Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer
File:                     9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer (raw, json)
Hash identifier:          cSEgURxuEN5n7IkHEvu+pLhXd/FjuaDrCspZ5hXs+gs=
Subject key identifier:   74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858442F8C84E747EA0289EACFBCC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 12 Dec 2023 01:45:15 +0000
Certificate not after:    Mon 16 Mar 2026 00:45:15 +0000
Subordinate resources:    AS: 54098
                          IP: 23.92.32.0/20
                          IP: 2607:2740::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:2f:8c:84:e7:47:ea:02:89:ea:cf:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Dec 12 01:45:15 2023 GMT
            Not After : Mar 16 00:45:15 2026 GMT
        Subject: CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:7e:12:84:1d:e8:b0:9b:49:e2:a3:6c:98:
                    c9:50:f7:64:7c:d2:ce:fe:f0:a3:2f:be:13:c8:20:
                    1f:8e:99:93:a0:76:e4:46:4b:ca:43:46:4b:55:ff:
                    f1:aa:64:2f:3e:d7:3d:89:e3:fb:57:29:42:b5:7a:
                    be:41:ba:52:f4:5b:cf:39:3c:54:09:e7:f9:de:9a:
                    00:8f:1f:16:3d:ea:be:e0:ec:64:e5:b7:ea:af:0f:
                    d7:d9:7f:1d:38:4e:91:5e:eb:6c:ee:b8:eb:93:da:
                    c7:e8:8c:cc:e2:15:37:2a:3e:ce:97:83:91:b1:03:
                    56:90:27:87:d3:c3:36:c0:a6:34:de:8f:52:2f:6c:
                    88:30:bc:a9:5d:03:4d:39:7d:e4:0a:e1:69:b7:60:
                    33:75:0a:65:ba:b2:4e:45:25:d6:83:4d:7d:15:c3:
                    37:8a:fb:08:69:1a:36:af:99:1c:88:0b:4e:52:77:
                    c1:c8:d2:ac:fa:92:dc:a5:48:b7:a0:ad:d6:13:54:
                    6f:3b:d1:f3:60:72:2b:3f:dc:95:be:4f:ef:e5:ce:
                    6b:f1:5b:0d:e4:b4:19:fa:76:02:ad:d1:88:9f:7e:
                    c2:12:7d:4e:6e:c4:bf:2d:53:08:27:9a:3d:1e:c0:
                    37:0f:0b:93:f2:b0:ea:ce:fa:67:17:ac:02:68:ab:
                    85:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.92.32.0/20
                IPv6:
                  2607:2740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54098

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:fb:dd:78:e0:de:ed:0b:35:1a:6c:0b:f8:0a:5e:60:67:cb:
         f5:96:c6:6e:8a:50:b6:33:19:88:12:6a:b3:43:7d:c5:d4:8a:
         25:40:f5:27:5d:a0:5d:b3:c3:c5:7d:d8:9b:42:75:67:f5:ce:
         2c:67:d1:ac:35:2f:6a:0d:4f:74:d8:d9:10:23:00:15:2e:ca:
         8f:94:e5:23:3e:67:28:ba:fc:d3:6d:4d:75:08:49:6f:ce:b0:
         bf:2a:10:bd:f9:c7:5b:ef:79:11:6a:66:59:6a:ec:4f:e8:26:
         89:49:72:44:d9:0b:35:53:a8:49:0d:22:b6:d2:2a:26:fe:8d:
         97:0b:5e:fb:81:f6:b1:df:c0:13:79:30:e5:29:11:89:79:b3:
         54:c0:4d:32:45:92:f2:13:46:a5:e5:de:34:2e:fc:3b:eb:f8:
         67:f6:dd:02:21:94:80:22:44:21:b7:fd:25:ed:01:d6:2a:81:
         55:3f:a5:27:a1:89:f7:c3:96:77:4c:7f:89:a6:20:c4:27:e6:
         55:7d:2e:ec:51:91:f2:b4:90:1e:77:a6:a4:05:33:67:52:49:
         3d:00:48:87:7c:aa:7a:db:62:81:6b:aa:b8:96:4d:dc:10:ae:
         33:85:e5:ce:4c:33:a8:bd:2c:67:07:e3:eb:ca:3f:fa:98:86:
         ef:e6:96:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----