Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db50bc76-8345-4464-a992-23bbdfe1744e.cer
File:                     db50bc76-8345-4464-a992-23bbdfe1744e.cer (raw, json)
Hash identifier:          5dfUzrKrGJhup130TPnSNISjY+8o2OkglfmdQ0smMmQ=
Subject key identifier:   60:99:9B:8C:54:17:64:0C:99:04:D0:57:80:9F:E9:D9:0C:F8:D6:B1
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285845226E149965FA80BF75C16500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db50bc76-8345-4464-a992-23bbdfe1744e/db50bc76-8345-4464-a992-23bbdfe1744e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db50bc76-8345-4464-a992-23bbdfe1744e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 08 Mar 2024 01:45:21 +0000
Certificate not after:    Thu 11 Jun 2026 00:45:21 +0000
Subordinate resources:    AS: 32073

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:6e:14:99:65:fa:80:bf:75:c1:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Mar  8 01:45:21 2024 GMT
            Not After : Jun 11 00:45:21 2026 GMT
        Subject: CN=db50bc76-8345-4464-a992-23bbdfe1744e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6b:cf:7e:2f:75:bc:72:e6:3e:bb:d2:6f:fe:
                    1f:6c:1f:91:1d:f1:91:a4:fd:1e:03:48:84:4e:14:
                    6f:bd:fb:c5:84:3c:de:7b:5c:77:60:ff:c8:39:74:
                    76:9d:22:ee:07:c0:79:86:a9:ed:e9:d8:9c:97:a6:
                    17:80:f6:e6:77:be:d6:2f:71:eb:dc:85:8b:df:86:
                    81:4d:3e:7b:df:9d:77:e8:2e:da:22:a1:78:6c:a4:
                    51:c7:86:1c:64:84:4f:e7:6f:f8:a3:7f:e3:e1:fc:
                    b1:b2:b7:5f:34:99:a3:57:23:57:9e:0f:74:df:59:
                    69:19:78:0a:f6:f5:fc:ca:3c:8b:84:92:c3:7b:38:
                    b7:1d:a3:3e:24:4b:79:a6:3f:6a:f2:25:d3:56:1a:
                    a9:49:e7:cb:30:a1:cb:6e:7d:e1:0e:a4:5b:2b:f8:
                    10:66:83:6c:76:32:ac:d0:a6:24:73:ef:2f:1b:f1:
                    7a:13:1a:18:a0:93:cd:30:30:76:83:41:e9:7c:92:
                    84:52:8a:3e:e3:79:a0:cb:38:51:08:f6:71:53:74:
                    98:4e:42:ee:f7:39:21:7f:b4:04:8f:13:a9:c3:17:
                    22:22:64:b8:cb:86:e8:17:78:80:16:fe:c8:d0:94:
                    b1:05:6f:72:2f:bc:42:9a:20:0f:49:48:50:1d:f3:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:99:9B:8C:54:17:64:0C:99:04:D0:57:80:9F:E9:D9:0C:F8:D6:B1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db50bc76-8345-4464-a992-23bbdfe1744e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db50bc76-8345-4464-a992-23bbdfe1744e/db50bc76-8345-4464-a992-23bbdfe1744e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32073

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:dc:43:18:8b:7e:22:da:b3:8f:39:e6:d2:85:6d:4c:60:54:
         cc:68:a8:69:b4:80:53:ea:bd:3c:0a:5d:03:1a:b9:34:20:b5:
         41:85:e0:1e:d6:f5:24:77:46:19:b8:a8:8e:b1:cd:13:83:2f:
         06:9b:3e:92:30:3d:06:a1:c7:15:83:b2:fe:01:ae:fe:9a:60:
         78:71:24:f0:85:26:2a:13:1c:94:62:57:7b:55:b8:e3:7d:4e:
         6b:01:ec:58:9d:a0:6e:4b:c0:81:f2:39:f3:22:c7:3b:e0:e8:
         2e:6d:0b:59:d1:e8:68:ab:49:00:9c:e1:54:06:a8:a2:24:7d:
         5b:9d:ad:5d:89:b9:c8:5f:dc:28:8b:1c:9e:d3:8d:9a:f4:94:
         32:8e:5a:18:13:48:e1:f1:bd:14:15:dc:38:ba:5e:71:14:fa:
         47:e3:c4:4c:ca:f3:62:e3:9f:7c:19:67:a6:27:89:e9:16:79:
         9b:36:f2:9f:24:21:7a:d9:db:0a:29:ed:11:65:54:53:47:a2:
         a0:a0:5c:66:3d:c2:58:f7:a9:a0:c1:a5:aa:95:84:78:84:57:
         1a:1a:d6:c8:a5:9f:53:c0:de:52:07:5a:1f:29:bd:7e:98:02:
         17:52:06:41:42:20:51:06:00:ba:b9:c7:7b:22:b2:d7:5f:bb:
         0d:44:1c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----