Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer
File:                     81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer (raw, json)
Hash identifier:          Nu70mCn7fB+uyDuZ5TmQNi13lR3D004WC3Y2/2BcO7M=
Subject key identifier:   A1:DC:29:E3:30:C2:2F:7E:A7:D8:A0:65:C4:48:4F:59:C5:57:06:44
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285844B2C2B5F3EDA5041555031880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 28 Jan 2024 01:45:20 +0000
Certificate not after:    Sat 02 May 2026 00:45:20 +0000
Subordinate resources:    AS: 33196
                          IP: 136.175.141.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:b2:c2:b5:f3:ed:a5:04:15:55:03:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan 28 01:45:20 2024 GMT
            Not After : May  2 00:45:20 2026 GMT
        Subject: CN=81eaf041-c9f9-4d67-80c2-43bd51af6b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d8:37:62:11:80:a1:64:2b:0b:2f:ca:ea:57:
                    e0:8a:bd:1e:22:56:92:b7:34:97:d9:4b:af:d8:11:
                    59:c7:a3:35:34:f8:93:fa:ac:21:f5:29:ff:2a:00:
                    25:a8:a0:43:43:bd:05:4d:89:80:cc:7f:5a:48:19:
                    c9:23:1c:e7:49:ee:ca:c9:d2:96:cd:90:47:65:53:
                    c7:30:c7:38:8d:e9:d6:be:b8:03:f2:a3:50:84:b8:
                    a5:45:0b:7d:47:2c:c9:ad:3c:54:7f:fd:4d:59:05:
                    50:6e:cc:ec:b7:2b:9a:19:3d:fe:0b:bf:6e:55:7c:
                    d7:74:fd:2d:34:64:88:37:6f:03:a6:6b:9f:e1:ef:
                    59:1c:b9:55:24:3f:93:da:3e:f5:bf:10:17:d0:45:
                    74:25:bd:f8:96:96:26:b1:4d:69:80:48:c6:f6:b9:
                    79:5e:f1:56:67:32:9e:6a:01:f6:b1:87:6c:3d:a4:
                    88:eb:aa:91:93:c5:e7:cf:8a:63:f3:68:c5:80:26:
                    d8:54:1c:2c:69:89:1f:2f:17:35:63:26:50:da:2e:
                    3d:7c:fc:8f:8c:ae:74:2a:e0:19:b3:cf:42:24:23:
                    b2:75:b1:d4:c3:54:f1:c1:2d:4d:0c:66:36:4d:e5:
                    0f:24:d0:b3:da:38:14:ea:bf:53:8f:eb:aa:c5:8d:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DC:29:E3:30:C2:2F:7E:A7:D8:A0:65:C4:48:4F:59:C5:57:06:44
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.141.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33196

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:36:34:f8:d6:31:67:44:58:3d:6b:5e:44:b1:d8:cd:de:f7:
         f5:a1:ed:d8:80:ff:72:93:f2:c0:af:00:f9:85:76:cc:ff:ce:
         55:d0:0f:fb:d5:e1:aa:54:15:3f:c5:bb:16:a9:57:af:67:2e:
         c7:5b:b0:4d:ea:c6:0e:45:b7:0e:6b:51:f2:da:fa:33:13:d6:
         31:31:ab:ee:65:82:f0:3e:65:6b:48:91:c8:de:50:79:f8:42:
         d3:95:5c:04:09:94:91:80:9b:c2:05:19:13:47:14:08:38:0d:
         30:4d:ef:a5:69:16:80:d0:91:cb:4e:b4:e5:38:ef:fd:93:a6:
         0c:27:98:48:9c:fc:fc:f3:be:45:3f:12:e2:fd:cb:b5:27:63:
         5f:c8:ab:b7:fe:8f:bd:4d:80:67:13:82:f2:b4:32:27:ae:50:
         bf:31:15:ed:1a:b6:2d:b1:1d:48:0c:1f:51:b5:d3:e9:2f:98:
         45:07:c6:50:8d:5c:71:ab:59:fb:28:c8:14:4f:48:5e:7d:24:
         3b:45:03:24:9c:7e:61:0e:05:07:23:b2:f8:2a:e9:b4:ee:cb:
         e9:ef:82:e1:60:9c:04:1a:69:e3:5e:74:cb:d2:44:2e:9a:87:
         60:9d:9a:0f:5a:a6:a9:25:fb:08:52:62:88:6f:69:c6:1a:22:
         2f:b4:e5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----