Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9.cer
File:                     ae746161-70fc-4a1b-8327-03cf4ca58ca9.cer (raw, json)
Hash identifier:          3f2f+z+bbEcMe5rB0TdtriOd7nOtJYcQ5zLur3EEco4=
Subject key identifier:   EB:8F:89:E5:45:92:F6:EE:B0:91:05:C5:9A:DE:02:68:CF:A7:26:85
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846942A18A8AC14A09934BCD3C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9/ae746161-70fc-4a1b-8327-03cf4ca58ca9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 Jul 2024 12:17:28 +0000
Certificate not after:    Wed 21 Oct 2026 12:17:28 +0000
Subordinate resources:    AS: 25728
                          IP: 2620:27:40c0::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:94:2a:18:a8:ac:14:a0:99:34:bc:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 18 12:17:28 2024 GMT
            Not After : Oct 21 12:17:28 2026 GMT
        Subject: CN=ae746161-70fc-4a1b-8327-03cf4ca58ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:38:39:fd:f9:29:2f:49:ad:86:26:ed:b4:c8:
                    de:39:40:fd:13:53:99:f1:0d:1c:62:c5:8a:a2:a2:
                    52:ff:c1:a4:06:f1:1c:5c:83:3f:46:78:07:fe:4c:
                    b2:64:91:cc:95:3a:46:68:8b:bd:74:be:c8:b2:58:
                    fe:76:94:b5:4e:d9:ef:24:a0:cd:d8:81:32:f8:b2:
                    be:a7:82:d4:ff:46:c9:99:c8:3f:b2:65:ae:e1:b9:
                    bf:58:ca:bc:b2:30:09:e5:a3:ea:9e:3c:f3:d4:79:
                    cd:a2:e4:4b:35:e5:ce:a3:14:f7:c5:39:0d:f3:d2:
                    c2:04:78:1d:25:aa:0c:be:5c:47:59:aa:66:84:5c:
                    cd:22:44:a7:56:62:52:36:bc:eb:4d:b6:a1:da:48:
                    1d:2b:f6:01:89:a6:40:dd:98:6b:a2:6d:60:07:1e:
                    65:d7:0c:5e:d4:87:37:24:8d:c5:b0:d7:7b:23:a9:
                    ce:cf:64:29:3d:ca:83:83:e3:42:c0:51:72:a9:ef:
                    76:b2:ac:bd:6e:0b:b0:a7:a7:32:0a:0b:50:28:fc:
                    73:c9:36:6a:7c:8d:9d:67:7d:82:84:20:30:df:eb:
                    05:89:70:9e:db:b0:4c:0b:fe:97:b8:d5:94:7e:27:
                    ef:ef:c4:88:35:8c:09:27:18:e4:ad:db:a0:72:62:
                    a0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8F:89:E5:45:92:F6:EE:B0:91:05:C5:9A:DE:02:68:CF:A7:26:85
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9/ae746161-70fc-4a1b-8327-03cf4ca58ca9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:27:40c0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25728

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:5f:45:c9:46:16:54:38:be:e4:80:5a:38:c4:5c:60:ee:e9:
         5e:3e:f3:3e:63:f3:5d:76:7d:a2:1c:f1:7b:dc:c7:84:76:e8:
         21:80:62:27:7e:1a:fe:2f:b9:a6:47:50:a7:a7:09:f0:40:ff:
         a9:39:fc:ef:40:8e:9f:cd:d8:c1:51:a5:f9:29:c5:c7:57:3d:
         2a:8a:94:c5:49:ab:36:5d:cc:28:da:69:8c:2c:f6:96:91:f8:
         26:ba:e2:e9:04:c6:bd:b2:78:4b:7e:9e:d4:a8:06:4c:b0:ed:
         79:e9:82:9e:91:9b:43:48:bd:fc:7b:85:9a:eb:25:50:cf:29:
         fd:29:a1:05:d6:80:0a:93:d9:37:a6:57:08:d7:3b:40:d2:80:
         84:67:74:67:d7:c5:fc:6c:b6:47:1c:f6:9f:34:74:91:8f:e4:
         af:7c:49:72:6f:72:02:d1:f3:82:e4:f3:21:fb:8f:8f:4b:60:
         c0:ad:f8:65:1c:f3:fb:5a:74:6f:08:4d:1e:6d:8e:a4:60:4f:
         20:79:5e:ca:c9:f3:b4:e0:d6:53:ed:10:1a:18:ee:e9:ba:a6:
         bd:21:1a:4c:6d:45:de:af:62:a9:9f:c4:f3:3f:00:37:40:84:
         ee:d5:40:89:f1:84:c9:74:b5:87:22:f1:07:f1:44:78:d5:72:
         7f:99:60:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----