Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d.cer
File:                     91ace6e0-bca2-4daa-81c3-2e936814cc5d.cer (raw, json)
Hash identifier:          WUNiWf0UC+ygrXPV3PxRK5XNjYk2Wv51CPh8l4kq6hA=
Subject key identifier:   E2:F5:7C:2D:02:96:52:D5:D3:46:73:3B:13:AC:43:60:E7:5F:E9:C5
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285844AD2D5976E62B139DC0B384A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/91ace6e0-bca2-4daa-81c3-2e936814cc5d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 26 Jan 2024 01:45:21 +0000
Certificate not after:    Thu 30 Apr 2026 00:45:21 +0000
Subordinate resources:    AS: 396160
                          IP: 148.59.186.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ad:2d:59:76:e6:2b:13:9d:c0:b3:84:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jan 26 01:45:21 2024 GMT
            Not After : Apr 30 00:45:21 2026 GMT
        Subject: CN=91ace6e0-bca2-4daa-81c3-2e936814cc5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:af:6f:0f:4f:3f:d3:fe:61:2f:25:07:5c:
                    d3:63:b1:d1:0f:5b:17:b1:f0:12:f7:64:b8:9a:14:
                    58:0a:b2:fc:9b:d2:4b:ff:83:a5:82:80:b4:ce:85:
                    fc:59:01:7d:35:0d:38:81:5e:f6:55:0a:d7:d0:ab:
                    8e:9f:0d:0c:35:18:d8:56:c1:6e:bc:63:4e:10:11:
                    66:90:2c:1d:cf:b5:1b:d9:b0:41:06:25:ee:a9:6f:
                    a3:90:02:37:b4:dd:09:21:92:4e:92:6e:34:74:75:
                    bc:41:04:3a:03:c0:89:8f:a7:7c:94:b4:d1:70:40:
                    2a:aa:bd:30:e1:5b:d2:5b:6b:7b:f9:55:9b:1c:39:
                    e1:23:04:37:78:d9:b3:5b:ea:15:b7:ef:35:0f:a1:
                    fe:94:ec:3c:17:a4:ac:ce:01:8d:37:86:a0:c0:cd:
                    7f:21:96:44:ff:6a:31:08:fe:17:56:5a:ad:f3:bc:
                    38:9e:3f:9e:84:4b:d2:ec:bd:2f:f2:ae:99:83:7f:
                    e2:78:eb:15:aa:42:a2:92:52:87:72:bf:80:cd:b5:
                    59:e1:a1:95:c1:56:ab:c0:e1:c9:9e:57:bf:29:8c:
                    06:b3:e8:be:4f:eb:d6:78:fd:b2:ad:0e:35:66:63:
                    e9:cf:f3:d3:3b:4a:50:03:d6:bb:ce:12:27:5d:7d:
                    05:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F5:7C:2D:02:96:52:D5:D3:46:73:3B:13:AC:43:60:E7:5F:E9:C5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/91ace6e0-bca2-4daa-81c3-2e936814cc5d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.186.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396160

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:5a:0e:a1:ed:77:a5:19:9e:c5:a3:ee:81:88:49:f4:b5:23:
         ba:b2:f8:87:1b:b9:5d:90:f7:fb:15:b6:7f:fc:98:aa:98:e8:
         a3:9f:73:de:7b:49:08:c3:3e:eb:3b:04:2c:ed:71:3c:e8:af:
         7d:fb:78:b6:80:a4:40:1b:d8:1b:40:0d:9b:df:03:a6:63:05:
         e9:ad:16:69:f5:e0:fc:5a:b7:1c:59:aa:60:bb:2d:72:bf:fd:
         c0:b4:5b:37:0b:ae:87:fc:97:a2:0f:69:20:ad:32:b7:ff:75:
         e9:08:c3:d2:51:db:4d:8a:8b:5e:bf:7e:f6:b8:d4:6c:59:18:
         86:e0:8b:b8:ec:30:7e:24:e1:b5:e8:ac:bf:8e:db:e0:74:4b:
         54:db:36:b8:fc:fd:4d:22:f6:63:e6:9e:77:86:07:ae:3d:6c:
         68:47:54:0c:f8:99:48:eb:bf:ba:25:11:c2:dd:f2:ef:9e:ae:
         3b:21:e1:1d:19:85:25:70:df:97:db:d4:14:24:2e:5c:b6:38:
         70:b1:6f:6b:47:8b:c9:4e:11:ac:56:2f:85:31:11:3d:30:47:
         9d:cd:39:33:0b:8c:f2:58:a7:51:2b:cc:13:a8:5c:24:e5:95:
         40:7f:be:f0:e7:60:6d:ea:22:1c:c9:25:f0:e8:b7:b5:74:64:
         2f:fa:79:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----