Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9a163438-9912-46b2-b636-7a9fec340e28.cer
File:                     9a163438-9912-46b2-b636-7a9fec340e28.cer (raw, json)
Hash identifier:          n7S3pRtdbppxpz0bgNwmgrvs/fmF9IgqhOxL1UHhPW4=
Subject key identifier:   1F:A8:32:61:C1:23:F0:AC:CB:89:AE:04:03:AD:68:DE:08:CC:DD:59
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858475373D6FD387F66C626AB57E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9a163438-9912-46b2-b636-7a9fec340e28/9a163438-9912-46b2-b636-7a9fec340e28.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9a163438-9912-46b2-b636-7a9fec340e28/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 25 Sep 2024 00:45:26 +0000
Certificate not after:    Tue 29 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 11961

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:73:d6:fd:38:7f:66:c6:26:ab:57:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Sep 25 00:45:26 2024 GMT
            Not After : Dec 29 01:45:26 2026 GMT
        Subject: CN=9a163438-9912-46b2-b636-7a9fec340e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:05:7f:0d:98:9a:49:1b:e4:65:c9:2a:f6:2b:
                    72:75:57:60:be:59:17:be:5f:79:dd:1f:45:d4:54:
                    78:d6:f2:d2:43:ee:73:74:d0:0c:79:53:de:3f:14:
                    2f:d0:ab:b9:03:5b:a2:0e:c2:0c:1a:7a:ca:94:82:
                    48:af:90:dc:81:bd:69:32:58:2c:0f:5e:b2:fa:2e:
                    4a:89:bf:7a:17:85:2b:6d:32:e0:c5:c0:c1:ed:27:
                    4d:2a:f3:2d:a9:3e:99:88:18:7a:7b:60:01:82:88:
                    b2:8b:83:03:5b:75:54:3e:1b:cf:a7:5e:4b:b2:62:
                    81:3a:0b:ef:1f:65:9f:f7:8d:5f:a7:8b:05:4e:29:
                    fa:15:16:61:23:14:3c:9b:98:aa:63:fd:44:1a:2c:
                    7e:5b:6e:fc:65:49:6e:68:2f:0f:a3:bc:87:8a:68:
                    1f:bd:17:0f:69:e9:cf:34:b5:0e:f5:64:17:d8:bc:
                    e7:92:d3:35:ac:05:d9:bd:93:0b:91:eb:54:b7:a8:
                    bf:70:76:0f:64:33:51:02:85:79:32:1d:86:e3:a0:
                    25:b7:f7:f9:ca:33:2a:7a:f4:e0:ff:16:23:96:37:
                    33:3e:1b:db:bf:b4:cd:23:3d:a9:c9:0e:39:2e:b3:
                    3f:4c:32:17:c4:4c:4f:5d:93:f6:8f:5c:24:57:81:
                    20:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A8:32:61:C1:23:F0:AC:CB:89:AE:04:03:AD:68:DE:08:CC:DD:59
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9a163438-9912-46b2-b636-7a9fec340e28/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9a163438-9912-46b2-b636-7a9fec340e28/9a163438-9912-46b2-b636-7a9fec340e28.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11961

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:46:e9:73:50:eb:a1:18:5b:b9:5f:2e:4f:e1:e4:75:99:03:
         ce:84:c2:0e:95:fb:30:db:e2:3e:64:8f:ca:45:32:3c:99:4c:
         77:5e:d2:eb:b6:4d:ab:14:13:39:ff:58:e4:7d:c3:af:b0:79:
         4a:1e:eb:e9:c9:08:f3:fe:25:8b:e2:ef:fd:67:8b:6d:12:96:
         17:b7:3f:64:5c:1c:a4:f8:8e:91:56:1a:f3:a4:a3:35:f8:06:
         ea:77:07:7c:a3:d1:e2:49:ab:91:70:2e:b9:5f:5a:ee:5a:9f:
         02:af:77:55:8b:f4:e8:48:ba:a9:21:6e:a0:18:64:70:8f:b1:
         7a:b7:c7:38:aa:b7:84:39:e8:57:b7:17:71:0e:82:0b:04:c0:
         e0:e5:8d:44:1c:ef:61:3a:a4:a3:21:22:30:2d:b4:bd:c2:79:
         b4:83:ba:0b:d1:39:79:65:a4:a9:d1:3a:a2:57:1b:35:b4:84:
         0b:59:21:ec:da:66:1e:a2:8a:93:36:86:a6:a6:35:e8:75:e8:
         57:87:31:ca:35:79:18:97:25:06:0e:28:50:80:aa:b4:db:66:
         f7:c5:5d:d0:36:79:9c:14:62:8c:0b:41:c9:38:c3:b8:39:59:
         91:d7:aa:c4:1b:b4:a5:e8:fa:6f:32:87:bb:d4:c9:9a:f1:99:
         d6:c9:9e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----