Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415.cer
File:                     25ad5b03-90df-485a-8924-5b355c4ba415.cer (raw, json)
Hash identifier:          ZSeAwcxDAJKsXMpsOQ6P/73xg8gnIvP9ujbRsirTVA0=
Subject key identifier:   61:43:89:06:8B:50:D5:D3:C3:35:63:83:3F:72:C0:87:50:24:B8:81
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285844F46233172F7DDCEE1E3DA200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415/25ad5b03-90df-485a-8924-5b355c4ba415.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 20 Feb 2024 13:54:14 +0000
Certificate not after:    Fri 03 Oct 2025 00:45:16 +0000
Subordinate resources:    AS: 10419
                          IP: 142.202.137.0/24
                          IP: 2602:803:1000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:62:33:17:2f:7d:dc:ee:1e:3d:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Feb 20 13:54:14 2024 GMT
            Not After : Oct  3 00:45:16 2025 GMT
        Subject: CN=25ad5b03-90df-485a-8924-5b355c4ba415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:be:0c:f8:17:90:f0:d8:ec:21:a0:76:ad:14:
                    e1:27:fa:57:d2:cc:1f:70:25:75:95:31:a0:4b:a1:
                    49:00:26:88:9d:d9:ff:eb:05:47:24:dc:57:ce:28:
                    14:ae:93:92:ea:e5:c8:ef:0d:d8:a0:70:6f:de:85:
                    63:fd:44:d6:8c:d5:1b:83:62:1d:dc:ea:43:d7:65:
                    e6:91:cd:47:6a:8a:6c:19:ab:11:e0:98:52:a4:79:
                    08:84:06:a6:30:c4:9d:b3:2e:7a:67:8f:a3:e5:06:
                    9e:51:7e:8a:81:ab:e7:39:b8:5f:7a:30:ce:ec:db:
                    17:b5:ad:6e:9c:95:bd:94:d2:06:2e:d3:c5:4c:4c:
                    13:b0:b3:5c:a5:90:30:8a:f8:86:b8:6d:1c:ff:c1:
                    df:6c:08:1f:28:b2:3c:91:4c:03:21:de:63:ce:a6:
                    07:7e:94:fd:6d:0b:16:d1:eb:6b:e1:bc:f3:b8:ae:
                    21:8b:e1:64:1f:ee:20:98:86:53:a8:5e:1c:d3:e1:
                    5b:b5:71:59:17:d8:63:00:cc:ae:f7:be:bc:02:dc:
                    4a:c2:d0:f6:c2:f6:44:e7:b8:3d:f8:7e:13:3c:40:
                    84:55:2b:e2:c7:ff:88:ab:ab:1b:61:34:2a:92:c2:
                    63:14:b8:ea:3f:b0:96:a3:e8:75:90:6d:c3:d6:44:
                    86:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:43:89:06:8B:50:D5:D3:C3:35:63:83:3F:72:C0:87:50:24:B8:81
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415/25ad5b03-90df-485a-8924-5b355c4ba415.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.137.0/24
                IPv6:
                  2602:803:1000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10419

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:fd:e2:20:5a:80:74:7b:54:1f:e7:f0:8e:2d:e9:6c:54:6f:
         7e:1d:b6:bf:08:41:25:87:54:5c:70:a1:31:40:b6:0e:a2:73:
         db:81:d3:53:8a:8d:8c:09:35:a9:ea:fa:82:08:d4:89:1f:9b:
         1e:29:bb:c2:54:df:81:c5:26:e9:0d:bf:5d:ba:2c:de:47:0a:
         d4:80:e0:35:5f:a8:88:b3:3e:44:5d:a7:f6:5a:e8:67:55:2f:
         e2:5a:0b:e1:11:f1:a4:53:47:40:ad:1d:cc:7b:3c:06:51:3f:
         70:97:b3:52:00:1e:ec:37:da:18:44:d8:f8:37:9e:64:69:4d:
         cc:ab:a7:6e:16:10:d0:3d:74:12:8f:35:a7:cd:6c:19:59:91:
         2c:d3:fe:a7:42:86:39:0b:58:72:75:67:44:ac:6e:bb:5f:cc:
         91:0a:53:8c:c6:d0:d5:55:01:2a:ac:1c:4e:54:04:5c:8b:12:
         db:a8:da:37:41:df:0b:2d:4f:49:66:cf:30:15:e4:a8:c7:74:
         80:20:43:de:82:57:d3:2e:d0:af:a7:01:15:92:18:2f:b4:b1:
         09:e0:5f:5b:8b:00:76:df:8c:4d:94:a4:42:17:af:a7:3d:60:
         95:09:cf:a1:aa:4f:14:7b:56:9c:0e:d4:12:a8:8f:27:ee:55:
         7e:29:88:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----