Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc.cer
File:                     5482ccc0-e4dd-479e-a029-460a79acc9cc.cer (raw, json)
Hash identifier:          p+uHwCMyA7cQi+xOviAe3fitHsEIm5pUhl3HL3ttmP0=
Subject key identifier:   69:9D:15:4F:E0:F2:33:FA:3E:5F:B7:BD:22:BF:A1:B0:3E:95:8D:EC
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285844DCA2F8A51444329B6E636B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/5482ccc0-e4dd-479e-a029-460a79acc9cc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 12 Feb 2024 01:45:20 +0000
Certificate not after:    Sun 17 May 2026 00:45:20 +0000
Subordinate resources:    AS: 32809
                          IP: 63.141.0.0/20
                          IP: 65.23.160.0/19
                          IP: 209.188.64.0/20
                          IP: 2607:f0f8::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:dc:a2:f8:a5:14:44:32:9b:6e:63:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Feb 12 01:45:20 2024 GMT
            Not After : May 17 00:45:20 2026 GMT
        Subject: CN=5482ccc0-e4dd-479e-a029-460a79acc9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:37:97:b4:ed:5b:86:04:41:2d:2b:98:a4:
                    7c:9b:ab:3c:31:b8:6c:e5:00:21:b5:35:0a:c0:8c:
                    ff:15:1b:f3:5a:42:91:dd:6b:72:c1:09:cb:f2:d3:
                    65:78:df:9d:24:99:b9:d1:87:3b:4b:d3:3a:f4:80:
                    59:ca:b2:c1:fc:70:b5:a9:9b:51:c7:39:77:25:a8:
                    ac:f5:cf:e1:45:46:c7:9e:c6:e9:35:4d:2b:4e:37:
                    a9:d1:4c:94:6b:08:2d:00:39:6c:ba:61:db:00:db:
                    1a:75:06:83:34:c5:66:ad:a6:1d:bb:8b:b8:2c:36:
                    1c:b7:a1:de:43:64:bc:b3:8e:24:30:13:2d:5d:37:
                    bc:c9:d2:e6:81:a0:5b:8a:6b:a7:86:bb:76:d4:97:
                    f7:44:b6:50:46:26:85:fb:f0:87:8f:0e:79:57:e6:
                    fe:78:64:40:1e:67:59:14:a0:e2:38:a6:23:13:e3:
                    c8:74:15:4d:a3:1a:e9:a4:13:26:2b:13:6a:6f:1c:
                    51:3e:a6:c7:95:6f:54:e5:b1:58:90:f5:07:74:de:
                    55:86:9b:99:36:76:8a:f2:92:1a:75:d5:c1:cb:a9:
                    e4:3f:6f:4c:2f:57:8e:d7:09:a1:59:fb:9a:95:04:
                    2a:0c:c1:04:9f:d3:69:21:54:03:ae:a9:90:64:ec:
                    2d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9D:15:4F:E0:F2:33:FA:3E:5F:B7:BD:22:BF:A1:B0:3E:95:8D:EC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/5482ccc0-e4dd-479e-a029-460a79acc9cc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.0.0/20
                  65.23.160.0/19
                  209.188.64.0/20
                IPv6:
                  2607:f0f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32809

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:73:ec:7a:18:26:a8:5f:6c:92:cd:3a:54:17:a9:c2:a5:b7:
         b0:a2:24:79:04:81:39:4b:72:cf:02:a9:ee:77:4f:e5:8e:36:
         37:e3:3a:1f:d3:72:a0:e4:87:ec:4d:29:ae:aa:27:c5:1c:76:
         01:51:e9:cd:c1:01:25:69:77:f8:86:40:92:59:47:f3:88:d1:
         6e:c0:e9:45:0c:0b:b5:88:f6:f3:21:94:72:a1:d8:57:d6:6e:
         8a:dd:13:a2:8a:c6:b6:f9:d3:bf:3f:c4:b6:7b:47:ee:0c:5c:
         37:d7:67:d6:48:57:c0:6a:76:f1:16:2b:c8:0d:00:62:6a:1e:
         95:08:c2:a3:f6:7c:2d:d2:11:b9:1f:14:eb:8f:5a:8e:7f:39:
         d8:cf:b7:03:d9:46:ae:24:a2:af:8b:1b:1b:24:98:55:a8:7b:
         91:da:32:34:a6:e2:71:d6:26:10:39:f7:d2:c1:4b:97:bd:60:
         a7:85:90:d8:46:56:e9:66:07:67:02:2a:05:9a:a9:6e:8e:84:
         4b:53:53:f5:45:6e:48:54:4e:7c:10:13:ef:ce:81:cd:98:3a:
         dd:47:3e:59:1b:b8:18:a8:c1:0a:59:67:a4:7b:f4:3d:17:93:
         d0:8a:b3:b5:b6:36:55:fb:64:5d:9e:9e:be:56:19:35:38:97:
         76:41:5a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----