Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476.cer
File:                     e5a67b98-1c41-438b-b404-8142d67c6476.cer (raw, json)
Hash identifier:          WVV2V2ii/mlOxOQjlS4rbfxWvFFnXF5yl4+HzOhURsk=
Subject key identifier:   81:9F:D1:6B:26:3D:DA:D3:70:D4:D5:AF:2D:CA:CC:8B:B0:B3:CC:E9
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584594C6566B66C82075965193C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/e5a67b98-1c41-438b-b404-8142d67c6476.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 Apr 2024 00:45:20 +0000
Certificate not after:    Wed 22 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 393660
                          IP: 192.69.159.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:94:c6:56:6b:66:c8:20:75:96:51:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Apr 18 00:45:20 2024 GMT
            Not After : Jul 22 00:45:20 2026 GMT
        Subject: CN=e5a67b98-1c41-438b-b404-8142d67c6476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ef:d0:94:f7:4b:60:b1:59:79:85:95:4f:da:
                    52:1f:b9:b4:42:19:01:09:7e:81:70:cc:ac:42:36:
                    17:e4:80:0d:23:f6:ea:72:f2:01:95:34:2c:7f:5d:
                    e3:6d:77:90:44:b6:a5:a8:d7:2a:c3:91:20:9d:e9:
                    c3:88:94:57:d1:a0:23:d1:b5:f5:ce:a4:49:9c:4c:
                    15:ae:95:f9:be:0e:c8:91:65:7a:87:38:d7:41:5a:
                    e8:27:de:9d:8d:12:0a:a2:7e:f1:f7:bb:5f:b3:8f:
                    81:31:8b:9c:8e:fc:3b:27:ee:22:3a:b7:ea:19:7d:
                    96:af:6a:4f:f4:ff:9f:61:f1:af:97:89:44:b5:db:
                    e0:b9:3d:10:ff:70:51:e9:02:b4:51:1c:18:45:b3:
                    63:d0:3f:fa:c1:0e:93:40:94:05:6e:5b:2a:7e:98:
                    32:cb:1f:e6:6e:d5:c7:35:2e:81:eb:98:18:79:f4:
                    51:46:6b:18:03:33:08:49:d5:4c:92:83:d5:6e:b5:
                    fb:fa:36:d1:86:14:04:8f:b7:47:cf:b9:08:78:92:
                    a9:81:46:d9:42:ca:df:1d:0f:e7:a4:72:53:77:49:
                    5c:2a:f3:03:e3:95:fd:2a:18:89:1d:10:27:f6:62:
                    1f:57:e5:51:5f:cf:c5:54:f4:dc:5a:78:3b:10:51:
                    fb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9F:D1:6B:26:3D:DA:D3:70:D4:D5:AF:2D:CA:CC:8B:B0:B3:CC:E9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/e5a67b98-1c41-438b-b404-8142d67c6476.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.159.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393660

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:80:6a:06:2e:bd:95:a0:bf:04:8d:ae:3e:c2:3a:b5:92:4e:
         4e:51:15:03:a8:a5:b9:f0:49:29:bf:a0:cb:41:92:cd:23:fc:
         a3:e9:1c:fd:9d:5d:10:20:ca:6d:3c:7a:47:55:79:49:59:f4:
         38:66:f0:ea:26:32:00:e7:1a:d8:96:5a:8d:38:cb:50:de:54:
         d6:0b:65:4f:62:5e:d3:62:11:6d:25:5c:86:8a:be:44:13:a3:
         50:00:d4:63:68:49:40:86:32:11:a2:05:ee:4f:11:05:70:3f:
         ea:93:4f:e0:f8:2b:5b:cf:c5:b8:27:ce:60:c4:6d:46:69:32:
         3a:e3:0d:4e:ef:35:7b:d2:24:fc:0f:79:40:07:98:14:bf:8f:
         d8:ca:3a:2b:27:aa:40:4d:b2:38:b0:f6:39:47:6d:05:5f:bd:
         54:51:9a:4b:4a:43:95:a7:b0:0c:92:50:67:c7:ff:22:34:72:
         82:fa:3f:7d:9f:15:f9:82:41:da:79:02:47:d1:35:d1:53:1a:
         1c:7d:c1:69:02:4a:c8:f5:fd:02:32:15:28:98:59:2f:08:ca:
         7b:2c:9d:7f:be:18:53:68:05:99:dd:a1:aa:3d:e6:6d:e0:be:
         02:77:fe:a6:09:0f:d6:a6:95:0a:c3:d6:9d:b2:c4:61:c1:86:
         0d:61:a7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----