Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03.cer
File:                     e3587642-0817-4894-845b-fb11599b2f03.cer (raw, json)
Hash identifier:          UAUQGKvg62uHqM4ljxOBy1z89bbZKIKyMNHsZeVRHSA=
Subject key identifier:   79:84:8C:A0:0A:40:21:02:46:28:23:6C:57:17:A9:2F:94:8F:BE:B0
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858468FD6CDEA455C9D1777275000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03/e3587642-0817-4894-845b-fb11599b2f03.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 16 Jul 2024 23:06:25 +0000
Certificate not after:    Mon 19 Oct 2026 23:06:25 +0000
Subordinate resources:    AS: 401222
                          IP: 23.183.248.0/24
                          IP: 2602:f87d::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8f:d6:cd:ea:45:5c:9d:17:77:27:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 16 23:06:25 2024 GMT
            Not After : Oct 19 23:06:25 2026 GMT
        Subject: CN=e3587642-0817-4894-845b-fb11599b2f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:b5:24:f7:44:cf:11:60:00:d5:10:eb:2e:
                    4f:f1:5b:dc:5f:97:49:b3:68:c1:13:aa:38:a1:c5:
                    db:88:3f:bb:48:cf:4d:f9:29:59:29:a1:79:e0:ab:
                    1d:27:55:19:d8:2b:20:26:08:92:76:da:85:f7:a0:
                    19:be:43:e5:ca:1b:9e:7a:5b:6c:a9:bd:6b:14:fd:
                    e9:a9:f3:cf:fe:a0:cc:e6:25:ba:d1:7a:0b:d5:c1:
                    89:44:33:b7:83:02:27:88:7e:1f:1c:1d:ab:27:3d:
                    43:e7:28:5c:38:de:dc:20:5a:f6:5e:5a:71:cf:5e:
                    b7:98:66:f3:54:c9:72:10:f5:49:80:cc:5d:10:2b:
                    37:12:e5:ee:f0:4f:74:8f:87:42:e5:51:d9:dc:14:
                    4a:7f:3f:89:b1:a3:f6:50:f0:df:d9:32:94:5b:53:
                    de:84:9c:bd:92:71:43:46:8e:83:06:83:ad:b6:9f:
                    4a:ad:f1:04:bc:1a:bd:f0:e8:c3:4f:70:3a:23:42:
                    a7:f5:00:2f:40:33:e2:08:fa:24:f7:48:06:83:16:
                    ff:35:db:c4:ba:b4:75:53:5c:e2:0c:ed:98:15:0e:
                    ff:54:51:64:dc:a6:9a:1a:5b:b7:55:ff:6b:c0:77:
                    88:78:90:35:de:1f:92:54:2d:e6:b8:34:84:78:5f:
                    8c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:84:8C:A0:0A:40:21:02:46:28:23:6C:57:17:A9:2F:94:8F:BE:B0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03/e3587642-0817-4894-845b-fb11599b2f03.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.248.0/24
                IPv6:
                  2602:f87d::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401222

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:de:17:4a:4f:4c:e7:dd:df:00:8d:01:51:a5:40:ee:ad:8a:
         d7:c4:89:1c:13:d7:dd:25:42:43:5c:15:03:77:2a:83:24:6d:
         11:57:b7:54:e8:a7:e5:69:ed:6c:8d:8f:69:6e:32:71:36:d1:
         2d:1c:ec:72:d0:12:d9:6d:0c:7e:f6:e6:ae:be:ab:f7:f6:e8:
         46:18:37:2c:b4:9e:a6:21:a9:b0:bf:37:89:78:1f:cb:86:14:
         89:ba:1f:50:2c:44:c4:ec:80:e4:2a:2d:bd:4b:ee:67:27:39:
         c3:13:cc:5d:7f:0d:6a:d2:2d:d8:f6:84:26:ad:21:25:b3:27:
         23:c6:f1:49:db:04:30:7a:f8:80:7b:8c:3b:10:bb:4f:f1:ec:
         43:e6:81:fc:52:0a:00:a7:79:e3:45:e9:57:c8:56:c0:8b:82:
         ec:7f:26:06:4d:6a:48:53:c0:7c:04:a0:45:62:ce:33:38:70:
         50:72:fe:e2:00:99:32:7c:a8:19:22:77:b6:b7:2b:f9:03:45:
         93:65:df:45:cd:cd:34:3e:df:2b:25:5e:e4:4b:a8:bf:5e:25:
         c7:75:35:27:54:00:7e:06:dd:b9:2c:11:e1:f4:c9:96:c2:81:
         11:b8:b6:90:9b:a2:d0:67:8a:2e:65:c6:9b:65:2f:e1:90:93:
         66:7f:02:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----