Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a.cer
File:                     d4919c1e-24c8-430e-8811-91383c31b96a.cer (raw, json)
Hash identifier:          D4m3M37ZxRoly/6CwPXFupL+3VK7MYclsKDLkUxJXYo=
Subject key identifier:   DF:24:14:6D:BE:CF:7B:A7:A3:79:0C:17:46:95:44:80:14:78:29:3C
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584389BCBD469A43D413A33E3300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/d4919c1e-24c8-430e-8811-91383c31b96a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 13 Oct 2023 16:18:14 +0000
Certificate not after:    Thu 22 May 2025 19:06:39 +0000
Subordinate resources:    AS: 1288
                          AS: 3856
                          AS: 10927
                          IP: 2620:0:870::/45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:89:bc:bd:46:9a:43:d4:13:a3:3e:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct 13 16:18:14 2023 GMT
            Not After : May 22 19:06:39 2025 GMT
        Subject: CN=d4919c1e-24c8-430e-8811-91383c31b96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:62:62:0c:57:22:ff:0d:31:dc:fe:56:67:
                    a3:88:71:5c:b2:af:03:fb:3a:1d:f3:dc:91:d6:ca:
                    16:c7:1f:99:ef:d2:93:62:cc:99:42:29:71:10:ce:
                    87:c6:3d:f2:6a:c1:45:46:58:6c:52:bd:06:70:7b:
                    65:f7:e7:16:52:0b:1c:eb:70:fb:d8:2e:d5:7c:f8:
                    54:3e:8f:8d:01:d2:9b:b8:c4:8c:9b:08:f9:71:3d:
                    4f:47:25:16:50:bf:4d:cf:a2:a3:1e:51:f8:0a:4b:
                    fb:13:6c:36:89:08:74:81:34:73:be:63:0c:08:9c:
                    cc:cb:5b:17:26:8c:72:57:31:56:bd:6a:35:cb:93:
                    96:40:1c:e4:6f:60:a8:88:63:63:f6:05:7b:93:85:
                    d7:b1:29:06:6c:74:aa:4b:e3:52:5f:5c:52:af:fa:
                    37:bf:78:08:78:27:a9:c8:6b:be:50:c8:ad:ca:02:
                    43:9e:4a:72:9d:23:a7:b6:20:e7:05:dc:0f:00:af:
                    2a:36:8f:53:7b:d1:9b:2f:b4:00:8f:41:db:fa:97:
                    95:04:bf:f4:60:51:3f:20:5e:ce:fe:a8:46:bf:16:
                    87:bb:a9:01:94:28:c1:18:bf:5c:ab:d1:c0:dd:36:
                    fd:ed:da:3e:43:17:a9:d4:a6:78:f3:b6:e2:a0:c2:
                    35:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:24:14:6D:BE:CF:7B:A7:A3:79:0C:17:46:95:44:80:14:78:29:3C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/d4919c1e-24c8-430e-8811-91383c31b96a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:870::/45

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1288
                  3856
                  10927

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:c2:ed:73:a5:50:05:ce:73:31:f8:88:f0:ee:df:e7:2a:20:
         fd:3e:03:4a:b2:52:ec:51:fc:f8:e0:fc:83:41:df:7f:c9:95:
         38:84:34:a2:29:21:d7:67:d3:4b:22:fc:0c:f8:84:2e:4f:90:
         85:bd:c7:0d:6a:e0:5c:ff:f0:58:38:5c:9e:0d:48:bc:05:d2:
         a9:3f:71:dc:4c:fe:8c:60:bc:b4:89:b6:24:fd:76:8c:06:9c:
         f5:1e:ad:c9:e8:75:5c:26:95:80:ef:c4:1c:a0:bd:2c:ec:1c:
         66:b8:5c:ec:9e:71:5a:a0:de:a0:5a:99:80:05:79:a6:43:a3:
         8b:85:f9:46:1f:2e:30:59:ed:fa:2b:7c:7c:1e:6e:d6:bb:8e:
         a9:db:07:f3:a2:8c:11:21:21:74:db:01:28:35:f5:6b:d5:f2:
         ea:af:cd:13:b4:a2:63:49:ef:cd:23:b3:e7:69:dd:b2:43:32:
         13:8d:d3:2b:a6:86:fb:31:36:6e:7d:4b:79:15:c4:32:f2:56:
         8c:8d:97:c6:7e:5f:aa:32:c4:df:d8:34:0f:40:68:37:e8:50:
         f1:d9:7d:1b:b4:b5:84:50:29:03:48:ec:33:c1:22:96:ee:66:
         67:e6:44:f6:38:7a:cb:ec:d4:14:8c:9f:0d:65:97:c9:ca:8f:
         b6:82:09:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----