Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a.cer
File:                     cfe58959-04ed-4c71-a14d-8066ccb1353a.cer (raw, json)
Hash identifier:          b/qD68b9isKmcrXll314MHY/txs9AgxXlj+kuFKguNA=
Subject key identifier:   13:0F:7A:DD:DC:2F:69:9D:32:78:64:97:BD:79:BA:5B:45:CD:C5:EA
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285843E6F6BBA979B9E9451E776240
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/cfe58959-04ed-4c71-a14d-8066ccb1353a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 16 Nov 2023 01:45:15 +0000
Certificate not after:    Wed 18 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 400323
                          IP: 23.130.88.0/24
                          IP: 2620:a2:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e6:f6:bb:a9:79:b9:e9:45:1e:77:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Nov 16 01:45:15 2023 GMT
            Not After : Feb 18 01:45:15 2026 GMT
        Subject: CN=cfe58959-04ed-4c71-a14d-8066ccb1353a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:96:d2:61:1c:86:bc:79:74:7c:b0:fb:74:23:
                    96:40:52:6e:e0:35:6a:24:a8:97:e4:c8:92:57:e4:
                    fe:2b:34:c6:5d:80:57:b0:dc:03:ee:7d:65:0e:92:
                    1c:76:f9:50:14:a2:e2:cc:72:84:50:08:4f:6c:03:
                    19:08:e4:9f:54:4d:f1:22:04:ed:ac:d0:5c:c2:0c:
                    09:d8:60:f1:6d:a9:5a:ca:6c:7c:53:cc:a8:82:cd:
                    c4:b5:a0:c0:c9:a6:16:17:a7:d0:24:dc:8d:84:38:
                    3c:23:de:b7:0a:5e:29:56:19:27:69:94:09:00:09:
                    b6:1f:4e:9b:26:08:15:f8:d6:1e:f3:cb:b2:7d:10:
                    15:b0:ba:2c:6b:85:0d:e6:8e:40:96:98:f7:15:59:
                    18:50:d8:58:0c:b1:14:b9:64:05:c8:9d:4b:79:7a:
                    db:bd:f0:bc:75:30:76:f8:92:60:e2:1e:8e:08:76:
                    1d:43:0b:e9:9f:32:2e:8f:5c:3f:ba:15:34:e3:fc:
                    b1:49:a4:7f:db:d0:ff:48:db:f1:76:1a:a1:ea:61:
                    fb:24:fd:bd:88:3b:23:ca:b7:8a:d1:f9:44:ea:a0:
                    73:3e:7d:5c:e4:3c:ea:34:56:e1:0c:56:ed:bf:d0:
                    8b:cd:67:71:24:f2:91:dc:eb:28:b2:8a:75:7e:b7:
                    a9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0F:7A:DD:DC:2F:69:9D:32:78:64:97:BD:79:BA:5B:45:CD:C5:EA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/cfe58959-04ed-4c71-a14d-8066ccb1353a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.88.0/24
                IPv6:
                  2620:a2:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400323

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d0:b3:1c:14:5a:5c:57:e3:4f:b8:63:e8:8f:36:03:62:ef:
         d7:84:74:a5:81:4c:ba:c4:41:ce:8d:01:2c:ef:83:7c:52:2d:
         33:7a:8c:7a:26:30:fc:ce:b8:9c:99:e5:43:68:aa:96:f0:d5:
         24:ac:98:31:72:bd:2c:5b:9d:a3:70:8e:85:fa:c5:88:78:46:
         b1:c1:2a:2d:e4:29:04:11:e2:d5:91:fd:f3:8b:4c:4d:85:c1:
         2f:2b:ae:46:38:21:5c:a9:aa:34:c0:03:85:ca:a3:85:af:0a:
         f8:f2:f7:83:e2:e3:1a:48:6e:e7:e2:8d:e1:c7:a2:15:61:23:
         6d:d2:eb:0e:3b:3a:04:ba:e0:af:b0:ea:f4:4e:92:46:33:c3:
         47:4e:9b:4d:55:91:ef:3c:d2:a1:4e:28:ab:81:9b:6a:5d:c2:
         e4:ec:b1:1a:8d:34:7c:93:36:36:d6:4c:61:b5:07:28:d2:a9:
         1a:71:28:a4:b3:3b:50:5a:d6:b6:d8:c9:2c:d4:84:b3:df:17:
         ff:0f:60:c6:e1:c6:02:f7:6c:e1:bf:cd:8a:5d:5b:f8:05:9d:
         7e:40:ba:58:5d:e4:1e:51:58:37:23:7b:85:1d:39:f0:67:dd:
         aa:b1:f8:0f:7a:50:8c:fc:8b:c3:f8:53:68:61:c5:b1:79:5d:
         cc:a9:7b:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----