Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b.cer
File:                     8332c7ea-33d5-482c-9c3e-a035a45cee4b.cer (raw, json)
Hash identifier:          9kUmm+6Vbh3TSr0S7QUeU3VrMfdtnDlPRuMNkokxObI=
Subject key identifier:   CC:8E:79:4C:8C:94:AF:6B:0C:6D:F1:03:95:4E:3B:D6:BA:A0:98:C8
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328584336F7EAD2C4126D6071E05480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b/8332c7ea-33d5-482c-9c3e-a035a45cee4b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 14 Sep 2023 00:45:22 +0000
Certificate not after:    Wed 17 Dec 2025 01:45:22 +0000
Subordinate resources:    AS: 23313
                          IP: 199.16.248.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:36:f7:ea:d2:c4:12:6d:60:71:e0:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Sep 14 00:45:22 2023 GMT
            Not After : Dec 17 01:45:22 2025 GMT
        Subject: CN=8332c7ea-33d5-482c-9c3e-a035a45cee4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8a:d3:d9:23:98:bf:90:f9:73:1d:2d:1e:53:
                    52:a4:31:b7:a7:18:46:98:44:0f:12:a7:57:32:b3:
                    df:cc:20:a5:af:56:cc:cc:f4:68:cb:63:03:13:a2:
                    be:43:86:e9:0f:54:c5:8f:35:95:60:cd:92:db:c5:
                    76:e6:7a:46:21:15:bc:05:bc:74:d0:67:79:2e:fe:
                    e0:dd:a4:43:0b:49:67:7b:46:22:8f:40:fb:d9:92:
                    24:d4:2f:36:a7:4d:a6:f7:e9:1c:5a:af:e8:68:5a:
                    3a:da:42:52:18:00:a7:15:35:b2:22:25:dc:32:6f:
                    f9:c8:ce:19:29:92:e2:d4:21:de:6d:f4:0a:95:c1:
                    26:a6:37:c2:de:8f:c7:1e:5e:3b:a3:b2:20:fd:05:
                    68:61:79:2f:c1:91:99:45:8e:0a:48:da:29:dc:c5:
                    14:51:7b:c1:00:ef:d4:21:20:87:18:0f:11:05:1d:
                    ec:4a:05:e1:33:7b:6c:fd:53:d8:ec:36:70:ea:e7:
                    a8:73:a4:97:57:1a:70:c1:ac:32:d4:c8:71:f7:c9:
                    d1:b7:27:0c:21:43:a1:9c:e3:52:c9:85:72:e6:1e:
                    85:03:44:5e:63:c8:7e:e4:03:95:66:61:87:a6:56:
                    2b:bd:46:83:07:cc:e6:4c:81:b4:9f:ab:dc:f1:80:
                    bb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8E:79:4C:8C:94:AF:6B:0C:6D:F1:03:95:4E:3B:D6:BA:A0:98:C8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b/8332c7ea-33d5-482c-9c3e-a035a45cee4b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.16.248.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23313

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:5d:11:f5:14:81:02:08:f4:e8:61:ca:15:a9:cb:16:71:6b:
         a0:ad:77:f0:34:a2:e5:0d:1d:17:78:d4:f6:51:c4:68:e4:ce:
         11:ab:54:71:d7:dd:27:4f:8f:3f:44:ad:29:cb:c4:0b:20:a1:
         7a:39:6b:8f:b5:ff:fb:57:c8:ef:c8:99:0b:e5:69:1e:e2:82:
         65:b0:90:5b:ab:b6:03:b2:4a:c1:2a:31:9e:5e:7f:ef:75:f5:
         77:9f:a2:a8:07:c3:bc:57:7d:5d:1d:7e:6c:33:4d:06:a7:86:
         07:43:7c:6c:a9:20:4d:58:af:a9:4c:f6:50:45:1c:cd:0b:1d:
         39:c0:60:db:ee:f6:61:17:1e:6c:59:3a:6f:71:02:a9:98:88:
         71:79:62:76:c6:0e:7b:2a:e8:96:ca:c2:b0:4d:2c:15:ef:32:
         57:a8:ef:f5:05:82:41:15:8f:0e:53:05:79:99:ba:40:a9:08:
         01:1e:43:99:fe:5b:13:6c:71:77:14:c7:36:82:c7:58:3e:d2:
         ce:a0:ba:78:43:6c:b6:aa:d3:6c:05:51:51:cc:c3:7f:3c:5f:
         7d:66:6f:d5:2a:5f:65:b2:fc:b8:45:a1:f4:8c:c7:64:b2:35:
         c5:a4:16:77:d3:4f:d9:4a:20:8e:29:d5:97:f5:23:8d:fa:3b:
         f0:c0:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----