Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
File:                     d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer (raw, json)
Hash identifier:          uVoaW1OwSBc/rMxR+BlfrSoQGTyy3XgpWiUevIGnfl4=
Subject key identifier:   64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Authority key identifier: 62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64
Certificate issuer:       /CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
Certificate serial:       010D0C9F43285847FEFB6C9EE5FDA1D32AC41260
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 25 Nov 2024 11:21:52 +0000
Certificate not after:    Sun 28 Feb 2027 11:21:52 +0000
Subordinate resources:    AS: inherit
                          IP: inherit
                          IP: inherit

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fe:fb:6c:9e:e5:fd:a1:d3:2a:c4:12:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
        Validity
            Not Before: Nov 25 11:21:52 2024 GMT
            Not After : Feb 28 11:21:52 2027 GMT
        Subject: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:c3:a7:ab:85:4f:80:e1:5d:20:d4:a7:ab:
                    05:33:a1:17:4f:13:25:30:49:bf:2e:c1:f5:00:cc:
                    f6:60:4f:e7:c3:01:ec:30:75:ea:fd:f1:31:95:0e:
                    40:3e:9d:06:d4:00:9a:3e:47:c3:3c:e2:3d:30:c4:
                    c7:14:6d:01:f1:77:36:b3:f6:29:dd:62:10:d1:8e:
                    02:95:b0:d3:bc:e2:1b:56:05:2b:42:bc:cc:8e:3b:
                    2f:61:9d:06:28:04:0d:8d:8f:2c:a8:53:a6:4b:4a:
                    29:3b:3b:06:75:8a:9a:e4:dd:83:2b:7d:24:f0:9c:
                    cb:ec:e2:db:39:e7:de:bc:62:76:ed:f9:37:af:b0:
                    62:3b:58:cb:24:18:99:a2:2b:eb:01:5e:59:73:4f:
                    96:ba:0a:23:26:26:07:57:cb:2a:8e:04:7d:4d:aa:
                    62:d0:d1:3c:06:ac:2d:aa:68:d6:8f:c9:fd:9d:09:
                    93:ef:dc:97:6a:56:9d:24:e8:48:39:98:65:8c:4f:
                    3e:82:35:dc:60:3e:78:d3:9a:3c:f8:8d:d0:14:28:
                    b1:f0:7a:f1:29:e3:84:68:f9:f7:77:76:fc:25:5f:
                    df:ea:f3:61:47:58:2b:e2:73:cd:81:cd:03:22:87:
                    43:e2:a7:66:af:03:6f:56:93:ac:c2:b1:c8:ab:fa:
                    5a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl

            X509v3 Authority Key Identifier:
                keyid:62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:0b:0f:b1:ef:0a:e9:de:3f:85:a8:c9:6e:5f:08:8f:6e:75:
         ca:b8:74:f5:f7:8b:3e:11:0e:14:8c:27:04:3b:a6:72:f2:c9:
         ef:d1:1d:17:3e:44:8e:a7:38:a1:92:8e:81:26:c9:72:ef:2f:
         e6:d6:19:d7:f0:00:18:03:97:00:ee:3b:f2:de:ad:22:7c:3a:
         56:f7:8b:2e:3e:b8:73:d6:61:17:38:31:dd:a6:72:32:6e:c9:
         71:27:95:61:d5:76:7d:ce:6c:d9:39:20:24:fd:cf:fa:5c:bb:
         55:05:32:11:52:b9:10:2b:49:df:b8:aa:17:16:8e:1b:41:50:
         5e:23:6a:e8:28:36:d1:55:ac:b7:c9:aa:5a:a9:04:f9:0b:fd:
         3b:4f:89:24:44:c4:ce:57:d7:04:3c:54:83:11:ac:c1:b2:bc:
         2f:c9:a7:0a:f6:b2:44:37:eb:17:92:a2:04:1c:e3:cd:b5:f0:
         54:c5:5b:d5:43:55:90:b1:32:8c:94:3d:6d:66:43:2f:66:1c:
         79:72:ea:75:b3:b3:9d:62:eb:a7:8a:c4:32:8d:38:78:d2:41:
         f3:01:07:36:f6:04:54:a6:c7:97:3d:fa:b8:1c:db:66:0d:d7:
         46:d0:6f:9e:22:41:46:60:b2:35:fc:55:27:6e:f4:7e:a6:af:
         bd:02:12:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 07:05:41 2024 by rpki-client on console-ams.rpki-client.org