Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966.cer
File:                     55e7b8e0-0df5-4481-84e4-83619b05f966.cer (raw, json)
Hash identifier:          kYisldEU5U6sC8jFA35dtWUbYY0YiCZSoHTdYIL9b1U=
Subject key identifier:   61:AA:90:72:0A:BC:38:A3:EE:E2:A2:55:8A:C1:C0:63:76:26:67:D8
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285841E48349EAF1657883756A6C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Mon 26 May 2025 19:06:39 +0000
Subordinate resources:    AS: 395970
                          IP: 23.170.112.0/24
                          IP: 2606:ec0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:49:ea:f1:65:78:83:75:6a:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : May 26 19:06:39 2025 GMT
        Subject: CN=55e7b8e0-0df5-4481-84e4-83619b05f966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3c:75:19:01:5b:9e:bb:42:b3:7f:86:1c:c4:
                    a1:3a:bb:93:a9:18:0a:23:9d:29:e7:dc:12:98:37:
                    2b:a3:dc:f3:ad:9a:96:48:c0:1c:07:8a:31:e8:52:
                    c8:dd:3f:0f:40:a1:1d:58:13:7f:89:50:e4:ae:68:
                    7a:fc:d2:ff:ad:70:ef:93:eb:7f:8d:c3:56:e8:56:
                    14:b3:c8:e1:98:75:fe:2a:13:23:db:9c:e5:e5:29:
                    ce:be:dd:41:5a:97:9e:d2:e1:47:2d:f5:cd:bc:31:
                    0c:e9:a4:c7:f1:f8:93:1e:59:ba:80:a5:41:4f:c7:
                    e4:bc:ba:17:ea:01:5b:32:8f:de:03:7a:74:9e:c5:
                    52:0c:c9:aa:f1:bf:f3:1a:ee:20:23:7c:da:61:a5:
                    49:45:34:1d:d4:15:7c:89:61:01:76:aa:fb:4a:fb:
                    36:d0:b1:bd:1a:a3:1e:f5:21:74:6c:cf:40:f2:9e:
                    5d:5a:07:1d:35:94:a3:b3:d8:97:1b:f4:d1:f3:c9:
                    f4:66:26:6d:9f:6b:f3:c9:d1:61:d3:f7:27:c5:9f:
                    1c:e7:44:e0:d5:bc:22:f7:96:1b:2d:d1:7e:0e:6b:
                    b0:8c:e9:0d:b6:2c:69:b4:83:ef:7f:a7:6a:a3:c2:
                    1a:5e:7f:22:3a:54:a9:13:c6:f6:1c:b7:05:e2:bd:
                    aa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AA:90:72:0A:BC:38:A3:EE:E2:A2:55:8A:C1:C0:63:76:26:67:D8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.112.0/24
                IPv6:
                  2606:ec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:b4:5a:2f:e0:68:dc:f5:71:1d:a4:1a:68:85:f6:e5:08:a2:
         80:a4:98:ab:b1:b9:ad:6c:2b:56:97:fc:e8:27:34:fb:ad:f4:
         66:8c:44:25:50:ed:32:b9:ec:4f:22:32:e2:ef:66:1a:be:a6:
         6b:89:40:da:0d:f8:df:f4:7c:82:c6:95:b1:46:34:50:9b:77:
         b0:4d:f9:31:f7:1c:54:b6:9a:cc:58:28:ad:dd:43:8c:32:77:
         73:d7:4f:54:9b:d3:b0:6e:36:a1:94:d6:3f:42:c9:52:37:c7:
         20:da:8e:ac:13:ec:1f:7f:2d:e7:3b:ac:76:29:a0:f8:f8:db:
         d8:57:aa:07:01:63:5c:88:be:e3:3e:43:09:0d:de:32:da:6b:
         82:33:5a:d4:81:32:d3:64:e7:e7:3f:2f:93:7d:87:e1:bb:31:
         dc:04:66:11:40:07:e5:66:20:e5:d3:8a:cc:0b:91:50:a1:25:
         6e:70:66:07:4c:67:5f:de:90:c0:45:94:42:ad:d0:f2:a6:f4:
         bf:ce:8d:8c:43:52:c8:fa:7a:ab:18:87:58:70:16:8e:15:a1:
         a9:f7:3e:76:a0:89:a7:f6:35:21:c3:75:24:e7:77:74:20:cf:
         a5:86:98:c9:b8:f6:c5:a3:c2:8c:1c:f8:6d:84:39:87:8e:8a:
         c4:bb:2d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----