Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer
File:                     fb2256ec-ce11-47ff-92a6-4ba188570a25.cer (raw, json)
Hash identifier:          0UpkCgcT7tUtt2ZzesDsQSaWTcBxy38YiRmnBmMgiwg=
Subject key identifier:   38:F4:1F:2B:B5:40:90:F4:90:62:3B:C6:F4:BD:8D:B3:37:69:0C:44
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285847299395223FD78D2F5DBC4100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 10 Sep 2024 00:45:27 +0000
Certificate not after:    Mon 14 Dec 2026 01:45:27 +0000
Subordinate resources:    AS: 14157
                          IP: 206.83.176.0/20
                          IP: 2620:116:f000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:93:95:22:3f:d7:8d:2f:5d:bc:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Sep 10 00:45:27 2024 GMT
            Not After : Dec 14 01:45:27 2026 GMT
        Subject: CN=fb2256ec-ce11-47ff-92a6-4ba188570a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:76:e6:fd:f3:e2:3f:f0:e8:15:7f:70:45:19:
                    aa:13:a3:9f:4a:1a:13:26:a6:6e:4e:ca:2c:18:9d:
                    b7:42:fc:96:15:6a:85:b2:c5:8f:1f:fb:c5:a3:44:
                    2f:08:d4:0c:8d:ef:94:83:37:ca:b9:fb:72:91:96:
                    ff:84:0b:66:f1:b5:c4:18:a6:60:4f:30:03:7f:1d:
                    d6:29:fd:5f:87:80:bc:59:c3:e9:fc:a3:f4:de:c4:
                    26:57:23:38:b5:48:46:5f:93:92:72:77:06:df:55:
                    db:45:30:f9:30:a1:e8:fc:1c:b6:21:43:a8:f4:aa:
                    12:f3:9e:d5:eb:1a:d3:20:ef:5c:76:1f:88:13:50:
                    70:c7:1e:f4:db:e5:6a:79:a4:1e:92:b2:34:22:c9:
                    3f:e5:29:10:ea:5e:03:e9:65:85:10:b3:a9:3f:ff:
                    ff:6d:99:74:b9:24:76:94:71:b2:3e:31:c3:8d:60:
                    c8:ce:3b:37:05:34:48:44:08:43:6a:f0:4a:4d:08:
                    6f:73:a4:6a:9d:29:7c:49:d9:ea:33:ce:8b:d0:e8:
                    c8:45:fd:ca:53:0d:6a:2d:86:00:70:40:91:4b:7a:
                    a6:7d:fb:a8:58:8e:8c:96:4f:59:08:f9:8d:28:6e:
                    53:7a:20:86:9c:5e:de:13:65:33:09:37:da:44:97:
                    8f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F4:1F:2B:B5:40:90:F4:90:62:3B:C6:F4:BD:8D:B3:37:69:0C:44
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.176.0/20
                IPv6:
                  2620:116:f000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14157

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:85:9a:bd:c3:3e:4e:64:ca:4f:53:3c:45:95:27:bd:5f:5a:
         c9:3d:e0:38:b4:61:c2:c3:9e:df:6f:75:56:63:74:d5:39:b9:
         a9:4a:6d:c3:20:d6:fc:59:cb:72:8c:00:02:2f:2b:25:d0:72:
         dc:08:c6:3d:bf:73:28:93:d0:1b:b7:e0:55:ec:3c:c2:a6:da:
         7b:f8:9f:de:e6:33:82:64:f4:b8:49:91:a1:56:fd:49:1f:6c:
         0c:24:0b:9c:f7:43:5a:d8:67:11:aa:e5:b8:24:df:bd:ca:4a:
         be:e1:60:0e:71:09:37:d8:cf:f3:de:b1:73:80:8a:41:0b:d3:
         ab:14:8c:cd:57:71:9b:8c:43:f1:31:58:65:40:2e:29:4e:a6:
         82:69:7d:cd:1c:de:a2:ad:82:45:a2:f0:9b:bb:9e:fb:50:04:
         6d:0a:81:3e:95:aa:e3:8e:8a:95:82:af:0d:7c:99:37:ee:6b:
         d7:88:2b:2f:58:bc:4a:a6:46:71:8f:e3:9e:10:8c:dc:c5:34:
         fa:27:5e:75:45:60:f5:aa:01:b9:7b:f2:14:87:7e:b0:c0:51:
         c1:17:b7:3f:bc:7d:f9:fa:f6:d6:61:e4:f5:58:a1:89:b4:30:
         ee:07:13:17:cd:a0:5f:31:15:8b:ca:fb:b5:f0:2a:ec:e9:15:
         8f:06:c3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----