Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer
File:                     5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer (raw, json)
Hash identifier:          6SU4P8iRwuGekXnzHGQfpscVhmYj1Sa3nHTR9VONdoo=
Subject key identifier:   72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858474DDE792F0B149DDA329EAE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 23 Sep 2024 00:45:26 +0000
Certificate not after:    Sun 27 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 6649
                          IP: 45.41.252.0/22
                          IP: 2606:5240::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:de:79:2f:0b:14:9d:da:32:9e:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Sep 23 00:45:26 2024 GMT
            Not After : Dec 27 01:45:26 2026 GMT
        Subject: CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8c:5b:bd:46:90:0e:91:15:a3:34:b7:5e:cd:
                    fe:a4:d9:0e:03:bd:d8:3e:b5:c9:fc:32:2c:57:0a:
                    5f:25:f4:5c:a5:73:5d:b7:2a:13:b2:eb:b0:49:82:
                    63:25:c1:44:c0:6f:bf:0d:ca:b6:0e:f4:cb:c3:cf:
                    8c:6b:2d:95:14:18:bc:e3:51:e3:a7:59:0e:da:ad:
                    9a:70:f1:01:ae:4c:17:41:d0:60:88:dd:33:4c:05:
                    4e:30:cb:d1:c3:1f:a8:89:93:b9:01:f0:bf:5c:6c:
                    62:4c:5e:d7:1f:bf:ec:04:e5:54:ad:76:38:e8:54:
                    c4:c8:09:34:70:47:4f:c0:04:de:fd:9f:95:ce:2c:
                    f7:27:30:43:a9:d3:3a:55:33:5e:db:3f:2f:10:d9:
                    e5:7b:8c:68:c0:aa:95:f4:b7:0c:96:8f:34:45:e6:
                    e9:44:6b:b8:ff:34:60:99:3b:c3:c0:40:fa:46:73:
                    96:72:79:d5:cd:9d:94:bb:1c:5b:0c:91:b1:33:ee:
                    9c:04:68:10:9a:4b:73:2a:e0:47:85:ae:21:cf:45:
                    c2:53:b6:f4:34:92:55:b9:c4:8a:8b:c7:d0:c7:f3:
                    f2:a9:5d:49:65:5b:36:7c:d7:8a:f4:f5:d7:b1:4d:
                    e1:36:05:6b:96:26:c4:32:46:43:e2:92:62:60:83:
                    5f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.252.0/22
                IPv6:
                  2606:5240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6649

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:de:bf:f8:76:ac:ba:50:07:90:be:bf:c7:1a:80:b9:91:e5:
         5c:8c:37:18:54:c7:0c:3b:4f:d5:f2:c6:40:e7:d1:5d:3a:83:
         71:b1:b7:bd:a7:72:c2:7c:4a:ae:80:64:8f:ba:3a:25:0e:17:
         d7:f2:37:1c:79:66:9f:63:f0:f1:c0:c3:8b:43:45:8a:57:15:
         5c:5c:70:bf:ae:a1:a7:44:41:d2:67:7d:d0:a5:a5:22:4b:88:
         af:cc:b0:39:fb:29:47:5f:93:dc:8f:52:ed:ed:e1:be:38:17:
         7c:a9:a5:fe:95:89:91:8e:5f:f5:99:a4:43:9d:48:95:05:7a:
         f5:fb:f1:dd:5e:f7:85:d3:b0:97:8a:4e:79:50:4b:93:25:65:
         cd:64:50:38:21:c9:c1:97:f7:fd:e5:57:87:f0:39:55:99:31:
         0c:61:47:d7:38:87:3d:fa:08:7b:90:75:58:73:27:3d:91:0d:
         d0:a9:c0:b6:ec:e8:bf:ce:4e:1f:7a:27:67:c8:04:fa:bf:4e:
         30:c5:5b:00:1b:90:79:c3:44:15:00:0b:3a:49:4c:f1:ce:94:
         42:ca:b8:b4:b6:40:1f:2b:f7:5a:ba:3d:d7:42:c0:00:41:00:
         f7:ad:1e:04:1f:e4:85:43:59:3f:48:7c:1f:ab:ed:04:37:78:
         28:0f:b1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----