Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9.cer
File:                     929275f0-3197-4a70-8b27-8fff75b6e7b9.cer (raw, json)
Hash identifier:          fS4IOiJ39mW9mfWMF925ebO9wwPGxXD/aHKqr5B6zJs=
Subject key identifier:   BB:02:D1:44:F5:91:AC:6D:DC:A7:01:E4:B5:05:4A:6D:69:25:47:53
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285847EF75412A4809D9416C49BE70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/929275f0-3197-4a70-8b27-8fff75b6e7b9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 19 Nov 2024 21:54:24 +0000
Certificate not after:    Wed 21 Jan 2026 01:45:15 +0000
Subordinate resources:    AS: 400674
                          IP: 69.173.240.0/20
                          IP: 2606:ccc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:75:41:2a:48:09:d9:41:6c:49:be:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Nov 19 21:54:24 2024 GMT
            Not After : Jan 21 01:45:15 2026 GMT
        Subject: CN=929275f0-3197-4a70-8b27-8fff75b6e7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:f9:af:0f:eb:2f:5f:b5:74:6d:a4:83:2f:
                    60:0c:98:91:08:f4:07:58:04:b1:6b:f4:a7:12:4d:
                    69:b2:86:a3:65:db:b1:ed:34:30:39:d3:e4:66:15:
                    5d:3b:1c:8b:53:1b:01:97:7a:a5:9d:c7:62:66:7e:
                    b2:df:1c:6c:7a:e1:33:d5:2d:53:a2:58:d0:9d:cd:
                    2d:b1:af:f8:82:16:c5:8e:b3:82:ab:6b:8a:e9:0f:
                    4e:50:57:9d:ee:9b:e3:91:6d:8e:60:16:62:0c:c1:
                    24:11:8c:d7:91:2e:ea:9d:32:39:55:7c:0b:47:19:
                    71:6a:07:d9:78:70:eb:b0:da:7a:1d:e1:4f:66:c0:
                    bb:af:98:5e:92:8b:48:e9:e0:ee:3e:a4:0b:b1:01:
                    05:fc:78:27:db:d4:ae:b0:90:30:57:67:0f:03:7f:
                    83:23:e8:88:61:1c:85:42:1b:6e:40:17:f6:27:b4:
                    b8:ef:a1:07:06:55:06:c5:04:4d:66:b3:7d:85:6c:
                    4a:61:31:ca:9a:e1:05:28:e7:90:52:6a:a0:fc:54:
                    38:f4:78:af:72:6a:69:13:9f:b1:0d:8f:24:da:59:
                    ef:a5:5a:53:58:3d:f0:f1:a2:9f:ff:b7:1e:e5:59:
                    6d:8f:18:ba:08:7b:43:9f:95:09:87:2b:8a:2c:13:
                    a8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:02:D1:44:F5:91:AC:6D:DC:A7:01:E4:B5:05:4A:6D:69:25:47:53
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/929275f0-3197-4a70-8b27-8fff75b6e7b9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.173.240.0/20
                IPv6:
                  2606:ccc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400674

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:4b:73:5c:38:cb:db:b9:a2:46:23:ea:53:73:93:32:85:be:
         e9:20:b3:6f:a7:38:bd:7e:c8:c8:4a:2e:0f:79:1e:f0:dd:0b:
         2b:80:f0:c0:4f:8b:c8:e9:33:69:e6:8e:09:b2:20:c5:06:c4:
         a3:a1:9e:1e:09:95:db:d9:36:b9:fb:98:e5:d8:4d:cf:72:d2:
         ce:6e:1d:6e:71:1c:72:a0:86:3e:90:5f:4e:12:9f:ef:df:1e:
         49:3e:42:a4:9d:18:52:1c:22:3a:ba:96:c6:67:8a:14:0b:79:
         ea:18:e2:57:44:12:9a:86:08:17:d0:28:47:6e:99:e8:d6:2f:
         23:46:5f:e0:63:fb:d3:b4:ca:8e:6b:b3:6a:11:7f:f0:19:14:
         b7:19:90:7f:82:aa:16:3e:ef:7f:eb:2f:0b:21:34:9b:e0:0b:
         bf:f7:0d:19:2f:ed:47:0b:88:d7:97:e0:08:54:5e:90:0b:c0:
         f3:40:d5:c5:4b:eb:e2:46:6b:89:14:2a:4b:9f:62:36:7c:4b:
         b0:c4:08:9e:eb:77:d7:da:4f:35:ce:7c:ff:ae:9d:d6:59:71:
         7d:e1:2d:f7:19:52:b5:38:18:88:08:42:da:c1:8a:1f:a8:8f:
         bc:ee:64:72:62:60:a8:dc:4d:0c:fa:3d:45:2f:bb:55:09:56:
         9f:0d:05:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----