Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40057576-f6e8-41e7-ac15-9662c9d4a3af.cer
File:                     40057576-f6e8-41e7-ac15-9662c9d4a3af.cer (raw, json)
Hash identifier:          XzKzQtV36Fc2q6iNS2nx/5bXBi2BknbTXU3jcBoQBr4=
Subject key identifier:   04:03:D6:5C:0C:25:50:14:05:85:05:38:59:A2:48:95:FB:51:8F:62
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E48351E2D65A209193F41DC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40057576-f6e8-41e7-ac15-9662c9d4a3af/40057576-f6e8-41e7-ac15-9662c9d4a3af.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40057576-f6e8-41e7-ac15-9662c9d4a3af/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sat 19 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 36063
                          IP: 66.203.128.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:51:e2:d6:5a:20:91:93:f4:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 19 19:06:39 2025 GMT
        Subject: CN=40057576-f6e8-41e7-ac15-9662c9d4a3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b8:86:1a:d6:79:6e:55:08:92:0d:56:ef:51:
                    f4:e5:12:49:58:52:5e:70:8c:40:48:9c:34:93:a4:
                    13:5a:6e:5c:e2:0f:a0:b0:dd:1f:09:e2:66:75:47:
                    15:1d:cf:de:c9:16:3a:2d:39:32:ba:d7:f7:a0:ed:
                    18:7c:9f:03:10:c0:c5:44:02:ac:d2:54:d0:b6:6d:
                    67:f8:ae:9a:13:57:c9:f8:67:57:8b:29:c6:26:46:
                    3e:eb:8f:97:78:49:9c:7d:67:4f:b1:8a:1c:ee:a5:
                    e0:8e:d8:93:41:95:32:f5:b6:ca:1f:60:65:3b:eb:
                    ca:26:79:df:87:e3:f5:d7:fd:09:6d:af:8c:c5:e1:
                    90:5e:42:4b:8b:ee:af:64:ff:61:db:b2:06:d1:b6:
                    85:f5:f7:11:4e:3e:4e:4d:5f:a9:63:9f:38:06:bc:
                    59:d9:65:9e:fd:1b:cd:19:70:f9:92:0e:e0:32:52:
                    65:1d:70:06:33:41:5f:3d:a5:47:df:aa:54:77:e0:
                    db:3e:d2:a0:62:6a:74:21:28:d3:04:24:89:be:22:
                    75:50:d2:af:6c:2c:f2:08:3b:39:c7:ff:c9:da:a7:
                    2c:5c:3f:a7:50:18:29:c9:d2:1e:81:5b:b6:81:1e:
                    5c:2f:c0:3d:5d:3b:b6:38:d5:ab:5d:b2:ea:b3:be:
                    b9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:03:D6:5C:0C:25:50:14:05:85:05:38:59:A2:48:95:FB:51:8F:62
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40057576-f6e8-41e7-ac15-9662c9d4a3af/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40057576-f6e8-41e7-ac15-9662c9d4a3af/40057576-f6e8-41e7-ac15-9662c9d4a3af.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.203.128.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36063

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:76:90:02:5a:7c:5b:a5:87:8e:8d:fc:3a:28:f9:8a:30:67:
         61:76:a0:6e:08:8a:0d:19:21:2c:70:d8:8c:8a:01:8e:05:cc:
         e2:57:5b:32:50:c7:dc:db:a3:4c:b3:3d:dd:07:07:b9:20:91:
         12:e3:08:c8:69:48:81:2a:80:08:87:2d:67:38:48:c1:23:1a:
         fa:ce:30:a4:86:4e:61:c7:91:4d:72:94:61:c5:04:da:0f:fb:
         e4:11:b6:d6:aa:d2:e9:d9:44:d6:88:47:67:da:8a:89:b1:42:
         06:58:13:98:d5:45:90:24:68:00:a0:e1:58:fa:2b:d3:62:71:
         af:54:9c:07:2f:b7:30:ac:31:7f:10:fc:66:50:ce:32:ab:5a:
         4a:d9:b6:4d:ef:32:25:92:39:69:5d:ca:cc:f8:ec:b1:80:24:
         b5:77:1f:b4:ad:a5:1f:d5:9d:5f:76:bf:72:da:8a:d7:d9:a8:
         d7:56:fb:c9:9a:a8:27:0c:4f:6f:21:d0:2b:06:51:12:d5:fa:
         e5:b4:ad:69:ba:8a:44:28:7e:04:fe:59:b8:50:8e:a4:00:8b:
         24:a6:21:66:7c:af:d2:7e:d5:07:19:81:9b:4d:e4:d1:ac:e5:
         9b:54:30:9f:89:e8:20:49:31:0c:9b:47:1b:53:59:87:19:a7:
         18:12:a7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----