Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1bc7982a-669a-4674-a6b4-663e3d77bfe3.cer
File:                     1bc7982a-669a-4674-a6b4-663e3d77bfe3.cer (raw, json)
Hash identifier:          rOOlDuDMH2ccj70WSvofZn2GUtXUjw/sPc2lsoAbJYo=
Subject key identifier:   FC:BC:FD:25:98:FA:A1:90:1B:88:0D:A2:25:B8:E8:5F:E2:07:90:3D
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858429D04E5F2AA9A6875AD3C10C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1bc7982a-669a-4674-a6b4-663e3d77bfe3/1bc7982a-669a-4674-a6b4-663e3d77bfe3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1bc7982a-669a-4674-a6b4-663e3d77bfe3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 20 Jul 2023 21:17:03 +0000
Certificate not after:    Wed 22 Oct 2025 21:17:03 +0000
Subordinate resources:    AS: 54400

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:9d:04:e5:f2:aa:9a:68:75:ad:3c:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 20 21:17:03 2023 GMT
            Not After : Oct 22 21:17:03 2025 GMT
        Subject: CN=1bc7982a-669a-4674-a6b4-663e3d77bfe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:d0:9b:da:e7:d3:f5:bb:23:81:6f:24:83:
                    b1:e0:00:b8:0d:8b:14:40:49:ef:a9:2b:17:1e:0a:
                    b4:6c:fe:23:3d:4b:9e:72:f3:8d:c7:39:6c:70:04:
                    5e:c9:a1:c7:fa:ed:ca:16:59:79:33:fe:7f:48:d8:
                    2f:c8:e1:20:d9:f0:29:4c:1e:6d:55:f1:49:10:fb:
                    ff:7c:43:2d:1a:00:a8:c2:df:db:e4:25:b0:45:02:
                    ca:ae:d4:bc:7b:3b:69:ba:15:fc:5d:e2:90:03:62:
                    72:1d:43:15:27:2d:85:54:52:b6:8a:16:f4:e6:8f:
                    de:73:e0:93:dd:95:5d:e5:1d:df:ce:90:37:0d:5c:
                    d2:ad:88:df:78:7a:a9:cc:49:93:8f:2e:83:8b:6b:
                    67:67:b4:0b:82:32:3e:6d:c1:f5:14:5f:44:f6:88:
                    2b:62:70:29:32:e9:f8:7f:dc:df:0a:d2:a2:5e:79:
                    94:b0:b2:a3:bf:82:c7:85:14:27:39:5a:93:3b:d0:
                    6e:dd:5c:5e:27:45:e6:35:b9:d8:80:89:ce:1f:82:
                    44:1c:f6:33:a1:cf:e5:e2:ef:4c:39:6a:ed:51:33:
                    54:8e:62:9f:88:77:ca:0d:2b:47:07:1d:67:28:3f:
                    89:31:8a:46:f9:e3:3b:c8:10:0d:ce:d1:c2:aa:4f:
                    0d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BC:FD:25:98:FA:A1:90:1B:88:0D:A2:25:B8:E8:5F:E2:07:90:3D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1bc7982a-669a-4674-a6b4-663e3d77bfe3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1bc7982a-669a-4674-a6b4-663e3d77bfe3/1bc7982a-669a-4674-a6b4-663e3d77bfe3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54400

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:da:88:0a:b4:6b:41:b5:58:73:81:a5:30:75:93:cd:72:17:
         b7:35:15:68:dc:9d:45:8a:52:ee:6c:ae:5c:80:d8:0f:c0:36:
         d3:bb:c0:82:3d:3e:de:b9:3c:5b:89:07:89:13:c4:c0:a8:c6:
         ce:5a:c5:05:3a:13:80:de:b4:4a:42:e6:95:d7:ba:dc:71:34:
         16:97:34:b8:4a:56:c5:8f:c4:c5:e5:b8:15:f6:15:f2:07:98:
         12:22:62:74:dd:b8:e5:fc:a7:97:a4:27:5f:2c:4a:16:80:21:
         78:fe:ef:e3:25:8a:8d:66:fe:db:e6:94:57:af:17:ee:1c:75:
         49:8b:83:bc:6a:0c:e0:56:75:ce:0b:e4:df:c5:6f:29:7d:a2:
         29:4f:2a:a9:e4:d8:e5:65:a3:bb:c7:3e:ae:88:2d:94:95:d4:
         b5:90:5a:ed:03:68:63:b3:8c:0e:1e:10:a4:7f:5e:f7:d8:5a:
         e0:3a:7d:b8:5e:83:3a:14:a3:2f:4d:46:9f:9a:f3:09:31:7a:
         62:77:dd:5b:46:a9:bd:4c:8f:42:d6:93:fc:12:b0:7f:e0:a0:
         5c:ec:e3:53:d4:e8:f5:10:3d:25:c1:7a:6e:e8:e3:e8:fb:1f:
         3d:79:0f:b1:ca:7b:2b:66:cc:70:2e:82:cc:91:af:ed:4b:a5:
         8d:15:bf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----