Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb.cer
File:                     91b93de6-6446-4623-a181-5425af4f85cb.cer (raw, json)
Hash identifier:          R9Gpff9Skt8Whm3W0y2PdWKqgLtiKdUBKssNW88dlDU=
Subject key identifier:   FF:17:C4:E9:06:5A:45:02:E5:72:C0:A9:7E:3D:59:08:C6:24:D3:D7
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285844D70D9B2EAD70D061075B4400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/91b93de6-6446-4623-a181-5425af4f85cb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 10 Feb 2024 01:45:20 +0000
Certificate not after:    Fri 15 May 2026 00:45:20 +0000
Subordinate resources:    AS: 36459
                          IP: 140.82.112.0/20
                          IP: 143.55.64.0/20
                          IP: 192.30.252.0/22
                          IP: 2606:50c0::/32
                          IP: 2620:112:3000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d7:0d:9b:2e:ad:70:d0:61:07:5b:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Feb 10 01:45:20 2024 GMT
            Not After : May 15 00:45:20 2026 GMT
        Subject: CN=91b93de6-6446-4623-a181-5425af4f85cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3f:62:c0:82:10:dd:9b:d7:8c:12:3b:12:f2:
                    c8:4e:26:90:48:48:b8:cb:bc:c0:b0:b1:6e:9b:c6:
                    cc:87:34:1f:f5:41:3a:0b:ba:b7:0a:ce:11:23:b2:
                    fa:ea:e4:cf:0e:6c:22:27:7d:28:ae:0e:62:fc:a1:
                    4a:db:14:14:8c:88:bd:f5:78:c3:e0:79:e7:f1:9c:
                    23:88:1c:6f:d0:ca:f8:7b:6b:1d:0b:8d:26:ee:f1:
                    6f:79:24:dd:4d:68:23:2b:1e:11:7a:31:4c:a0:06:
                    ab:46:26:7a:0e:e8:12:9e:e6:4f:0a:8b:1f:40:48:
                    45:e5:6b:0f:93:90:49:bd:5e:2a:d4:b0:eb:fb:59:
                    c8:3d:39:d4:2b:9e:36:bf:50:8a:4f:22:83:7e:75:
                    be:44:d9:99:14:4d:43:23:0d:45:c6:5a:e4:fa:ca:
                    1b:a0:fd:35:c2:22:24:d2:e8:5e:e3:35:a0:4a:a1:
                    9f:ee:a8:4f:ac:3d:5c:c9:da:9c:ec:0e:46:29:e7:
                    9d:e6:e2:a8:87:3a:ef:79:b7:f6:c7:d6:67:57:24:
                    d3:71:11:e4:75:ae:f9:85:cc:d2:92:2b:6e:b8:d6:
                    77:37:65:24:a1:0d:0c:57:c1:a5:39:2e:ca:7f:75:
                    95:45:40:8c:7b:a3:d3:c1:96:cd:ee:ca:ab:31:d4:
                    1b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:17:C4:E9:06:5A:45:02:E5:72:C0:A9:7E:3D:59:08:C6:24:D3:D7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/91b93de6-6446-4623-a181-5425af4f85cb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.82.112.0/20
                  143.55.64.0/20
                  192.30.252.0/22
                IPv6:
                  2606:50c0::/32
                  2620:112:3000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36459

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:46:03:ea:5c:07:d8:d4:cd:b1:fa:53:62:f5:3d:a2:e1:81:
         51:3c:67:16:9f:d8:da:5b:c4:a4:39:6c:14:9f:81:0b:53:f5:
         aa:04:33:8a:55:6c:0c:0b:61:a7:08:bd:c1:3a:63:1e:dd:ac:
         55:e7:c7:00:9d:d1:fe:71:a4:3a:b6:7c:6e:c8:30:e0:18:23:
         ed:57:5c:29:a1:a7:a2:dd:23:e6:ac:28:c5:a3:e0:41:77:b9:
         47:ea:1f:ee:6f:81:ec:9f:86:b0:e5:74:dd:97:02:54:c1:a5:
         9e:a1:51:7a:4c:2f:9c:6c:bf:f1:50:36:bf:c3:6b:ad:a8:61:
         15:be:69:bd:0b:c7:32:28:f5:1f:3c:46:f6:09:62:30:95:3c:
         7c:0f:31:73:35:53:12:2a:43:83:b8:0f:a3:e5:a9:b6:c9:75:
         95:ca:58:07:ce:c0:bd:b7:a6:d5:9c:b9:b5:93:5c:7f:98:00:
         c0:6f:34:c3:c3:35:96:5a:b2:a0:46:91:38:c0:34:93:f4:e5:
         1a:64:70:4b:01:77:d4:8a:3f:18:13:71:f8:cf:ca:04:0e:d1:
         c1:36:ea:ba:b5:3e:14:62:6c:59:5f:4d:ea:ae:a4:c7:5c:18:
         e5:a1:38:eb:01:0d:ed:23:97:08:bc:e8:74:1a:c2:65:28:dd:
         e6:3d:8e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----