Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer
File:                     1be7bcf5-0538-4a92-9aef-c460f15023b4.cer (raw, json)
Hash identifier:          cOsT67G9cd/ke9IzRLgQfFTXJAUhXSP05zvNlQktPLw=
Subject key identifier:   45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285844A2029A78410F4C8C369A6080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 22 Jan 2024 01:45:20 +0000
Certificate not after:    Sun 26 Apr 2026 00:45:20 +0000
Subordinate resources:    AS: 46365
                          IP: 23.152.56.0/24
                          IP: 2602:2cd::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a2:02:9a:78:41:0f:4c:8c:36:9a:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jan 22 01:45:20 2024 GMT
            Not After : Apr 26 00:45:20 2026 GMT
        Subject: CN=1be7bcf5-0538-4a92-9aef-c460f15023b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b5:6f:13:71:23:70:7d:f0:a6:3d:a7:fe:c7:
                    c9:94:7f:10:51:2f:f8:61:f3:94:ea:5e:8d:50:e5:
                    63:6d:fe:4c:05:a7:f4:bb:d8:21:fa:8f:0e:7d:ff:
                    4c:b5:71:e8:c1:43:b1:4a:61:42:c7:0d:d9:17:ef:
                    78:19:76:e2:32:93:95:f4:b4:25:62:f6:d4:a6:3e:
                    8e:1d:37:52:7a:b7:cf:5e:d9:35:a3:cc:cf:47:7c:
                    60:c2:eb:a7:85:9e:df:7a:59:57:3a:d8:01:e1:01:
                    1b:2b:a6:2c:41:87:83:70:32:c9:36:19:f8:35:41:
                    6c:1c:26:0b:af:18:e3:12:3a:1d:19:a2:96:d9:04:
                    25:81:65:96:99:f1:ac:5d:c3:4e:ab:bd:99:7b:56:
                    10:ac:bc:66:5e:45:04:e7:9d:38:ec:c4:bd:7d:33:
                    88:78:14:57:e2:3f:3f:08:05:44:78:12:5d:e7:df:
                    47:7a:36:32:16:de:69:c4:96:fe:73:cb:ae:36:b0:
                    12:1d:9b:48:65:7f:f0:42:e4:ab:8d:27:24:51:f0:
                    f7:9b:b9:45:23:6a:53:97:ff:89:77:33:ad:44:3a:
                    51:2f:98:f9:eb:d8:a4:ff:8b:3b:43:d8:48:b7:9e:
                    0a:2e:86:c2:85:48:16:77:35:90:ed:4d:57:8f:44:
                    8f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.56.0/24
                IPv6:
                  2602:2cd::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46365

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d3:f4:86:9e:cd:1b:84:cf:66:2c:49:ad:68:d4:eb:08:fe:
         56:5c:a1:54:cd:3c:fc:88:3b:85:fe:58:cb:f3:e9:59:6f:fd:
         98:7c:6f:8f:6b:61:b5:d6:82:f1:fd:06:a3:72:15:d1:3e:29:
         f9:93:15:7a:09:9c:12:29:80:c2:6f:80:3f:5d:6b:c2:39:ef:
         04:62:20:e6:86:56:21:5d:f3:ec:e6:db:ac:27:f0:d9:d6:41:
         d0:b8:91:1c:2a:54:50:2b:4c:17:21:10:2b:a6:58:bc:66:2d:
         7a:fd:ca:48:86:9e:1f:a2:c6:0f:8e:60:fd:83:d5:09:20:ed:
         57:23:36:a3:1d:fb:de:5d:f6:03:ff:86:74:35:77:f1:e5:b9:
         06:d1:ed:d1:29:ab:6d:1e:ee:da:5e:a3:19:0c:b6:ad:cc:86:
         d0:1b:5f:66:c5:43:a9:ec:f3:41:18:5f:bc:47:5d:b3:b6:93:
         03:cc:56:2f:96:49:53:c5:e9:60:7e:f9:d4:ef:7a:0c:e1:59:
         5e:91:8e:33:eb:ef:94:68:f9:38:98:0d:8c:2e:8e:b4:10:6e:
         5e:3d:80:93:82:49:6f:db:d4:27:cd:8f:6b:c6:f7:96:7d:a3:
         71:a4:7a:6c:94:13:3e:07:1a:cc:a1:4d:7f:e8:2c:1d:e5:0d:
         a5:db:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----