Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a10db367-e68b-41a3-b31c-56c209804f93.cer
File:                     a10db367-e68b-41a3-b31c-56c209804f93.cer (raw, json)
Hash identifier:          uhNNhyjYD4ymG4aMlyzXIuWaIYFItYiHAsfkDp/VqbI=
Subject key identifier:   A5:74:DC:05:2C:87:12:E2:B5:40:CF:3C:C2:56:F9:4E:99:02:BA:EF
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285846F75343D59115B5D466E2FE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a10db367-e68b-41a3-b31c-56c209804f93/a10db367-e68b-41a3-b31c-56c209804f93.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a10db367-e68b-41a3-b31c-56c209804f93/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 23 Aug 2024 00:45:26 +0000
Certificate not after:    Thu 26 Nov 2026 01:45:26 +0000
Subordinate resources:    AS: 11772

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f7:53:43:d5:91:15:b5:d4:66:e2:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Aug 23 00:45:26 2024 GMT
            Not After : Nov 26 01:45:26 2026 GMT
        Subject: CN=a10db367-e68b-41a3-b31c-56c209804f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:59:48:68:8e:53:59:bd:d1:af:4a:07:8e:52:
                    5c:b6:38:b7:d3:58:85:1d:98:1a:16:d7:0b:33:e0:
                    f7:10:1e:33:74:1b:57:76:3b:70:34:d0:e2:19:cf:
                    de:0e:c8:aa:0d:b8:1a:90:06:74:fc:3a:25:7f:29:
                    cf:2b:90:b9:e4:e8:39:11:99:1c:ee:31:57:45:4f:
                    3a:10:ca:68:f9:5d:b8:89:26:a0:2c:af:40:d7:aa:
                    a3:34:ce:77:10:4d:a8:bc:da:88:8e:67:8d:a0:f1:
                    c1:de:6c:1b:d8:13:c8:1a:f2:e8:29:b8:77:24:df:
                    a9:35:e7:af:e9:54:64:f3:5a:f8:39:cf:4e:51:0a:
                    05:49:b7:38:92:dd:04:40:35:3a:35:21:70:ea:d0:
                    18:5b:d1:09:5f:8c:68:bf:75:a4:30:43:a1:57:b3:
                    7c:53:52:53:b7:85:de:05:74:a5:85:67:da:82:38:
                    50:1f:8e:cc:27:d2:79:61:14:1a:6e:53:86:ba:45:
                    bf:27:76:b8:00:0e:44:7c:fa:b0:c6:2e:c5:a7:73:
                    f3:62:0a:43:f3:3a:1e:64:fe:83:fe:87:33:43:d2:
                    84:ba:65:66:1f:1c:0a:5f:e8:84:8f:c4:f9:f1:38:
                    45:78:b4:7f:fb:d0:ef:f6:0d:64:29:a7:df:a9:03:
                    a6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:74:DC:05:2C:87:12:E2:B5:40:CF:3C:C2:56:F9:4E:99:02:BA:EF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a10db367-e68b-41a3-b31c-56c209804f93/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a10db367-e68b-41a3-b31c-56c209804f93/a10db367-e68b-41a3-b31c-56c209804f93.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11772

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:d3:a2:50:41:d9:4e:24:1f:d5:a9:e5:ac:d4:e0:1f:6b:18:
         b6:76:22:82:78:36:9f:ff:ab:08:56:78:3a:96:48:8e:61:50:
         91:0d:5e:66:39:3c:14:bd:5e:4a:52:78:e4:eb:bf:99:31:a3:
         77:3e:0d:f5:a3:fa:a9:51:21:33:8b:a3:af:19:56:cc:c3:c0:
         f2:8c:4e:70:6e:8a:28:69:2c:3e:ab:b6:c0:06:40:52:a5:1b:
         cf:32:47:05:2c:ea:11:fc:94:bb:5d:dd:af:61:76:2a:14:b4:
         ad:47:dc:6b:2b:d8:b5:82:45:bf:85:a8:31:9f:1c:d1:49:61:
         f9:51:6b:88:fd:87:e0:38:92:68:ff:a9:aa:3d:01:ca:e9:9d:
         40:de:a2:c1:2e:02:7d:b3:92:fa:5d:82:e2:a7:62:40:b0:4c:
         5e:c3:cf:0f:f1:f1:96:66:6e:d9:cb:73:aa:bd:e6:7c:e4:bd:
         bc:07:4d:bc:04:a6:5a:cd:52:81:e1:8b:4c:d0:75:e1:82:8a:
         4f:e4:64:4b:46:66:96:a5:dd:89:8f:62:9f:9a:7e:6a:1d:49:
         02:88:de:32:3f:fb:61:9a:b4:54:a2:b7:26:b2:17:ee:e7:a5:
         c4:49:46:86:66:7d:cf:7b:61:0d:d4:e7:f9:12:c8:66:c7:06:
         26:67:02:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----