Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer
File:                     7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer (raw, json)
Hash identifier:          Vmnb45pJgUICU98mLXNAzYDufGhjG4ye41FIts3BdP4=
Subject key identifier:   B7:06:E1:B2:41:33:5E:09:63:69:1B:EC:9D:F3:AF:83:83:23:51:C4
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584694F807FAA2D41C1F7C8BFC80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 Jul 2024 19:12:24 +0000
Certificate not after:    Wed 21 Oct 2026 19:12:24 +0000
Subordinate resources:    AS: 36427
                          IP: 2620:8e:8000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:94:f8:07:fa:a2:d4:1c:1f:7c:8b:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 18 19:12:24 2024 GMT
            Not After : Oct 21 19:12:24 2026 GMT
        Subject: CN=7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:8d:3a:13:5c:6b:d8:74:15:44:15:4a:64:81:
                    6f:69:36:e4:0b:92:27:2d:19:e6:37:e0:23:e1:c4:
                    e3:0a:bc:62:4d:64:5e:5b:31:b6:8f:86:dd:bf:84:
                    9a:52:fe:ee:6c:6c:de:1a:7b:95:5a:a8:52:d4:dc:
                    04:b4:bb:4a:bc:6b:a3:2c:29:35:48:49:d3:1d:81:
                    57:d6:ad:70:71:fe:7f:6c:be:8a:2c:6d:ca:02:75:
                    69:45:bc:ca:82:a6:c9:9b:de:c4:9e:61:31:18:a7:
                    1a:d5:ee:03:57:eb:51:b7:fa:44:3e:db:60:f8:fd:
                    de:3f:fc:be:ff:d5:5e:63:9d:da:98:2d:79:12:2f:
                    42:ac:e3:a0:d0:39:eb:4f:0b:0a:1d:4e:f7:9d:e0:
                    e0:f3:7d:a3:59:36:19:72:14:e0:64:30:23:0d:9e:
                    02:61:f0:b2:20:98:b9:c7:e8:e7:d0:cb:19:a1:13:
                    dc:a8:b5:d0:e8:df:5b:a0:15:99:f9:62:ca:a6:83:
                    c3:1e:eb:e1:f8:55:8b:ac:9b:14:31:af:6a:4e:71:
                    66:b9:10:6a:32:b2:5e:4a:f6:68:92:91:af:a0:1d:
                    9e:0a:45:f7:3b:1f:3c:82:3b:92:06:33:c9:7b:5d:
                    52:f8:c6:5a:02:ea:51:9c:bc:c4:1d:38:f3:59:40:
                    77:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:06:E1:B2:41:33:5E:09:63:69:1B:EC:9D:F3:AF:83:83:23:51:C4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8e:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36427

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:07:fb:cc:75:fa:24:b4:30:2c:a3:c5:c1:7e:01:c6:79:16:
         fb:b9:83:e1:b7:1a:16:ee:8c:14:e9:8f:67:90:13:fe:3d:6a:
         7d:c1:63:0f:8e:45:e2:e1:9e:03:4f:4b:c2:bf:16:56:0b:98:
         e6:dd:2c:f8:02:5b:e2:9f:29:f4:9f:7b:26:5c:04:79:ec:ab:
         ea:45:a6:fa:dc:12:7c:c2:54:11:3f:9c:a1:60:c9:48:a8:43:
         73:7e:ce:14:0d:eb:5b:6c:d1:35:42:2c:fb:64:99:a7:14:cc:
         b0:e2:9c:7c:f4:72:f0:73:d0:9f:d1:56:49:f9:66:4b:87:f5:
         93:05:45:f8:57:4b:7f:fa:e1:b2:15:d5:78:0b:50:9a:7b:38:
         29:cd:b4:9c:0a:b2:5a:1c:18:98:f8:f9:8c:71:97:e6:89:b5:
         5b:43:7d:4f:ee:dd:49:ca:ee:d6:61:8c:4e:35:9b:03:d8:22:
         f1:3f:9c:81:73:cd:0a:e3:68:8f:02:02:7d:28:2b:45:5a:23:
         03:a1:0e:21:70:fa:e1:b5:83:7c:53:3b:1c:71:44:7e:ff:a5:
         3b:f2:ed:a0:6f:c0:31:35:16:06:77:e2:65:59:4c:88:62:c5:
         16:79:d1:93:ff:5b:6f:eb:08:5a:97:0a:93:d4:1c:d4:29:55:
         59:58:ed:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----