Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68.cer
File:                     a5227ba9-e279-4048-a93b-e62de3502f68.cer (raw, json)
Hash identifier:          Jt68SbNAWHo9TZBqliWeTfhf8y5JuPUC5MeCeTap0wA=
Subject key identifier:   44:02:F2:CE:3C:E2:5B:C5:F9:17:9C:EB:4A:5B:4B:3C:3A:3E:96:F0
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584694761BA23C8249D35870DE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 Jul 2024 14:50:37 +0000
Certificate not after:    Wed 21 Oct 2026 14:50:37 +0000
Subordinate resources:    AS: 395896
                          IP: 64.89.48.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:94:76:1b:a2:3c:82:49:d3:58:70:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 18 14:50:37 2024 GMT
            Not After : Oct 21 14:50:37 2026 GMT
        Subject: CN=a5227ba9-e279-4048-a93b-e62de3502f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:9a:e8:50:8a:56:8d:e9:0d:c2:f2:41:17:
                    33:c9:74:43:ab:3e:f7:55:27:64:65:8d:7e:97:c4:
                    9d:10:04:6d:bf:43:a5:2a:4f:6c:3f:11:15:47:ef:
                    34:c1:63:ba:b3:04:3e:6c:b3:25:5d:f0:19:da:a1:
                    37:23:6e:86:09:d4:4f:fa:38:29:62:10:6b:a6:b7:
                    90:d7:ef:ad:b8:1e:ab:90:85:0b:e9:46:20:9a:6b:
                    7b:24:e6:1c:51:07:50:97:66:dc:3d:cb:74:c1:ab:
                    68:dc:24:93:ab:0d:b0:5b:dd:6f:3d:f8:d7:3b:aa:
                    1d:a1:d2:66:ae:45:2f:69:2f:2a:9a:a9:e3:e2:2d:
                    7d:a6:c2:39:b5:8e:45:64:b1:bb:5f:66:3d:a5:ee:
                    7a:3d:6b:d1:4f:e2:fb:2b:bd:cb:a4:3e:0b:d1:71:
                    2c:2c:99:3a:2a:98:ea:ec:8e:d0:3e:f5:7a:f9:26:
                    c3:52:e3:62:ab:bf:92:8e:51:65:f1:09:db:b5:8a:
                    ca:02:67:01:d5:d9:a5:67:46:e7:1d:7f:ac:02:cb:
                    98:5a:73:b2:14:38:88:b0:8a:b9:94:93:83:69:57:
                    a8:fa:ea:1c:ca:d8:dd:16:ff:f6:9e:0a:83:db:cf:
                    16:e8:ed:68:5e:8f:10:4b:77:fd:0a:e8:16:b9:72:
                    6a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:02:F2:CE:3C:E2:5B:C5:F9:17:9C:EB:4A:5B:4B:3C:3A:3E:96:F0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.89.48.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395896

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:6a:88:0f:84:ad:61:46:4a:ad:f2:e5:b8:81:fa:c9:0b:66:
         30:b9:95:27:c1:ca:8e:57:10:b7:a5:27:c3:fa:61:06:45:94:
         65:53:07:7c:c5:a9:3a:1a:e0:0b:de:d6:88:93:0d:af:ea:82:
         7e:03:67:51:81:84:86:b8:1b:76:eb:3e:63:a8:ed:0c:41:3f:
         b6:30:27:71:33:3e:51:c6:3f:d3:41:4d:d9:b4:55:dc:f0:d8:
         96:61:1d:eb:88:03:db:cb:18:92:01:26:31:5c:fd:f3:41:09:
         4f:81:50:34:c2:46:95:56:ab:fd:0c:37:be:5c:ea:3e:6b:cb:
         0b:52:90:f3:28:39:b3:20:df:5c:86:12:92:dc:f5:80:97:bf:
         b5:55:d7:d1:4e:de:ea:5e:c4:28:57:0e:73:c4:33:24:fc:f4:
         60:7c:f6:18:54:65:c3:2f:1b:2c:10:2e:50:d5:2a:45:95:a5:
         8c:09:fb:2b:a5:f8:ff:c8:70:28:be:a6:55:03:57:37:8c:c6:
         85:14:4e:07:96:87:43:2a:25:4d:a0:ae:c1:d2:bd:e5:d8:e3:
         bd:78:12:fc:84:5d:c0:19:6c:08:14:24:67:f1:84:a8:f0:3c:
         b9:30:28:cd:52:4c:61:fc:40:a7:2a:dd:0a:c0:04:25:72:49:
         86:44:e6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----