Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70fab1b4-f649-409d-b4e5-db59f8ea56d1.cer
File:                     70fab1b4-f649-409d-b4e5-db59f8ea56d1.cer (raw, json)
Hash identifier:          Z6wv8zqfivl+sTAKdqIfscIGRO4VUkQ2wUDiAlEKehI=
Subject key identifier:   6E:B8:36:AC:37:F2:51:19:F4:76:E5:77:30:90:EE:66:D4:B9:5F:51
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858467E088150A4662F70E06D3F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70fab1b4-f649-409d-b4e5-db59f8ea56d1/70fab1b4-f649-409d-b4e5-db59f8ea56d1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70fab1b4-f649-409d-b4e5-db59f8ea56d1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 10 Jul 2024 14:02:00 +0000
Certificate not after:    Tue 13 Oct 2026 14:02:00 +0000
Subordinate resources:    AS: 36295
                          IP: 50.30.48.0/20
                          IP: 208.65.48.0/21
                          IP: 208.90.216.0/21
                          IP: 2606:2400::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7e:08:81:50:a4:66:2f:70:e0:6d:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 10 14:02:00 2024 GMT
            Not After : Oct 13 14:02:00 2026 GMT
        Subject: CN=70fab1b4-f649-409d-b4e5-db59f8ea56d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f5:f0:2b:3f:c9:b5:5d:81:9d:ad:97:0e:c9:
                    b5:2d:7d:d5:1f:3b:c8:90:58:91:9c:e2:1c:61:b8:
                    a4:85:5d:47:92:a1:d0:7a:c3:30:54:1e:16:d3:5d:
                    60:88:31:46:de:c5:6d:74:be:20:0e:e2:76:1d:66:
                    2a:48:43:1f:7a:1b:82:13:bc:2b:ef:00:39:93:1f:
                    4f:db:ba:bc:c0:ec:de:fe:dc:4a:eb:b5:e3:b9:78:
                    a8:76:69:48:41:44:d7:02:fa:4c:af:fa:4e:b8:9a:
                    86:60:00:16:d1:85:9c:eb:5e:fb:8a:1e:de:99:ee:
                    c0:23:94:e3:09:15:97:8b:ad:36:87:a5:9d:ee:a8:
                    a9:1c:a7:e8:f5:74:77:69:d0:71:ee:c6:9e:52:4c:
                    26:f5:42:55:03:2c:b2:34:32:63:63:f9:b6:3a:d1:
                    c6:5e:a6:f4:03:8d:07:25:95:fd:0d:ef:8e:24:02:
                    89:7c:5e:f6:c9:c4:db:83:77:b6:85:61:86:77:52:
                    55:5e:d7:d2:d0:bc:61:a2:75:8c:7a:23:0e:aa:97:
                    8d:7a:65:37:91:25:fa:95:97:af:04:9e:d4:60:1c:
                    6f:aa:8e:1f:fe:0f:f9:b4:46:cf:35:5e:7b:3a:a6:
                    c9:36:c7:fb:46:08:d7:67:c3:06:6b:b7:00:d7:79:
                    31:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B8:36:AC:37:F2:51:19:F4:76:E5:77:30:90:EE:66:D4:B9:5F:51
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70fab1b4-f649-409d-b4e5-db59f8ea56d1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70fab1b4-f649-409d-b4e5-db59f8ea56d1/70fab1b4-f649-409d-b4e5-db59f8ea56d1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.30.48.0/20
                  208.65.48.0/21
                  208.90.216.0/21
                IPv6:
                  2606:2400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36295

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:1f:5c:42:fa:1b:29:a0:1a:27:c5:14:f6:87:4a:22:e1:2a:
         97:81:2d:b1:fe:e6:9b:c7:59:1b:81:45:f6:1d:fe:d7:9a:bf:
         f8:c2:47:0b:ac:ad:1a:c3:4a:1c:1b:ae:72:73:26:10:62:92:
         24:37:d5:23:96:a9:65:65:ef:b1:98:17:b5:e1:06:52:54:a9:
         fc:4b:bc:7d:71:9a:49:ae:1b:5a:d0:74:45:6d:82:23:53:58:
         a6:c7:b1:d1:ba:80:1e:91:d8:93:6f:52:10:b8:53:e6:2f:f8:
         b9:bd:c7:0e:a1:a4:94:ed:37:61:ee:21:59:c2:a0:d4:85:40:
         7a:f0:43:7f:a8:d5:0d:2a:db:fe:9f:cb:f1:66:d5:1d:d0:a8:
         fb:23:57:cb:43:8d:01:56:f1:5f:b1:7e:4b:b2:86:66:fb:c5:
         fa:87:0b:44:44:1c:8f:9f:61:ca:42:a9:1e:df:36:15:97:f3:
         13:d6:60:81:cc:f5:f1:ef:25:68:49:8e:0e:58:88:81:41:6d:
         fd:45:08:3c:af:bd:ee:2a:be:4b:9d:b1:b4:c9:4d:24:fe:ed:
         68:38:bf:ab:92:94:f5:0f:b0:20:56:e9:23:cb:77:ba:30:63:
         8b:d1:26:17:f2:1d:f8:c3:81:9d:df:32:e7:0c:cf:ba:ee:26:
         31:38:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----