Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer
File:                     2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer (raw, json)
Hash identifier:          ljH6sStzpMd5gxL0RpDXUF3HnBgWo22a0K8NAomGmCo=
Subject key identifier:   9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584835B31551A002F68869817420
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 15 Dec 2024 01:45:33 +0000
Certificate not after:    Sat 20 Mar 2027 00:45:33 +0000
Subordinate resources:    AS: 23483
                          IP: 66.244.0.0/18
                          IP: 2602:fd01::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jan 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:b3:15:51:a0:02:f6:88:69:81:74:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Dec 15 01:45:33 2024 GMT
            Not After : Mar 20 00:45:33 2027 GMT
        Subject: CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fe:8f:0f:1c:f8:65:b2:b9:a7:f2:51:77:43:
                    32:3e:a0:25:8f:51:8f:33:e1:52:28:6d:ee:de:ea:
                    6d:8d:b4:a1:34:70:0e:cf:fb:a3:79:8b:f2:3a:a4:
                    dd:fd:4f:dc:38:b7:e9:f3:e1:eb:48:9a:e7:fa:84:
                    fa:be:79:fa:ed:7e:19:b5:e0:61:06:8d:0b:9b:3a:
                    4c:08:fe:0b:52:cd:64:ae:cb:de:61:ce:c3:1e:50:
                    7e:65:ab:4f:49:cf:da:79:8a:78:01:b4:f3:31:9a:
                    a9:15:ee:f9:7c:93:50:3d:9b:b8:60:56:6d:bd:14:
                    99:66:22:c9:c7:5b:03:2b:1b:65:49:26:a1:46:8c:
                    d7:bc:a6:64:b1:08:d0:46:63:19:b4:5f:2a:bf:9e:
                    38:35:92:ea:85:61:b7:e3:da:0d:b7:8a:32:c0:ac:
                    e5:27:d6:23:e5:38:b3:02:b7:a0:86:16:4d:73:f5:
                    a6:ed:38:3d:f8:87:bf:e3:96:90:0a:c8:07:3c:56:
                    c5:9b:98:7b:3b:0d:1d:ec:cf:13:a3:5e:4c:06:fa:
                    41:fb:db:02:12:84:be:cb:05:81:5d:99:bb:9b:48:
                    b6:51:81:79:69:7d:4c:e2:dd:4f:04:3c:f5:e0:be:
                    d1:5f:13:0e:f8:d2:e8:03:84:a9:91:d3:88:17:16:
                    58:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.244.0.0/18
                IPv6:
                  2602:fd01::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23483

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:bd:8a:66:9a:7d:ba:6c:9d:75:b1:cd:1d:7b:2c:4d:c0:33:
         34:44:82:8c:20:f3:88:4e:0e:61:12:81:00:fb:2b:d2:ea:43:
         cb:bf:7c:b9:e9:c5:0b:9a:0d:d1:3f:b0:4f:7c:86:af:19:26:
         a6:e2:58:82:9b:b4:10:27:47:c7:2d:26:42:89:61:bb:2a:9c:
         50:74:87:d5:1b:9a:a6:24:7e:09:5a:91:2d:c3:c1:4f:f8:0d:
         fd:30:83:ea:8c:36:ed:3a:33:83:e5:9e:ea:80:5f:6b:ff:81:
         d9:b7:4b:bf:a3:61:ba:57:39:4e:90:4e:76:39:cf:16:1f:99:
         b6:ca:33:31:b8:ff:f3:30:7d:9b:6f:51:63:7b:03:a6:fc:b2:
         7c:f9:9a:1a:c2:9d:e5:98:82:f1:92:e8:d2:49:49:9b:46:d9:
         aa:c2:96:57:f1:19:7a:51:6d:1d:fe:0c:cd:ce:fb:37:9d:60:
         78:0b:43:b9:9c:76:58:2f:71:60:ff:12:b5:97:79:bc:b5:67:
         27:92:33:74:cc:23:cd:2d:35:71:bc:5f:d4:92:61:e3:2d:47:
         d6:b6:fa:61:b3:79:ea:de:dd:67:35:31:0c:d0:ea:35:82:54:
         c7:4c:01:14:be:26:23:a5:46:34:95:16:97:16:d6:81:4b:88:
         64:26:06:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----