Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer
File:                     5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer (raw, json)
Hash identifier:          xst1/kSSmGDh8xELIc8/WF/hX+4EqQxoQp10rUB3yyE=
Subject key identifier:   FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584633D82A5C19C9E4252554DEE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 14 Jun 2024 00:14:47 +0000
Certificate not after:    Thu 17 Sep 2026 00:14:47 +0000
Subordinate resources:    AS: 394760
                          IP: 23.140.8.0/24
                          IP: 2602:fb30::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:33:d8:2a:5c:19:c9:e4:25:25:54:de:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 14 00:14:47 2024 GMT
            Not After : Sep 17 00:14:47 2026 GMT
        Subject: CN=5ac7c3b4-cbfb-460b-8cba-a8b06504c892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0e:ab:49:74:4c:60:25:98:fc:3b:a2:b7:06:
                    52:21:8f:35:7a:84:49:9f:5a:3b:99:d2:c2:80:d2:
                    04:21:03:0c:3a:7c:35:06:39:03:d9:a7:c8:7a:99:
                    50:be:5b:c6:58:93:b1:e8:8f:00:fe:b0:b3:1e:47:
                    85:0a:a1:33:be:19:9b:20:aa:11:be:09:5d:63:72:
                    7d:34:1f:de:24:1b:20:f1:d3:a3:bd:3b:bb:3c:63:
                    b6:79:ca:61:91:d4:b5:94:42:3f:12:b5:44:c0:cf:
                    a3:c3:c1:f5:c5:33:d7:27:99:ae:4e:66:c9:7d:e2:
                    0e:14:46:7b:ab:9a:d1:d7:ab:cf:e3:b3:2a:f2:ad:
                    c3:6b:9b:89:ae:d6:9a:b3:5e:2a:9f:fe:af:d9:57:
                    a7:11:0d:3b:1b:93:60:dd:0a:57:e0:f1:45:80:0a:
                    38:4e:46:13:6a:f4:2b:ab:53:02:77:99:ec:97:3c:
                    b9:73:be:cc:26:53:71:6c:2d:5d:83:3e:19:e8:41:
                    c0:d8:ac:80:57:fb:04:9f:a6:f4:af:f9:bb:06:81:
                    98:d4:f0:bf:73:14:0f:01:16:5a:98:74:9a:23:08:
                    e3:d8:5c:b6:4d:2a:88:c7:7c:7f:63:06:75:55:03:
                    17:65:04:ef:6d:e2:5e:a8:5a:6e:50:2e:40:20:17:
                    ef:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.8.0/24
                IPv6:
                  2602:fb30::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394760

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:88:d0:52:1f:df:8e:f0:e1:ae:23:74:d9:89:0d:cc:01:33:
         65:fd:30:c6:23:e0:20:2d:5f:36:8e:61:5c:2f:a9:73:62:8d:
         a1:7c:17:dc:d2:74:57:a3:f5:df:c0:94:19:5e:3a:e1:0d:ad:
         a0:07:47:95:e4:1e:f0:a4:67:75:d4:f8:c3:76:ae:73:9d:05:
         fb:d0:de:7f:e5:0c:24:84:5d:3c:4a:c3:40:0d:3b:6b:53:69:
         fb:d1:fa:5e:60:6b:5e:30:9c:ea:8e:c0:ff:14:ea:45:f1:d3:
         5c:e9:cc:a9:09:39:37:8e:e1:79:3b:23:40:7c:e8:91:96:f5:
         07:2e:e4:64:70:10:86:ab:04:6c:a5:a1:37:b5:f0:51:fc:f2:
         df:e6:da:c6:cd:02:ec:44:6e:4f:3d:57:aa:10:01:3b:ac:66:
         34:e4:26:17:95:11:a5:c0:c6:02:b6:2d:75:d8:65:20:71:60:
         46:45:eb:66:7c:d5:96:a5:7c:15:39:8d:91:8e:23:8a:aa:30:
         8c:56:22:5c:76:b5:ae:04:fb:58:85:36:0b:28:de:cb:7a:a4:
         b9:89:10:86:11:fd:97:d4:67:af:fb:44:69:07:4f:74:e4:17:
         a4:82:f4:99:38:74:4c:36:d7:b9:76:49:10:a2:12:cf:9a:df:
         bc:c2:ed:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----