Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101.cer
File:                     5deff3d1-d421-448c-9f01-4b862c33f101.cer (raw, json)
Hash identifier:          ErAFVqcypcQiiuMvaQUlJGbdpP3mjfGdN5ZW27AiHDk=
Subject key identifier:   FC:E0:A2:44:24:B7:BD:CD:93:76:35:B7:ED:E9:FE:B6:81:37:25:CD
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285843F4EC27CF787776EBAEE176C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/5deff3d1-d421-448c-9f01-4b862c33f101.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 21 Nov 2023 01:45:15 +0000
Certificate not after:    Mon 23 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 25657
                          IP: 204.62.114.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f4:ec:27:cf:78:77:76:eb:ae:e1:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Nov 21 01:45:15 2023 GMT
            Not After : Feb 23 01:45:15 2026 GMT
        Subject: CN=5deff3d1-d421-448c-9f01-4b862c33f101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:43:cb:91:48:16:de:16:4e:2b:a5:63:79:
                    b1:e8:9a:0a:37:81:5e:7a:7a:a1:fd:0c:23:db:52:
                    69:6d:8c:6b:a6:de:b8:ab:06:73:48:96:a3:9e:cd:
                    44:b7:52:18:31:f0:df:f3:16:be:f7:9d:1a:b3:92:
                    2a:08:4a:22:9a:00:21:05:ef:e6:39:d1:af:66:45:
                    3d:bb:01:ba:e5:15:b7:7c:8b:32:8d:ad:47:f7:f8:
                    86:c3:1a:8e:e7:12:59:5f:d1:b4:5a:d2:69:b1:b7:
                    c0:7b:9a:04:8c:f4:19:76:fb:3f:f0:c4:34:a2:a8:
                    99:c3:ac:c7:5f:df:3a:00:42:c4:b1:9c:ff:8b:43:
                    bf:a6:00:46:d5:af:b0:04:a6:6d:6e:d1:50:1e:79:
                    9f:bd:9c:f1:0b:11:29:49:d6:5f:4a:8a:f1:6a:ca:
                    11:00:83:b0:6c:7b:60:11:72:8e:ce:11:a3:3d:bf:
                    ca:a2:f8:7d:2b:23:17:ae:67:2d:a3:ec:38:e8:56:
                    7a:b5:6c:67:bb:a5:58:a2:26:be:37:8f:aa:d4:84:
                    c9:9b:98:0e:40:87:1e:55:81:8e:53:23:74:fa:52:
                    54:8b:c2:02:2c:dc:db:60:aa:74:c3:cd:57:a1:61:
                    23:3c:69:7a:50:97:62:59:84:5f:28:10:26:a7:4c:
                    46:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E0:A2:44:24:B7:BD:CD:93:76:35:B7:ED:E9:FE:B6:81:37:25:CD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/5deff3d1-d421-448c-9f01-4b862c33f101.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.62.114.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25657

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:d7:4f:c7:fd:34:42:60:4c:56:af:9e:22:69:d6:cb:2f:96:
         1a:50:e1:4f:6b:61:54:7f:a4:16:65:eb:f7:77:45:c1:56:89:
         90:44:cb:34:f1:42:ba:67:87:8c:83:d6:1f:82:3f:a9:ae:20:
         6c:45:4c:0f:33:d0:ea:00:c8:bc:1b:56:69:d7:0a:ae:3f:8c:
         d5:0d:be:8d:fe:e1:20:5d:ec:1c:72:ab:03:e7:b2:2d:2f:c6:
         55:18:4e:f7:2e:98:35:b4:53:e3:ec:79:88:2b:3f:5c:75:67:
         a8:8b:50:57:f2:47:42:07:af:28:80:ee:53:32:ff:90:d8:dd:
         83:98:dc:f2:4e:69:03:ad:70:66:0d:e5:c5:ce:a2:20:d7:f0:
         1b:dd:4e:09:d1:5b:d2:69:c9:b7:03:84:c5:4f:44:36:66:cb:
         e9:cc:ba:dc:e7:fc:ed:9c:9e:18:c3:3c:dd:cb:fa:79:04:b4:
         6d:62:7a:28:77:c0:6f:8c:a1:fc:ff:8b:51:1e:2e:cc:81:0a:
         db:2b:57:87:0a:76:14:bd:8d:0e:cd:0d:c2:37:f4:57:e8:b0:
         cb:a3:b5:de:58:be:4b:00:25:8a:bc:8b:c0:df:37:2d:8f:a0:
         46:3b:8f:05:05:a1:dd:bc:d4:b6:cc:ea:e6:21:f2:d9:8e:5f:
         65:a2:f6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----