Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2.cer
File:                     db54b165-1bfa-4624-b8bc-680c5d3ac9c2.cer (raw, json)
Hash identifier:          YkbnhWhageOgysvOOLVtka8fEzJYw3979dKwemftfuQ=
Subject key identifier:   B3:DC:97:63:79:E1:2F:3F:C9:1E:EB:26:1B:68:74:93:66:66:01:22
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285842CE87424FA15BA82365BC0C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 07 Aug 2023 14:54:19 +0000
Certificate not after:    Mon 13 Oct 2025 00:45:17 +0000
Subordinate resources:    AS: 395990
                          IP: 168.245.235.0/24
                          IP: 2602:804:e000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ce:87:42:4f:a1:5b:a8:23:65:bc:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug  7 14:54:19 2023 GMT
            Not After : Oct 13 00:45:17 2025 GMT
        Subject: CN=db54b165-1bfa-4624-b8bc-680c5d3ac9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:61:21:ce:86:c6:e7:8a:5a:5c:1c:d4:bb:17:
                    5e:62:a9:ff:7c:d2:64:53:b2:44:0f:c3:b3:aa:08:
                    e4:f7:e2:81:78:e9:93:e5:84:e6:2b:d9:35:1f:3d:
                    96:ef:9d:cb:6e:cf:d1:33:77:a7:ac:d8:9e:a3:27:
                    4e:d4:c9:73:36:3a:f1:70:74:98:db:ed:88:2d:e2:
                    6c:85:5a:24:20:fb:d2:4c:91:c4:ba:b0:4c:74:6f:
                    14:d8:a3:bc:9e:82:71:55:86:ac:97:74:21:05:ca:
                    9a:4f:60:c8:a7:25:7c:de:9f:e2:90:2e:86:48:87:
                    8a:f7:b4:aa:3c:23:ee:8e:c4:2c:17:c1:50:47:b7:
                    b2:78:62:80:09:60:39:0c:ad:c9:8a:fe:2f:7a:2b:
                    cc:1e:58:24:da:7f:ab:3e:d5:96:6d:fb:5e:c9:6b:
                    ea:a0:08:6b:88:21:df:95:bc:e5:18:9c:46:f3:94:
                    12:6b:33:3b:ee:3b:4e:55:09:0a:bd:08:f3:aa:be:
                    1f:63:9a:21:d4:0d:89:be:cc:d4:2e:9b:57:41:ca:
                    f2:7c:26:28:6a:9c:ac:fa:71:32:4e:37:83:1a:3e:
                    f6:86:9a:db:8e:b3:d0:06:09:3c:93:ad:6c:24:ee:
                    c8:15:69:f1:10:89:f4:67:eb:91:80:83:99:48:0a:
                    80:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DC:97:63:79:E1:2F:3F:C9:1E:EB:26:1B:68:74:93:66:66:01:22
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.235.0/24
                IPv6:
                  2602:804:e000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395990

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:5c:bf:10:98:26:c9:28:0b:c3:e8:05:78:5c:8f:fe:91:91:
         0a:33:c8:fe:41:3b:20:39:d8:0f:90:8c:1d:5b:b9:27:a8:7c:
         77:46:5e:25:b5:f3:f9:83:e4:44:14:4e:6b:71:2c:a3:65:cd:
         3f:d6:07:11:8c:b2:88:8f:53:e6:0b:c2:7d:d8:2f:11:3b:04:
         77:1c:28:35:10:65:3f:e8:92:81:42:7b:4c:af:09:b5:ba:0b:
         f7:8d:41:49:98:31:f0:74:97:93:99:1a:ff:89:e8:67:2b:62:
         39:f4:02:74:ab:67:ae:8d:5a:60:46:3b:85:6a:ea:2a:74:67:
         c6:33:f6:9b:c7:a2:4a:40:8c:68:9e:c6:fb:dc:b1:a3:ec:4d:
         3d:02:c8:34:54:07:bb:36:e8:35:0c:b6:3e:c3:70:9c:7b:7c:
         f4:c9:36:74:41:51:c6:26:40:8b:fe:8c:9c:e4:ae:0b:5d:23:
         c0:4c:63:5b:66:97:e1:f7:4b:fa:f1:e1:74:6f:4e:55:b5:2c:
         9e:83:79:cc:b3:e3:47:2a:99:c1:27:cb:e4:7f:a5:f6:7c:2e:
         64:18:3d:fe:15:ae:a6:b1:98:3d:72:95:09:98:fa:7b:3a:d5:
         3e:8b:40:b6:da:bb:60:28:90:f4:ae:c9:16:db:16:e3:9e:5f:
         f8:44:30:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----