Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer
File:                     503450af-ac6f-4861-96c0-24f7e8724111.cer (raw, json)
Hash identifier:          nCR6FjI9vOP+1ga1v56OWeJGlU+Nb+zoaJ6gP5wpFx0=
Subject key identifier:   F9:63:1A:91:2B:F7:A0:6A:5D:82:31:40:0C:21:D5:FD:BB:ED:FA:BB
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584355AD6F016084F1B17858AF00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 25 Sep 2023 00:45:21 +0000
Certificate not after:    Sun 28 Dec 2025 01:45:21 +0000
Subordinate resources:    AS: 22961
                          IP: 23.146.120.0/23
                          IP: 2602:29d::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:55:ad:6f:01:60:84:f1:b1:78:58:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Sep 25 00:45:21 2023 GMT
            Not After : Dec 28 01:45:21 2025 GMT
        Subject: CN=503450af-ac6f-4861-96c0-24f7e8724111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:95:db:90:f7:0c:50:c6:83:05:18:81:5c:61:
                    16:45:98:0a:6b:c3:45:5c:9b:0a:71:0d:0d:42:c6:
                    45:09:1b:83:4a:ef:33:19:e1:47:b4:bc:88:1c:f7:
                    de:02:b9:e5:7f:e2:88:36:f1:e7:54:f1:3e:80:76:
                    0b:cf:55:9e:5a:aa:ab:16:c5:ae:5b:4a:ba:90:43:
                    c6:78:c0:63:06:04:14:85:9d:10:90:16:7e:98:98:
                    32:b9:a2:c5:cd:3d:94:10:fd:f1:44:5a:08:a6:e2:
                    06:ab:8f:4e:56:d1:52:ed:49:a6:ee:0f:87:74:97:
                    fe:f7:9f:53:69:d3:13:4d:c4:dc:39:0f:1e:d8:6a:
                    3a:ae:d1:ee:55:af:f4:5a:23:f9:79:98:40:5d:c4:
                    48:0e:9a:e5:15:5e:65:7b:56:18:f1:33:2f:dc:6a:
                    b7:dd:55:06:01:1f:67:86:fa:f7:07:31:89:34:ad:
                    2a:cb:80:7c:e8:a8:d2:87:6b:ba:d6:5c:ea:fb:b0:
                    a6:19:ff:fc:67:46:bf:6a:4e:62:e1:b3:08:41:c6:
                    5c:fc:a2:a7:da:4d:50:02:0a:bc:a5:3b:e1:1a:ac:
                    3a:b8:8c:b0:94:3d:43:c2:2a:28:21:7b:4b:a5:1a:
                    15:66:d0:d3:01:1b:4e:e1:8d:f1:76:2b:2c:a9:55:
                    ea:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:63:1A:91:2B:F7:A0:6A:5D:82:31:40:0C:21:D5:FD:BB:ED:FA:BB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.120.0/23
                IPv6:
                  2602:29d::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22961

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:00:21:5c:30:b1:a7:ef:8d:d8:cc:a0:05:aa:84:23:33:6b:
         92:d4:01:d2:bc:8a:db:87:c7:39:32:38:fc:c3:c7:37:43:93:
         85:b7:90:e7:70:8b:18:14:d7:98:f0:47:3d:6e:32:f8:b2:6a:
         89:09:ec:ea:ef:d8:2b:49:47:3d:03:8d:a5:87:94:4c:c8:ef:
         b1:1e:b8:96:fc:99:d5:b4:90:98:36:11:b3:7c:5e:b2:12:8d:
         63:77:96:bd:40:0a:21:68:9a:bf:07:f0:ba:cf:e1:85:6e:f1:
         ff:07:79:9d:77:41:76:3c:3c:96:ad:d8:75:05:39:a3:60:84:
         67:70:20:9b:b3:82:a6:da:7c:d7:a5:ef:4b:b0:15:b2:85:19:
         e0:e3:2c:a1:bd:f5:5a:a6:e1:91:d7:c3:c1:ac:dd:02:16:02:
         39:a1:26:98:90:0b:d7:b7:f9:a7:53:b1:35:98:6f:fc:1a:e5:
         38:60:87:c3:34:18:13:4a:d3:c1:cb:fc:8f:fa:ea:ed:91:97:
         22:9c:60:ed:71:d6:f1:56:2b:fc:57:73:0e:da:10:2e:d1:42:
         4d:b0:37:72:f7:82:01:1b:30:bc:83:b3:b8:f6:57:71:d7:28:
         e6:c8:42:c7:4d:f8:50:24:37:7b:e9:cc:f2:9d:7b:2c:d1:7f:
         81:73:e1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----