Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698.cer
File:                     1786b8ab-4949-4959-b26b-aaad20b28698.cer (raw, json)
Hash identifier:          FaMkh5nw/TN13vSAu+UUceFeTpdFUwYirCgH0TXW2+Q=
Subject key identifier:   E5:C0:98:4B:BF:62:F3:EA:E8:A5:A5:5D:EE:E8:D8:5A:96:12:ED:47
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842C3CE9350E0D93C8839FBB980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/1786b8ab-4949-4959-b26b-aaad20b28698.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 03 Aug 2023 18:44:07 +0000
Certificate not after:    Wed 05 Nov 2025 19:44:07 +0000
Subordinate resources:    AS: 20356
                          IP: 2607:640::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c3:ce:93:50:e0:d9:3c:88:39:fb:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug  3 18:44:07 2023 GMT
            Not After : Nov  5 19:44:07 2025 GMT
        Subject: CN=1786b8ab-4949-4959-b26b-aaad20b28698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f4:c2:55:46:10:c4:d5:2e:3d:5d:57:23:15:
                    2e:73:b4:ce:32:f2:49:89:f5:18:05:85:9b:10:f5:
                    34:19:78:fc:4b:ae:a3:c9:11:f2:d1:2d:cc:74:b6:
                    8f:25:e6:98:6f:41:dc:53:4c:87:66:69:21:96:8f:
                    fe:66:0c:44:ca:02:2b:de:a6:a2:04:35:c9:aa:97:
                    f5:b4:1a:c6:bf:e5:3b:15:ed:bd:4d:0e:de:a9:92:
                    9f:f2:89:f8:87:f0:5f:39:b8:0c:f1:5f:77:64:a8:
                    39:f5:d5:54:ca:af:bb:90:a3:de:4b:84:34:08:60:
                    4b:4b:f4:cf:a1:2c:92:ba:c1:8f:50:76:93:e2:8f:
                    03:7b:2a:0a:7c:c5:eb:f1:b6:43:25:44:03:81:6b:
                    4d:d0:cd:06:50:a2:0f:34:2d:17:7f:0a:b2:02:42:
                    d4:0c:82:1b:d7:23:c1:1e:4a:7c:80:c8:16:ce:61:
                    6f:74:3a:0d:c8:2c:11:56:ba:93:71:7f:11:b7:82:
                    7c:f5:05:5b:90:2d:65:27:42:d5:7d:2d:f2:8a:cb:
                    35:c7:54:ea:36:6e:b0:c2:0a:11:a7:04:19:07:b2:
                    52:cc:71:17:40:8b:0c:5f:3d:31:81:f8:5b:9f:30:
                    10:8e:ce:4b:b8:7a:22:95:6f:a7:00:1b:58:70:37:
                    cd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C0:98:4B:BF:62:F3:EA:E8:A5:A5:5D:EE:E8:D8:5A:96:12:ED:47
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/1786b8ab-4949-4959-b26b-aaad20b28698.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20356

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:df:d5:e9:fb:08:b6:d1:08:a3:79:01:8d:24:d7:6f:92:c3:
         1a:90:c2:8c:97:8b:0e:b1:73:85:ee:4f:26:2c:e9:25:2b:d7:
         88:cc:d6:43:9f:29:e3:9a:e6:8b:2f:22:ef:3c:74:66:16:58:
         de:36:1f:9a:6c:fb:ca:6f:98:84:41:e8:25:94:71:c2:5a:f3:
         80:f5:25:66:a9:b5:29:44:24:23:08:64:57:d0:a8:30:f3:1f:
         f9:1e:97:ca:c1:4b:16:25:45:2b:aa:34:b6:0b:2a:e5:de:4e:
         a2:a9:8f:ff:87:ea:50:0b:7f:84:ef:0b:10:bd:be:ec:35:29:
         96:9c:35:2b:b2:90:bd:b4:71:12:9e:58:89:15:11:6f:24:58:
         f1:56:74:37:19:39:46:b2:36:d4:83:46:c1:fb:e6:f1:7c:2f:
         95:a4:0f:c6:81:af:83:c6:36:da:d7:78:a1:f1:f0:9f:30:9b:
         d5:78:b1:47:8b:13:3e:8c:cb:2f:70:79:65:63:17:39:28:e7:
         0d:02:c7:19:dd:26:ea:f6:33:5e:6e:09:3e:bd:4a:8d:46:ec:
         c6:bd:56:64:70:65:f0:47:1e:7a:5d:a8:21:7f:6c:8c:10:4c:
         ba:a8:44:3d:b3:0a:e9:10:31:5e:e6:d3:55:d4:3e:9b:69:19:
         d6:d1:18:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----