Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9.cer
File:                     98cbd190-fbfe-49f7-b5c6-bda1299a2fe9.cer (raw, json)
Hash identifier:          KY7TGbY/RptaiiJgPYd43z+E+Rafw2l5AFyZlTuK0lc=
Subject key identifier:   4A:2F:77:A9:0C:19:FF:14:A3:3F:35:73:3C:C6:DF:F5:9D:7C:16:76
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858453E3B21C8091A97579619226E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 18 Mar 2024 00:45:19 +0000
Certificate not after:    Sun 21 Jun 2026 00:45:19 +0000
Subordinate resources:    AS: 20209
                          IP: 209.73.32.0/19
                          IP: 209.81.64.0/19
                          IP: 2605:4800::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:3b:21:c8:09:1a:97:57:96:19:22:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Mar 18 00:45:19 2024 GMT
            Not After : Jun 21 00:45:19 2026 GMT
        Subject: CN=98cbd190-fbfe-49f7-b5c6-bda1299a2fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:5b:e8:f8:fd:8e:59:57:16:a6:f9:6c:2c:
                    55:00:23:9a:80:25:ff:92:98:fe:7d:b5:41:a4:ee:
                    a9:31:7f:80:18:96:b6:9e:17:50:13:c7:74:7f:0d:
                    a8:3b:f7:42:75:9e:1e:bf:b3:3a:0d:49:23:c2:b8:
                    8e:17:33:6a:b7:92:2e:8d:82:85:7e:1c:3f:3f:a4:
                    2b:1d:59:b9:ec:f5:45:8c:00:fa:e7:0f:59:db:af:
                    69:eb:50:5e:f4:5a:f2:eb:f7:28:53:f0:f1:8a:70:
                    78:8d:c0:ae:58:6f:26:d9:44:42:87:b0:d8:fe:82:
                    a8:ac:94:a1:7f:04:80:ab:2c:79:e3:e3:44:5c:e6:
                    1d:2c:da:dd:5f:40:30:13:c9:45:6a:b4:bb:80:38:
                    3e:6d:1b:df:68:39:18:dd:04:b0:dc:95:50:18:38:
                    88:45:90:0e:30:1e:dd:c6:2b:ea:b8:7f:05:74:3f:
                    ac:d5:76:db:0e:4e:6b:7a:17:7c:87:88:b1:31:43:
                    ba:09:64:5c:36:a9:d5:65:8e:83:c6:22:9b:3a:e0:
                    c4:b9:41:31:7b:11:49:14:f8:19:0f:b8:6b:a1:58:
                    08:6d:1c:37:c3:2b:59:bc:d0:d8:41:72:7a:36:a0:
                    c7:a0:91:99:9b:be:bf:69:98:6f:7f:4d:92:95:75:
                    6f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2F:77:A9:0C:19:FF:14:A3:3F:35:73:3C:C6:DF:F5:9D:7C:16:76
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9/98cbd190-fbfe-49f7-b5c6-bda1299a2fe9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.73.32.0/19
                  209.81.64.0/19
                IPv6:
                  2605:4800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20209

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:6a:8d:79:e7:c7:eb:23:65:c2:9d:74:45:f3:38:13:80:2d:
         cd:26:29:ac:ab:6c:5f:67:14:bd:61:de:e2:80:99:be:b2:53:
         bd:f9:c5:06:7d:2c:70:7b:7d:f0:d2:61:21:90:df:63:c4:76:
         57:7b:50:b9:16:ee:1b:e3:52:3e:df:0b:6a:f2:eb:99:7e:dd:
         3e:e4:03:7a:ba:a5:bc:a4:72:c9:d6:4b:ff:83:7d:16:0e:44:
         c3:52:ca:35:6b:5b:42:42:46:d0:2c:3c:fc:d1:35:10:7a:d6:
         89:98:f1:d7:dd:c1:50:61:fb:ad:7c:9c:d1:77:97:85:62:7c:
         ce:ba:fb:d2:e4:21:49:f4:37:e2:ce:56:5f:a4:9e:f7:86:a5:
         fe:0e:ba:df:19:c8:f0:d9:58:bf:00:70:71:d7:1b:c1:b5:a7:
         ff:9a:a4:dd:90:68:82:13:5c:d6:6a:6d:03:e4:3f:c8:d5:4d:
         72:f4:3f:21:1d:05:49:54:67:36:b4:27:c8:83:9f:c1:61:2c:
         ce:32:73:03:54:00:b5:85:b9:f5:7e:d0:9f:ff:d6:1e:82:97:
         0c:5f:a9:8e:5b:19:b2:d4:bd:00:17:28:2c:12:1c:e9:ad:52:
         e8:56:88:82:fd:ff:76:74:f6:bd:e1:1f:81:42:7e:75:a1:d0:
         b6:9b:e8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----