Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
File:                     7cbcff68-23bb-4d4e-a703-bab3115bf054.cer (raw, json)
Hash identifier:          CxvTxPM5sDkMBMOt/mpSfLkksO225OcR9gtZNtCeiwQ=
Subject key identifier:   41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858451FA363B4B34BF103BB511080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 07 Mar 2024 01:45:20 +0000
Certificate not after:    Wed 10 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 23185
                          IP: 72.13.112.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:a3:63:b4:b3:4b:f1:03:bb:51:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Mar  7 01:45:20 2024 GMT
            Not After : Jun 10 00:45:20 2026 GMT
        Subject: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6f:26:aa:35:2d:bf:05:a5:51:f2:a4:5c:43:
                    e8:a1:bd:99:af:32:d1:2d:28:41:a1:11:d4:f7:a9:
                    5a:13:94:74:e7:ad:2f:cb:09:b8:47:99:ec:1e:b3:
                    d4:84:83:ea:f3:cc:ca:14:17:37:84:a4:2d:c6:e1:
                    85:b3:34:80:35:c6:98:37:2b:9c:6f:07:09:c7:45:
                    25:62:34:62:f0:bd:e5:3d:4e:9a:a5:b2:a4:90:23:
                    c9:0e:9a:65:28:cc:1f:cb:11:30:fb:0e:35:5e:12:
                    f2:18:c8:c6:d1:14:c3:7c:5c:64:9c:9e:fe:38:31:
                    28:c9:82:6d:a7:0d:b2:bb:78:7d:aa:d1:22:e0:96:
                    eb:0d:73:d3:1a:8c:ee:54:c7:0c:36:26:19:b3:e7:
                    40:67:e4:11:69:60:ba:82:26:36:8b:b5:4e:ee:f3:
                    8f:8a:66:6b:c6:57:5b:28:1e:71:8b:50:82:b1:04:
                    7d:35:53:8f:77:2c:b7:c0:eb:9d:59:c1:a8:57:47:
                    5b:3d:bb:94:2f:bf:84:41:0e:91:d7:6c:08:58:87:
                    b6:8b:d8:d5:92:84:b2:76:f9:44:95:a4:43:93:d3:
                    d6:07:08:d3:1a:f0:a8:53:73:25:d1:58:ec:a8:31:
                    d8:1a:7f:5e:a7:10:36:ce:65:35:1b:b8:1e:d8:39:
                    d1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.112.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23185

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:91:14:31:92:a8:98:d9:7c:3a:8f:12:6b:b4:c1:b1:fe:4f:
         42:d8:10:56:17:42:59:96:a1:10:6b:9d:1d:49:9d:aa:59:0e:
         6b:ca:98:58:69:8c:33:e3:d6:2d:73:e9:e1:74:18:e5:61:28:
         f9:45:24:c2:bd:06:a3:3d:94:c1:2d:c5:99:97:28:ab:41:95:
         52:f7:ff:f5:b7:98:3e:c0:e0:21:fe:bd:a2:f2:a6:09:3d:3c:
         64:fb:6c:f1:cf:3a:66:1e:ef:ee:46:22:1d:5e:8d:76:01:fe:
         df:9a:2e:e8:52:83:8e:ef:84:0d:d5:51:ea:07:b3:e2:eb:69:
         6f:2c:a7:c1:9b:dd:39:0a:83:81:fd:19:dc:dd:7a:6c:16:f0:
         eb:f9:b2:83:0f:05:d2:0f:3a:63:34:58:00:c8:84:aa:71:cd:
         e5:ba:17:8c:95:b0:36:6f:5f:5e:48:51:fa:04:a9:9d:19:79:
         b7:f0:e0:4a:89:a4:eb:28:20:04:c8:6b:86:ab:c0:c8:95:c3:
         60:b3:12:1d:68:4b:f2:bd:c1:e0:52:c3:b8:a4:d3:0b:25:3e:
         f0:eb:3d:a7:19:c3:20:31:32:05:eb:df:66:ce:b3:4a:18:3a:
         95:88:3c:55:a2:82:59:b7:0a:93:3b:ab:9a:c1:52:cd:16:66:
         8a:d8:1a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----