Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9f82e01-1002-419a-bb0c-56dcef6c9309.cer
File:                     b9f82e01-1002-419a-bb0c-56dcef6c9309.cer (raw, json)
Hash identifier:          cDSzXMBMDtlu0vaxSoOCWl29OSGjuDgw9dR+GONyfFM=
Subject key identifier:   B1:98:91:A4:80:DC:3E:DE:61:99:DE:CD:6B:1D:7C:20:78:9F:EB:C4
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285845979104E5038719641B02D380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9f82e01-1002-419a-bb0c-56dcef6c9309/b9f82e01-1002-419a-bb0c-56dcef6c9309.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9f82e01-1002-419a-bb0c-56dcef6c9309/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 19 Apr 2024 00:45:20 +0000
Certificate not after:    Thu 23 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 22626
                          IP: 199.193.138.0/24
                          IP: 2602:fc70::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:91:04:e5:03:87:19:64:1b:02:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Apr 19 00:45:20 2024 GMT
            Not After : Jul 23 00:45:20 2026 GMT
        Subject: CN=b9f82e01-1002-419a-bb0c-56dcef6c9309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:97:c9:b4:ca:bd:02:59:0f:a3:e6:c8:80:
                    a0:3c:84:f1:80:08:1d:03:49:a9:6e:42:79:e0:26:
                    74:0f:55:e2:d2:1d:58:37:c7:7e:f9:ea:05:e0:6d:
                    75:a3:6e:f5:e0:96:f7:05:cb:53:d8:e7:22:ca:b5:
                    6d:fe:84:90:e2:e4:70:7d:45:74:4b:7c:b0:b8:8c:
                    55:f7:8b:38:8c:09:46:b0:f6:c1:07:a2:7a:5e:01:
                    b4:e2:ce:a0:2f:f6:32:20:de:a0:ed:41:e8:2d:79:
                    64:f9:1f:a4:1e:7e:f5:16:21:98:14:26:e5:67:98:
                    73:8c:98:0e:94:04:1d:43:42:3b:88:3c:23:65:d7:
                    1c:ad:c6:87:52:53:c3:0c:fc:8e:7b:a1:d0:1d:af:
                    88:d0:4f:a0:36:84:b1:1b:03:4f:62:c4:1f:db:c7:
                    f2:42:9b:85:7d:fb:eb:95:b6:14:a6:23:a6:c3:b9:
                    07:5f:c0:fc:a2:10:39:44:33:b1:17:69:e7:0e:e2:
                    8d:3a:10:6a:fb:e5:66:1c:aa:91:82:e3:77:bc:9e:
                    5d:be:09:a8:13:bd:0b:e5:f3:83:d5:1e:bd:87:c2:
                    58:6f:21:cd:4b:b7:68:d5:9d:dc:f8:15:ba:61:b2:
                    61:08:e4:e1:a7:c3:13:84:6b:15:eb:cc:21:b7:c2:
                    13:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:98:91:A4:80:DC:3E:DE:61:99:DE:CD:6B:1D:7C:20:78:9F:EB:C4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9f82e01-1002-419a-bb0c-56dcef6c9309/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9f82e01-1002-419a-bb0c-56dcef6c9309/b9f82e01-1002-419a-bb0c-56dcef6c9309.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.138.0/24
                IPv6:
                  2602:fc70::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22626

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:ac:19:f2:05:a1:eb:9f:83:ec:0f:16:38:bc:a3:e5:a1:06:
         84:76:5e:9c:d3:41:fb:85:80:cc:e7:8d:35:79:37:42:f4:34:
         48:cb:81:13:f1:7d:b1:9c:83:98:6b:f1:25:9f:f2:23:4e:9c:
         f7:7b:83:d7:87:06:6c:f6:65:89:4a:a3:84:ac:83:86:d6:b3:
         13:5f:70:fa:e6:df:43:29:f3:c6:e0:3c:23:4f:0e:dc:63:3d:
         60:59:6e:99:87:95:33:c0:88:8b:a2:7c:22:24:3b:e5:fd:2b:
         85:65:f4:9b:db:89:4f:46:2b:5c:fb:7d:58:ea:13:c7:a3:ac:
         cc:3c:fa:50:e2:9e:8a:36:6e:dc:7e:9e:4e:ec:6c:a5:a3:31:
         66:89:5d:16:bc:61:72:54:c5:e9:b3:d1:e6:7e:36:de:21:2c:
         c4:85:34:c8:d9:4b:bb:d1:be:c1:d5:38:ee:d4:f0:af:8e:09:
         e1:88:d1:d7:b8:16:ab:5e:db:b4:e6:dc:9f:28:22:fd:6f:be:
         b5:94:ea:11:21:ac:ff:56:cd:50:bc:06:05:ca:32:ab:5e:36:
         3b:08:dd:5a:26:31:44:a3:94:8b:3b:51:0b:59:70:7e:93:41:
         0b:cb:ae:9d:5a:bd:39:b9:f6:2a:2d:31:1b:02:b4:78:34:12:
         83:a7:a7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----