Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630.cer
File:                     411f75d5-7410-4ca6-b23e-146e3726e630.cer (raw, json)
Hash identifier:          EmdbQtEwRfI0ujQc0GUimKezQxESlIY4PgOUiVaI9XQ=
Subject key identifier:   C9:43:90:18:2C:34:67:5A:E2:72:BB:62:46:E2:66:16:1E:4D:64:CC
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285843E42C0D143F4C03E82E628380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/411f75d5-7410-4ca6-b23e-146e3726e630.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 15 Nov 2023 01:45:15 +0000
Certificate not after:    Tue 17 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 33495
                          IP: 206.80.238.0/24
                          IP: 2001:504:91::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e4:2c:0d:14:3f:4c:03:e8:2e:62:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Nov 15 01:45:15 2023 GMT
            Not After : Feb 17 01:45:15 2026 GMT
        Subject: CN=411f75d5-7410-4ca6-b23e-146e3726e630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f0:7d:51:e7:17:7b:7e:df:f0:8e:7d:73:be:
                    d7:2d:52:58:22:e4:ba:03:1d:74:17:ac:51:90:88:
                    ce:65:26:9e:2d:27:c0:9f:3f:f8:ff:5e:1f:45:27:
                    c2:e4:48:07:03:2d:dd:6a:1b:af:3e:fc:cb:12:99:
                    2e:ff:86:85:2b:a9:66:06:b6:fa:ef:05:2c:98:9a:
                    6b:d3:a8:1f:32:f8:1b:0d:3e:89:ab:94:68:35:23:
                    34:12:e5:f2:ea:91:04:36:7c:1d:a3:81:8d:5e:34:
                    25:5c:eb:26:4d:56:ab:0c:6a:a4:78:96:e8:e5:bf:
                    3d:4f:ac:4d:10:2a:db:45:94:92:81:a1:c9:87:9f:
                    e2:95:00:62:3f:53:a5:1f:e0:b5:51:a6:68:29:07:
                    08:cf:c4:e6:e4:3a:57:85:f4:b1:3e:30:70:55:9c:
                    c8:19:10:3c:5a:db:97:ad:21:44:ed:76:f7:50:2b:
                    33:a7:57:b1:35:9e:5c:48:d9:13:1f:bb:e9:6b:2a:
                    dc:dc:17:d2:d7:c0:96:a1:b7:0f:3a:13:5a:1e:bb:
                    bd:18:f2:66:30:d6:a7:90:77:ca:53:ad:0c:e9:cb:
                    e1:b4:36:52:47:d3:46:25:bc:01:83:2c:ec:46:1d:
                    89:06:27:46:e3:a3:e8:2b:b4:b2:c3:c8:55:5c:b8:
                    89:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:43:90:18:2C:34:67:5A:E2:72:BB:62:46:E2:66:16:1E:4D:64:CC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/411f75d5-7410-4ca6-b23e-146e3726e630.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.80.238.0/24
                IPv6:
                  2001:504:91::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33495

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b3:9b:5d:6e:47:02:dc:06:b0:55:a4:41:f3:82:10:6d:4a:
         00:1f:f6:45:f6:4a:4b:4b:01:a7:eb:f2:6c:0f:a9:a6:2d:e2:
         f6:b8:38:8c:88:07:35:e2:3f:ce:dd:b8:c0:e4:7a:fe:fe:a3:
         25:b4:cd:b6:82:1e:f0:74:dd:d4:be:47:98:96:44:67:39:f9:
         7f:eb:f7:49:52:1b:e9:ee:3a:29:8b:ce:27:46:62:e6:69:f3:
         54:f3:72:fe:97:44:a9:87:fd:86:28:f9:a5:b5:fe:38:7c:0c:
         e1:78:38:8c:fa:8f:2d:d6:a4:f7:ba:22:ff:57:4c:c4:52:26:
         d0:bb:a0:4f:82:ac:ea:af:29:3b:fd:f0:f2:69:11:be:b1:7b:
         ee:d0:74:fd:bb:eb:81:87:62:ee:a4:06:8e:9c:0b:ff:8f:99:
         42:76:dd:e1:77:4b:e8:ef:6c:78:0d:c6:8b:a0:93:a5:88:a5:
         68:a2:4a:60:e6:30:27:31:72:9a:3a:51:de:5a:c4:02:ef:e0:
         3f:0c:1d:2a:cc:a1:be:1a:2b:ac:6a:e8:0d:1d:d8:7d:da:91:
         da:99:82:53:f5:48:7c:18:d2:d1:ea:3e:64:44:b4:d8:a7:69:
         11:57:8c:90:02:89:4b:c2:6a:93:21:c8:ed:80:13:a7:5c:b5:
         27:0a:0d:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----