Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94019ed7-a021-4ba3-aad1-8f66a5df2d5b.cer
File:                     94019ed7-a021-4ba3-aad1-8f66a5df2d5b.cer (raw, json)
Hash identifier:          Jp97Fu/DInB4jGAPMrxIT4v1u2E5ZO64OTlTyS2LhOQ=
Subject key identifier:   B2:09:EF:3C:F2:94:89:59:5D:D8:7B:DC:66:7C:0A:B8:38:75:D1:57
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858478204BDD32B253DCF42E3FA80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94019ed7-a021-4ba3-aad1-8f66a5df2d5b/94019ed7-a021-4ba3-aad1-8f66a5df2d5b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94019ed7-a021-4ba3-aad1-8f66a5df2d5b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 11 Oct 2024 17:04:35 +0000
Certificate not after:    Thu 14 Jan 2027 18:04:35 +0000
Subordinate resources:    AS: 54257

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:04:bd:d3:2b:25:3d:cf:42:e3:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Oct 11 17:04:35 2024 GMT
            Not After : Jan 14 18:04:35 2027 GMT
        Subject: CN=94019ed7-a021-4ba3-aad1-8f66a5df2d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:36:56:4a:51:95:b0:47:82:27:47:22:3f:
                    64:e6:e9:df:42:75:71:d4:dd:0e:96:13:0f:8c:f7:
                    59:07:f3:c9:68:36:92:65:cd:3c:44:41:25:71:ac:
                    c9:2d:59:8b:ab:69:19:79:39:60:0c:37:4d:e6:c0:
                    8a:17:ce:78:ad:fc:ba:2b:4a:2f:8a:b5:86:74:f2:
                    b7:d5:0e:3b:e8:fd:79:c2:38:be:12:29:70:4c:3c:
                    ce:7a:f1:0f:0e:af:25:eb:5f:95:50:ef:b8:93:2b:
                    ae:58:53:3b:8c:24:14:94:9e:8b:85:af:47:5e:0a:
                    ac:11:c5:83:b7:1b:63:2b:9b:f0:e3:1c:c2:4b:dd:
                    b7:24:af:c2:7e:2b:30:de:a9:4f:63:08:fc:e9:28:
                    41:2e:55:03:34:e6:45:50:be:a8:67:35:07:89:1c:
                    56:93:d9:f3:28:8b:53:36:7e:ba:58:88:1c:4d:a5:
                    5b:28:2e:ee:40:1b:03:78:76:24:6a:81:38:54:3b:
                    24:a8:2d:1e:bc:df:e9:09:9a:6e:f6:67:87:57:70:
                    40:da:c0:96:13:ae:12:e8:73:7a:e9:16:61:a7:57:
                    3c:12:53:d9:ba:29:c8:9c:67:17:5b:3d:5f:42:a3:
                    35:56:09:1d:47:d3:07:45:1d:59:a5:e9:35:c4:4d:
                    6d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:09:EF:3C:F2:94:89:59:5D:D8:7B:DC:66:7C:0A:B8:38:75:D1:57
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94019ed7-a021-4ba3-aad1-8f66a5df2d5b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94019ed7-a021-4ba3-aad1-8f66a5df2d5b/94019ed7-a021-4ba3-aad1-8f66a5df2d5b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54257

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c4:8a:e5:11:c4:47:dc:bc:0e:5f:27:ae:99:dd:75:63:6d:
         fb:a0:e2:14:ae:1c:15:f5:b5:df:ef:7c:b0:99:c6:2c:5b:f0:
         f3:cd:96:53:c6:8a:a6:52:be:46:d3:9a:f2:f7:4d:17:98:fc:
         70:0f:54:8a:e9:d2:55:4e:7d:ed:f3:a7:4e:d1:1c:3f:75:7a:
         f9:ba:f1:67:2f:97:5c:0f:1a:67:3c:fc:17:16:e5:52:71:51:
         e4:36:da:28:74:f2:fc:40:c1:08:86:13:2a:c1:c0:92:38:3f:
         4a:4c:82:98:55:6d:7b:0e:78:7e:15:28:21:db:71:49:96:73:
         b2:1a:ac:0c:6d:17:36:8d:96:c8:71:d2:1c:e4:f6:0d:e1:3d:
         e9:bc:9d:9b:32:2a:18:37:eb:f6:bd:46:d2:c0:15:1c:90:89:
         c2:9f:5d:c1:68:c6:28:e4:29:2d:04:98:33:06:cd:b8:e7:9d:
         4c:f2:00:ad:69:e9:ac:24:68:f2:81:03:dd:66:a1:17:02:ed:
         cd:4d:a0:b4:f5:85:f9:fe:30:83:d9:6c:db:74:dc:43:56:fa:
         e6:d9:26:dd:01:70:e6:ae:73:70:0b:a3:5b:a2:30:b4:84:b5:
         4a:e5:b5:c2:7f:70:11:51:9f:37:3b:27:20:3c:e9:32:1a:18:
         1d:56:52:c3
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEeCBL3TKyU9z0Lj+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTI0MTAxMTE3MDQzNVoXDTI3MDExNDE4MDQzNVowLzEtMCsGA1UEAxMk
OTQwMTllZDctYTAyMS00YmEzLWFhZDEtOGY2NmE1ZGYyZDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEo2VkpRlbBHgidHIj9k5unfQnVx1N0OlhMP
jPdZB/PJaDaSZc08REElcazJLVmLq2kZeTlgDDdN5sCKF854rfy6K0ovirWGdPK3
1Q476P15wji+EilwTDzOevEPDq8l61+VUO+4kyuuWFM7jCQUlJ6Lha9HXgqsEcWD
txtjK5vw4xzCS923JK/Cfisw3qlPYwj86ShBLlUDNOZFUL6oZzUHiRxWk9nzKItT
Nn66WIgcTaVbKC7uQBsDeHYkaoE4VDskqC0evN/pCZpu9meHV3BA2sCWE64S6HN6
6RZhp1c8ElPZuinInGcXWz1fQqM1VgkdR9MHRR1Zpek1xE1tSwIDAQABo4ID+jCC
A/YwHQYDVR0OBBYEFLIJ7zzylIlZXdh73GZ8Crg4ddFXMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85
NDAxOWVkNy1hMDIxLTRiYTMtYWFkMS04ZjY2YTVkZjJkNWIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzk0MDE5ZWQ3LWEwMjEtNGJhMy1h
YWQxLThmNjZhNWRmMmQ1Yi85NDAxOWVkNy1hMDIxLTRiYTMtYWFkMS04ZjY2YTVk
ZjJkNWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDANPxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGzEiuURxEfcvA5fJ66Z3XVjbfug
4hSuHBX1td/vfLCZxixb8PPNllPGiqZSvkbTmvL3TReY/HAPVIrp0lVOfe3zp07R
HD91evm68Wcvl1wPGmc8/BcW5VJxUeQ22ih08vxAwQiGEyrBwJI4P0pMgphVbXsO
eH4VKCHbcUmWc7IarAxtFzaNlshx0hzk9g3hPem8nZsyKhg36/a9RtLAFRyQicKf
XcFoxijkKS0EmDMGzbjnnUzyAK1p6awkaPKBA91moRcC7c1NoLT1hfn+MIPZbNt0
3ENW+ubZJt0BcOauc3ALo1uiMLSEtUrltcJ/cBFRnzc7JyA86TIaGB1WUsM=
-----END CERTIFICATE-----