Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer
File:                     6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer (raw, json)
Hash identifier:          0Zih46G90a6NrObuLBVjX2crGH/TS9nLAFeRMVX4+7w=
Subject key identifier:   E3:78:64:D0:0E:B0:5D:74:BD:47:AA:73:48:0B:50:40:27:54:12:D3
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285841E48346E91F14DEF874106B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sun 04 May 2025 19:06:39 +0000
Subordinate resources:    AS: 26337
                          IP: 129.121.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:46:e9:1f:14:de:f8:74:10:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : May  4 19:06:39 2025 GMT
        Subject: CN=6f379fb1-acf0-497e-800b-5b1eca6ab7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:09:bf:49:25:27:1d:35:11:f2:58:b5:88:df:
                    4b:cb:57:dd:a0:38:3c:86:10:a3:51:59:d6:f3:06:
                    6a:fe:75:ad:31:c0:b5:c8:94:e6:28:c6:43:b2:bf:
                    9f:3d:2f:d0:74:42:d8:de:97:64:a5:f4:19:9f:a8:
                    d9:ff:f7:bc:49:77:01:5e:9f:81:81:8b:f5:cb:8a:
                    e6:6d:89:5d:c0:7a:1c:71:57:8a:26:2b:89:c2:88:
                    74:68:36:e0:fd:bd:8b:44:09:e5:12:87:ea:b1:31:
                    a0:15:9e:ca:ec:1a:3b:ad:92:63:15:0a:80:2f:bb:
                    1e:5e:5c:10:d2:c8:bd:41:0b:96:a7:e6:ed:fa:bc:
                    20:39:fe:28:ba:86:69:bd:22:b3:ac:31:c0:e2:fd:
                    1c:a8:ce:f3:fa:b4:6b:f7:b6:27:b1:90:b6:cf:da:
                    d7:90:97:9e:05:15:d7:90:93:2f:74:2c:b4:dd:ca:
                    b6:92:49:46:2e:95:e6:c2:ed:e4:9e:29:b3:76:fb:
                    d8:9f:5e:9d:38:21:8a:c9:96:75:c5:29:24:26:81:
                    5a:83:d0:fe:fe:8a:4c:a7:49:f4:74:84:c4:ad:80:
                    58:20:ba:df:50:ef:a4:09:87:f2:76:08:7a:64:3d:
                    b9:a1:1b:0f:67:ba:2a:7b:21:0c:70:93:fd:c4:da:
                    cf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:78:64:D0:0E:B0:5D:74:BD:47:AA:73:48:0B:50:40:27:54:12:D3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.121.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26337

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ca:13:61:62:43:02:42:14:3d:b4:d5:12:87:d0:e9:6d:e7:
         7a:7b:1f:3d:cb:eb:30:c4:d7:fd:6d:c6:fa:55:2e:63:cd:0f:
         57:32:2a:d4:fd:f6:0a:66:a9:68:d7:db:fb:b2:a8:49:d8:95:
         70:e5:9f:96:f8:aa:1b:6b:20:72:c0:9f:b7:ee:37:3e:ce:71:
         92:ae:75:32:a0:70:26:32:22:50:d6:56:ca:b5:ea:5a:b4:4b:
         5b:61:3a:2e:ae:f2:ee:8e:2e:6b:a5:4f:0a:32:ed:9f:46:76:
         39:2b:b4:25:08:7f:4d:85:fb:a6:b8:06:17:47:47:55:fe:4c:
         df:da:61:a7:32:4c:17:0d:cd:fa:9c:c3:1f:3a:65:49:13:42:
         58:49:d6:ee:5a:05:6c:32:89:27:a2:ca:93:39:12:b9:de:f6:
         09:b5:6a:ad:24:95:b2:c3:53:0d:ce:50:a4:d2:f5:d8:d7:75:
         8b:f5:f1:0d:51:d4:cd:02:80:b7:77:ab:86:91:5a:03:78:a3:
         e7:90:c3:10:9a:86:9a:4f:6c:d7:f0:5e:07:e8:25:20:b9:10:
         f2:70:eb:1b:77:b5:d1:f7:35:83:c7:d3:33:74:27:6c:36:da:
         b9:57:b0:53:20:2b:04:3a:79:85:89:a8:ed:ac:35:4d:92:9c:
         e3:36:b8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----