Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.cer
File:                     a9dc842a-d5cd-4c00-95d8-2542c58d42ee.cer (raw, json)
Hash identifier:          e4UfvqOgnubHGpukzCmVTT5p11sfS/2KEknm31lINPI=
Subject key identifier:   8E:A6:FF:8C:F9:87:23:26:9D:5D:CD:BC:3E:35:A6:99:C2:1F:D9:83
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845E1D050800791F3D6697DB080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 15 May 2024 15:02:41 +0000
Certificate not after:    Tue 18 Aug 2026 15:02:41 +0000
Subordinate resources:    AS: 394019
                          IP: 23.139.248.0/24
                          IP: 199.79.156.0/24
                          IP: 2602:fb32::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:d0:50:80:07:91:f3:d6:69:7d:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 15 15:02:41 2024 GMT
            Not After : Aug 18 15:02:41 2026 GMT
        Subject: CN=a9dc842a-d5cd-4c00-95d8-2542c58d42ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bc:cb:63:c0:ac:07:06:2a:40:88:f4:d4:76:
                    51:4a:17:44:89:85:82:1f:eb:62:00:7f:4e:18:36:
                    ba:62:c3:55:46:98:a1:8a:3c:c1:f0:e8:52:25:33:
                    b7:3b:7d:b9:4a:87:28:c7:64:24:2c:26:c0:44:e0:
                    4d:1c:e9:77:40:c4:17:82:66:74:9c:60:4c:7d:4d:
                    e5:32:60:c5:7f:6c:89:f1:e8:fc:94:69:40:e3:b4:
                    f8:80:16:62:ea:a7:b0:b3:2c:d4:27:76:e5:ad:97:
                    bc:e1:3f:cd:c5:a2:77:17:49:bc:91:ff:27:ac:e4:
                    94:d0:78:4d:4a:ae:5f:04:be:15:6e:e2:cd:2a:f9:
                    02:e0:0b:d9:7e:87:15:01:c2:e9:c0:6f:14:b9:85:
                    bb:3a:6b:95:35:f2:55:99:8f:73:cb:6f:00:4e:9e:
                    94:81:f1:9b:b5:0b:86:c5:f7:d4:00:e1:74:e5:98:
                    5f:ce:ef:e4:46:51:f7:ab:40:31:85:24:8c:61:34:
                    b7:09:c1:f5:b3:a1:39:1b:41:74:23:de:9f:ac:1c:
                    34:06:d8:fa:18:28:43:d2:87:f7:72:c2:14:81:f9:
                    3b:a6:45:99:3d:13:67:cd:ba:b2:c4:ed:5e:4e:d4:
                    87:44:d8:6e:06:a3:24:f0:a1:ed:b2:fc:c5:77:75:
                    e1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A6:FF:8C:F9:87:23:26:9D:5D:CD:BC:3E:35:A6:99:C2:1F:D9:83
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.248.0/24
                  199.79.156.0/24
                IPv6:
                  2602:fb32::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394019

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a7:ca:ef:1a:dc:24:d5:11:cf:b3:8a:ec:06:08:ef:06:57:
         9d:2a:c7:b9:4e:81:dc:98:4b:cb:e1:c3:6a:3f:45:9e:20:3a:
         a6:3b:38:be:3b:a6:15:58:26:dd:ba:68:a0:dc:b1:d5:6e:fc:
         b4:6e:41:19:e1:9e:ce:34:58:b9:d8:f7:41:98:98:2d:24:42:
         52:fc:98:3d:9b:03:13:e1:44:d1:fb:c1:22:46:ed:71:dc:7d:
         eb:d6:8c:89:fb:f0:79:87:9c:ca:20:11:ac:85:fe:c1:bb:c1:
         73:45:48:34:72:78:2f:e1:ee:05:7b:d8:b9:5d:5a:33:c1:f3:
         62:4f:a2:b5:65:1a:74:b5:61:77:4a:5e:d8:b8:7d:ba:f3:aa:
         55:8f:b3:7c:89:6d:fe:e5:a1:7a:b9:82:dd:c9:71:94:d6:5e:
         4a:8f:cb:33:a0:e4:7e:45:6d:dc:03:44:9d:99:6d:e2:c0:f9:
         67:01:3d:fe:73:e1:cf:27:40:df:cf:cb:7f:2e:42:df:52:c2:
         ca:13:b8:39:6a:7a:9e:ec:43:21:6d:57:bc:ac:a4:6c:46:e4:
         cf:d8:14:ed:4b:d1:8f:29:6a:96:cf:39:62:fd:79:53:25:47:
         29:e9:b6:ca:e9:8d:04:d5:79:3c:48:ce:68:7a:cf:8b:e4:49:
         d4:e0:64:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----