Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda.cer
File:                     ceb51013-50fe-40c8-8358-fbacb2186cda.cer (raw, json)
Hash identifier:          4eDHiTekLR5e3JNSylNscQLiP1ImHhrUO/h6SrkKtu4=
Subject key identifier:   92:D2:A5:78:F5:5E:44:DC:2E:E9:2F:9A:B1:F2:40:C4:0C:81:13:4D
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285846A92810309634C09312053E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ceb51013-50fe-40c8-8358-fbacb2186cda.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 26 Jul 2024 00:45:20 +0000
Certificate not after:    Thu 29 Oct 2026 00:45:20 +0000
Subordinate resources:    AS: 13460
                          IP: 192.111.38.0/24
                          IP: 204.107.64.0/24
                          IP: 2620:130::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a9:28:10:30:96:34:c0:93:12:05:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jul 26 00:45:20 2024 GMT
            Not After : Oct 29 00:45:20 2026 GMT
        Subject: CN=ceb51013-50fe-40c8-8358-fbacb2186cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4d:ba:f1:38:20:ba:c3:7d:c7:c0:e5:f5:19:
                    65:bb:d7:b3:3e:1f:15:8f:07:4d:25:90:ad:a6:33:
                    78:9e:69:95:b0:99:9a:f0:c5:c2:d6:5c:b8:48:ce:
                    10:42:29:79:06:89:ea:be:fc:0e:98:a4:55:d6:21:
                    e7:da:3f:98:1f:98:b2:b3:61:ef:fa:c2:15:ce:b4:
                    03:2d:6c:b0:35:be:1c:d1:de:29:92:e6:5d:59:f6:
                    43:f8:19:7a:5b:52:96:1e:ed:dc:a8:5d:7b:43:bb:
                    d5:e7:2b:45:a2:35:26:e7:ca:ba:84:c9:c0:73:26:
                    36:5e:81:32:3b:2d:ed:5a:da:9f:8a:24:76:8a:7b:
                    8d:f5:ee:17:57:b9:55:74:8a:50:02:b0:e1:e9:50:
                    44:03:74:c6:58:84:3f:bf:fe:cc:d3:bd:ce:c6:bc:
                    c3:e0:37:00:54:51:0a:93:74:2a:b4:cc:9c:71:a8:
                    af:98:75:f5:7e:7c:ef:6e:3a:96:f9:cc:3a:a0:61:
                    97:d7:37:90:5c:65:e3:93:ef:5b:27:98:6e:93:2c:
                    00:24:ad:34:f6:54:b3:79:3e:d4:a7:77:96:d8:87:
                    fa:b7:93:8c:fa:c3:60:e5:63:d5:c8:cf:56:b7:b6:
                    2d:d1:7a:4b:4f:3d:14:08:ce:6e:64:cc:0d:0c:0f:
                    55:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D2:A5:78:F5:5E:44:DC:2E:E9:2F:9A:B1:F2:40:C4:0C:81:13:4D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ceb51013-50fe-40c8-8358-fbacb2186cda.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.38.0/24
                  204.107.64.0/24
                IPv6:
                  2620:130::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13460

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:f8:06:9d:12:e7:34:03:50:9f:8c:e6:5b:9f:dd:0e:ed:4c:
         37:59:fc:b0:b1:48:05:2e:6c:df:24:17:a4:89:24:16:1a:03:
         fa:ce:2c:df:3b:bb:86:0a:d5:df:35:19:19:ff:ec:51:77:70:
         99:b4:56:44:a6:bb:06:2c:9a:70:a3:e4:6d:ac:c9:72:14:5c:
         15:db:cd:44:5c:87:fb:5a:9e:3a:2d:52:db:c9:aa:49:88:4c:
         38:8c:b4:4d:c1:2b:d8:43:f9:1b:fe:ae:f6:a6:1c:19:95:28:
         47:23:17:85:05:3d:b4:5c:85:18:58:d3:ba:98:e2:2f:c5:96:
         58:3b:3b:1c:18:1d:07:45:cb:10:c1:94:62:47:ca:57:39:e3:
         d7:96:d5:a6:62:3f:bc:05:23:b1:f2:ed:2e:d2:5f:2e:44:35:
         dc:98:b2:29:c3:62:74:e0:28:a1:53:51:6e:60:d3:cf:2d:05:
         f2:41:86:ea:05:09:e3:b3:a0:04:d9:ee:ff:9e:94:7e:20:c7:
         b7:d5:e3:e2:9c:7b:e4:61:f4:d2:1c:00:c2:72:bc:20:c0:16:
         9e:f4:42:68:8c:d9:a3:44:53:e2:a9:d6:14:7f:28:8f:8d:13:
         09:00:ec:59:2b:b6:cb:b3:ad:13:de:21:3d:cc:49:dd:ed:b9:
         8e:2c:9e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----