Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83b44d82-6150-4c55-83fe-006b06acbca5.cer
File:                     83b44d82-6150-4c55-83fe-006b06acbca5.cer (raw, json)
Hash identifier:          RTnXRtMsBObej4d4nqTwJAZfSE5k/ehBU4QywAWMRdM=
Subject key identifier:   E4:4F:DE:11:58:32:C4:17:CB:61:0A:12:AA:2C:02:9A:A7:B6:A9:A4
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285846FFB3521716DBE91F5CF3E1B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83b44d82-6150-4c55-83fe-006b06acbca5/83b44d82-6150-4c55-83fe-006b06acbca5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83b44d82-6150-4c55-83fe-006b06acbca5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 26 Aug 2024 00:45:27 +0000
Certificate not after:    Sun 29 Nov 2026 01:45:27 +0000
Subordinate resources:    AS: 611

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ff:b3:52:17:16:db:e9:1f:5c:f3:e1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Aug 26 00:45:27 2024 GMT
            Not After : Nov 29 01:45:27 2026 GMT
        Subject: CN=83b44d82-6150-4c55-83fe-006b06acbca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:20:a6:1b:a4:37:b2:e0:69:26:49:fb:60:21:
                    87:24:55:86:e1:b3:ac:eb:cf:28:ee:c9:b4:00:2c:
                    6b:06:da:19:18:78:04:55:0f:7d:d1:68:97:a2:4c:
                    48:dc:9e:51:f7:f7:67:86:0f:91:b1:f8:f2:f5:be:
                    ac:c9:10:8d:12:e6:fd:e7:0b:d0:89:43:de:5a:99:
                    4b:b0:83:b4:cd:3f:a0:21:fb:ee:a3:77:e8:b5:27:
                    9d:e6:0e:30:be:35:fe:52:86:02:9a:04:d0:92:39:
                    54:7f:13:d5:84:45:0e:85:16:04:c8:3c:c3:f0:b0:
                    3b:28:c2:5c:a3:99:e1:74:17:fa:46:d7:d8:59:19:
                    ac:6d:62:0d:c4:19:50:77:63:57:15:91:48:4c:47:
                    bb:4e:3e:92:e6:27:ca:bd:28:e1:e1:15:a5:f4:dd:
                    02:09:aa:04:ea:84:02:e0:4e:eb:11:88:7e:c6:08:
                    cf:8a:49:24:f2:4c:d6:d0:18:66:ee:ca:87:89:85:
                    7f:b4:11:2b:5b:95:7d:ed:9b:31:1d:2c:f8:cc:0c:
                    6b:a0:7a:c6:71:dd:d8:05:80:56:6e:a1:1b:bb:68:
                    60:d3:2d:50:b1:6b:40:77:8f:6f:cf:d9:10:ee:90:
                    9c:38:8e:bb:90:73:08:64:fa:1c:a0:fb:fa:c5:eb:
                    2a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4F:DE:11:58:32:C4:17:CB:61:0A:12:AA:2C:02:9A:A7:B6:A9:A4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83b44d82-6150-4c55-83fe-006b06acbca5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83b44d82-6150-4c55-83fe-006b06acbca5/83b44d82-6150-4c55-83fe-006b06acbca5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  611

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:3c:1a:88:61:6c:2f:f7:ae:7d:8f:4f:c9:2c:11:9d:a1:74:
         62:58:09:68:cc:96:ee:46:c6:6c:2a:61:96:66:f0:2a:4d:01:
         5a:73:d6:9f:48:d9:10:19:9a:55:2a:b0:03:41:d5:a2:ef:2c:
         cf:ff:d5:73:d3:12:eb:71:e6:f3:cd:4e:41:05:a7:d1:4c:f6:
         04:e2:a1:d2:b7:2b:c0:c5:6d:62:33:77:fc:05:82:e2:74:8d:
         19:63:9e:f0:4a:31:b4:49:06:28:8a:a5:d7:3a:06:5f:2d:bd:
         f2:a6:6d:f9:23:0d:46:4e:62:21:1a:bb:c6:41:1c:b5:b3:24:
         09:d6:41:3d:c4:2c:d5:9d:fe:82:34:09:e6:40:f5:2f:f5:bb:
         16:d8:c9:68:ff:a2:96:e2:e4:46:c4:cd:22:89:c8:f4:9c:ed:
         df:73:c8:90:6d:27:af:a1:ab:6c:a3:9e:08:80:b5:3b:b3:7d:
         31:97:c9:cf:cb:86:d2:72:a0:05:e8:a9:b8:11:d3:0d:d5:ee:
         c6:f9:74:20:0e:ef:2f:1e:30:86:b8:44:31:28:af:d3:b1:bf:
         d0:ea:b9:b8:ae:91:d6:3f:28:e0:11:ed:1e:75:1f:86:39:75:
         e1:7b:d9:02:c3:98:91:96:59:f0:ca:9a:45:64:3d:26:6b:fc:
         97:85:ab:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----