Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer
File:                     22a89d78-807f-48bb-8913-4e15f4878bfb.cer (raw, json)
Hash identifier:          DGK+oTLEj+gxauQwBT47TH8Vy5Gq/vwUb1ha6xz5NXE=
Subject key identifier:   41:26:61:4E:B6:7D:B9:81:05:C1:90:B7:DD:5F:F9:0D:32:E4:20:23
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858474B13C9B1C7BDB29A13A1D640
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 22 Sep 2024 00:45:26 +0000
Certificate not after:    Sat 26 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 13786
                          IP: 207.135.208.0/21
                          IP: 2605:4a40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4b:13:c9:b1:c7:bd:b2:9a:13:a1:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Sep 22 00:45:26 2024 GMT
            Not After : Dec 26 01:45:26 2026 GMT
        Subject: CN=22a89d78-807f-48bb-8913-4e15f4878bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:be:c7:4a:ff:aa:68:61:a5:0f:c7:a9:19:
                    b5:45:ee:52:fb:14:f9:d0:40:ae:16:10:0e:fd:0d:
                    b5:aa:45:08:67:79:0b:55:c8:49:0c:28:72:d8:34:
                    54:08:20:13:3d:4e:1c:dd:e5:20:9e:82:b4:ff:bb:
                    51:aa:33:e2:f3:ef:4c:a0:28:a7:a3:c7:1f:b0:0e:
                    a4:2b:e4:10:0f:a6:2b:cf:a1:9b:b5:02:80:07:88:
                    36:1f:56:02:4d:32:f6:06:19:35:b2:f9:8f:87:19:
                    c3:6a:c5:2a:55:eb:4f:33:ac:c1:cd:81:95:b9:7f:
                    09:cb:01:9a:38:32:5c:8c:80:27:d0:1f:ef:ee:3a:
                    f7:9f:b1:57:91:b9:b2:82:90:1e:f9:7b:80:f0:7d:
                    8e:94:e9:f6:8b:b1:90:1d:72:19:91:ce:3d:1a:7d:
                    39:3b:2e:88:41:5e:74:af:a1:04:2d:0c:da:ee:94:
                    43:36:96:71:87:b3:9d:97:85:7a:ff:d3:29:88:e4:
                    34:59:37:f4:94:05:c3:c3:1c:15:31:c0:b9:67:69:
                    1b:55:cf:38:31:e1:9b:56:4f:9a:61:8d:0e:da:56:
                    e7:d7:a2:82:86:18:92:1b:3b:69:20:d9:ca:e8:e1:
                    a1:1a:05:40:f0:8f:c4:c9:8d:4d:13:f3:70:0a:3b:
                    66:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:26:61:4E:B6:7D:B9:81:05:C1:90:B7:DD:5F:F9:0D:32:E4:20:23
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.135.208.0/21
                IPv6:
                  2605:4a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13786

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:26:83:fa:db:ed:ce:23:43:3f:de:98:6b:b4:72:26:93:70:
         dd:3d:dc:ab:35:df:13:eb:af:dd:7c:0b:f8:cd:3d:ad:f2:fd:
         54:b7:53:26:a8:f6:57:65:7b:83:db:2f:e5:2b:9c:83:b4:d7:
         5a:a1:f9:c8:0d:b8:fa:0c:92:2f:6c:94:e3:d8:bd:23:cf:a0:
         c9:6b:f3:d9:2d:fe:ce:cf:5c:29:d4:9d:af:8f:8d:b1:14:1b:
         05:1e:48:a0:7f:26:1e:2e:88:48:a4:32:82:18:8a:34:49:79:
         0a:5d:ba:5c:21:74:3f:c8:82:d3:5c:f7:74:1a:3e:cd:7b:68:
         30:34:b8:26:f8:a6:be:b8:62:a3:45:b1:ea:02:0b:48:77:be:
         0f:57:e5:ff:2c:d1:8f:41:38:72:be:dc:c1:20:1d:ea:9b:8c:
         a4:0e:3f:03:52:b4:09:6e:89:85:ab:b9:52:64:22:2d:70:09:
         51:a8:de:79:98:cb:7e:cc:b4:1a:dd:58:b4:6b:13:f3:50:36:
         b7:a4:f3:63:f3:84:06:a1:50:14:d1:a8:5a:0a:b3:fd:ed:bb:
         ec:2f:90:01:fd:8e:af:fa:b5:47:eb:f8:72:78:b2:00:e0:94:
         03:94:19:3d:73:5b:b9:28:6f:44:c9:cf:a9:b8:da:8e:b2:c9:
         17:b8:4c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----