D0:2D:19:C8:02:93:27:68:D6:01:30:78:99:AE:F5:45:71:A8
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858468A036CD237929F2881226980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/5204fe74-822a-4ff7-8d74-0c02c7243bd9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 14 Jul 2024 21:01:28 +0000
Certificate not after:    Sat 17 Oct 2026 21:01:28 +0000
Subordinate resources:    AS: 1027
                          IP: 23.142.168.0/24
                          IP: 2606:e440::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8a:03:6c:d2:37:92:9f:28:81:22:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 14 21:01:28 2024 GMT
            Not After : Oct 17 21:01:28 2026 GMT
        Subject: CN=5204fe74-822a-4ff7-8d74-0c02c7243bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:a1:db:81:73:02:a2:e9:e0:d6:16:15:91:
                    f3:df:e3:2e:23:a3:0f:02:1a:29:3d:2b:01:b7:b2:
                    6d:51:e7:52:8d:5b:9c:95:c4:19:3a:02:92:5d:ae:
                    88:30:49:97:25:b6:70:24:d6:d4:c5:a0:e6:14:c9:
                    58:25:57:22:83:83:b2:33:da:8d:4c:58:9e:2a:fb:
                    e1:4f:93:2b:de:ac:c5:64:5e:09:e7:ce:43:3a:86:
                    6b:38:3f:15:20:f4:38:bd:9e:d0:f6:fb:cd:e3:05:
                    a6:dd:c9:e9:30:0f:3e:ba:75:7c:c3:66:df:20:ec:
                    29:17:3b:ed:96:d8:a9:52:ea:57:3c:d9:78:87:5d:
                    21:88:4c:e6:9e:96:26:2e:26:ed:78:ce:e5:3c:aa:
                    3a:bd:89:a2:94:ea:c7:0b:e9:75:e7:64:c9:e7:a7:
                    ec:13:67:6b:cc:7e:ad:eb:2a:13:33:78:71:87:cb:
                    83:7b:b0:ea:1c:71:a2:d3:66:91:26:f4:32:d7:83:
                    15:a7:bc:4a:81:e2:41:29:4c:66:ab:df:b1:02:ae:
                    8f:79:64:a8:71:9b:18:da:d8:aa:4f:42:5d:94:90:
                    1e:94:9e:71:6a:56:7b:89:b0:51:f5:6d:48:f8:a8:
                    db:8f:97:62:75:52:20:ae:1f:f2:d6:9e:65:48:95:
                    35:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:20:D0:2D:19:C8:02:93:27:68:D6:01:30:78:99:AE:F5:45:71:A8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/5204fe74-822a-4ff7-8d74-0c02c7243bd9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.168.0/24
                IPv6:
                  2606:e440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1027

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:89:02:a4:c2:98:9c:99:00:7f:e6:64:54:82:12:ec:47:1a:
         ed:2e:69:3e:68:92:a6:60:9a:58:7d:a9:a9:03:50:c7:0f:c3:
         59:c1:55:bd:9a:d1:a1:04:12:91:ba:dc:89:68:4d:6a:88:f2:
         3f:34:9d:6f:9f:0a:e4:6d:9c:88:fa:3b:67:6f:6c:f0:51:f2:
         14:34:7c:a6:47:3a:2a:f5:20:23:82:55:b6:aa:67:cc:09:5e:
         80:e2:73:e2:50:47:47:52:24:c3:8a:9a:b3:f3:53:ae:22:23:
         db:94:7d:c8:11:af:27:2c:3d:9d:6c:9e:2d:3f:cc:6a:cb:30:
         2c:a1:cf:a0:94:39:93:5b:59:60:a5:25:f7:2d:1c:b7:5a:8f:
         a8:29:aa:7f:b1:d1:64:ea:6e:43:a5:f4:2a:b2:59:67:c9:5d:
         10:85:42:53:7e:20:aa:a0:d2:a4:25:59:ce:32:a0:5c:92:96:
         4b:38:cb:9c:37:42:82:ee:3c:27:82:e3:e8:ba:ab:b5:50:bf:
         1c:73:3c:8a:d5:55:0f:c0:f3:94:69:7e:de:23:b5:18:c8:bc:
         33:d8:26:93:d9:8b:fa:31:73:79:d7:24:75:af:8a:9a:07:0b:
         88:fb:23:c7:45:8f:48:dc:97:ab:ca:f0:54:b5:7f:ea:dc:05:
         41:35:7f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----