Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a.cer
File:                     b3a75266-06ce-463f-bfbd-1da0c867f18a.cer (raw, json)
Hash identifier:          LngwOe8VivuWKTqtFbOoxFcj4hN1Du1HjLejV6L8CHc=
Subject key identifier:   BB:30:9A:65:E0:81:49:49:64:B4:87:E8:4C:93:36:77:10:84:CC:F5
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285842B957161B072A27F286803280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/b3a75266-06ce-463f-bfbd-1da0c867f18a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 31 Jul 2023 00:45:16 +0000
Certificate not after:    Sun 02 Nov 2025 00:45:16 +0000
Subordinate resources:    AS: 55041
                          IP: 198.177.255.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b9:57:16:1b:07:2a:27:f2:86:80:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jul 31 00:45:16 2023 GMT
            Not After : Nov  2 00:45:16 2025 GMT
        Subject: CN=b3a75266-06ce-463f-bfbd-1da0c867f18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:26:09:f9:5b:40:32:03:d1:ba:33:8f:c2:
                    8e:17:2c:39:01:8d:eb:44:b8:2d:75:ab:54:88:2e:
                    91:9a:f8:73:6e:8d:f4:d1:c1:ae:bc:83:06:a6:94:
                    f3:ea:9d:e7:db:f0:bc:43:29:03:ae:a2:2e:a6:40:
                    76:86:77:c9:88:5c:c5:d8:0e:8c:2a:0c:7d:d5:eb:
                    dc:19:71:83:7b:14:1b:88:a7:41:3e:b2:25:11:86:
                    b3:3a:78:42:47:d9:28:b2:49:b0:08:83:b7:1a:75:
                    93:58:1e:0d:7c:4a:6a:88:c7:0f:4c:57:71:9b:73:
                    26:86:ba:20:4b:7b:f9:a2:26:83:02:aa:32:b0:1b:
                    1f:14:2a:e3:77:ee:ea:76:23:99:41:88:9d:2f:ef:
                    8d:dc:dd:08:be:6b:4e:ed:d3:2a:1b:6a:65:bf:37:
                    75:18:d3:f2:0a:55:50:16:5a:1e:64:6f:97:46:db:
                    8d:b2:1d:2a:a6:0c:24:3b:8c:1b:af:21:63:54:c4:
                    6b:45:e4:9f:54:c3:de:db:1e:c6:0d:cf:dd:be:59:
                    e2:15:8b:56:bb:78:21:1a:ce:0e:ca:88:07:2f:0e:
                    22:1b:48:db:1f:42:0b:ea:aa:e5:c8:36:5a:40:30:
                    51:e4:8b:90:32:4b:74:d4:5e:24:f4:43:72:0e:94:
                    f8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:30:9A:65:E0:81:49:49:64:B4:87:E8:4C:93:36:77:10:84:CC:F5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/b3a75266-06ce-463f-bfbd-1da0c867f18a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.255.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55041

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:00:c2:c2:4e:2c:17:48:89:63:1a:44:7c:57:b8:81:6e:6d:
         2b:0f:81:28:27:2d:e7:10:84:22:85:fd:76:72:46:45:6a:b0:
         1f:97:37:1c:de:71:0a:fc:11:47:98:41:1f:cd:37:58:05:ad:
         cc:9f:75:12:a3:2e:38:3b:77:32:32:1c:37:78:72:d1:b6:f6:
         fd:a2:7f:a9:55:26:6c:eb:1b:39:cb:ea:ad:fe:1b:a5:81:e5:
         af:28:92:04:15:a0:e9:14:5d:00:bb:9a:ee:7a:25:a5:d6:87:
         3d:cb:6c:19:8c:5f:c4:aa:8f:7b:22:9e:bd:83:59:7b:7d:ae:
         d3:60:d2:60:79:63:db:58:c9:bd:94:8a:e6:8e:51:70:ac:7f:
         e1:e1:7b:e3:62:c3:17:02:9e:be:cd:32:fa:61:b3:d6:03:c5:
         34:a4:da:ea:96:c8:f0:c9:23:6b:b3:a5:4d:c9:6c:4e:6e:a7:
         3a:1b:af:45:c9:b1:47:96:e8:67:28:89:86:38:a6:9b:0c:ea:
         2d:9f:15:35:13:30:f3:d9:30:b7:fe:68:4e:81:a4:8b:51:88:
         79:96:c8:e9:c9:e6:cb:09:cc:4b:d0:10:af:4f:1d:26:94:46:
         15:95:5d:e2:1a:d0:92:dd:35:cf:2a:3c:f2:39:b3:3f:4b:b4:
         75:fd:30:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----