Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa.cer
File:                     1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa.cer (raw, json)
Hash identifier:          vgOfdD+BbCRWvS5yVAhR9lOhBxy/ua3cZF0pde5+eEg=
Subject key identifier:   09:CE:CB:55:BF:45:B3:7A:BA:28:DE:59:D4:62:33:4D:CF:AB:69:B1
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584343B77BF9A9DCEDAD2BC18B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 18 Sep 2023 14:21:03 +0000
Certificate not after:    Sun 21 Dec 2025 15:21:03 +0000
Subordinate resources:    AS: 22828

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:43:b7:7b:f9:a9:dc:ed:ad:2b:c1:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 18 14:21:03 2023 GMT
            Not After : Dec 21 15:21:03 2025 GMT
        Subject: CN=1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2e:f1:90:01:d9:1e:de:33:80:11:85:94:62:
                    63:9d:ba:72:9e:6a:a5:2c:24:4e:7f:67:c3:d0:c8:
                    36:18:2c:6c:e9:26:fa:c8:d6:33:3c:90:e5:e9:d0:
                    b9:e8:7a:3d:d6:35:76:7a:1e:b3:fc:a2:65:d3:9f:
                    8f:d2:b4:ea:cf:0a:68:9d:bc:38:fa:ce:c6:0b:29:
                    8d:74:f6:0f:21:5e:b6:49:24:72:31:74:24:84:79:
                    ee:31:02:2b:14:0a:92:a2:fc:bf:57:97:dc:ee:5f:
                    24:9f:0b:dc:65:90:63:d4:b5:0c:a6:0e:10:09:02:
                    e4:f2:ac:bf:ee:3a:9f:1b:48:ee:72:b0:d6:3a:5f:
                    7d:ee:4b:c7:e4:a8:4d:e1:1c:09:3e:cc:eb:77:35:
                    d1:bd:72:86:95:2c:b2:1f:c1:db:cd:75:60:3c:6e:
                    a3:c7:32:79:cd:56:83:12:e4:a2:4b:75:54:31:93:
                    b3:4d:c2:fe:92:1d:10:6e:28:28:70:97:1d:b2:d9:
                    35:9e:1a:7b:e2:64:7b:0b:20:89:19:e6:3a:d5:33:
                    59:70:61:ce:8d:97:31:8b:e5:81:de:f0:18:e5:3d:
                    e3:5a:81:fd:cf:a6:8a:be:c1:59:f3:b0:10:7e:80:
                    1c:0d:1e:14:75:be:9c:94:b8:37:b4:73:8b:0d:8c:
                    99:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CE:CB:55:BF:45:B3:7A:BA:28:DE:59:D4:62:33:4D:CF:AB:69:B1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22828

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:05:f2:4e:61:08:a1:fd:dc:95:72:a6:18:60:a9:d0:47:01:
         2a:fe:88:25:01:ea:c6:4e:23:70:63:72:8a:13:61:7d:49:7c:
         19:bb:53:2e:85:d0:66:11:f5:20:7d:7f:f6:ff:b8:d7:fe:fd:
         94:56:c6:36:78:c3:6b:b3:9e:1c:34:9d:51:3a:e2:1d:c8:a6:
         ca:01:c8:c7:c3:7d:30:d5:5f:0c:b5:82:86:67:f0:a3:1a:ca:
         b2:21:2f:67:2c:0a:e8:9f:cf:71:ba:21:dd:b1:bf:cf:5b:a0:
         01:66:65:c0:ef:33:f0:1f:83:60:ca:42:1a:74:dc:6c:6c:b0:
         9b:df:66:36:4c:bd:84:be:40:71:e9:33:cd:35:96:28:3f:c6:
         39:60:09:ef:9e:a1:04:db:c4:b2:6b:c4:45:8c:eb:c7:d3:12:
         8e:ec:79:4e:60:71:cd:bf:ae:46:94:83:7b:4e:23:3c:97:3d:
         ea:33:04:42:64:be:ef:bd:c5:34:13:06:b8:f1:fe:25:79:86:
         16:05:64:c2:7e:14:bf:d5:e3:48:7f:90:57:0e:95:be:5b:a1:
         44:2d:16:c7:98:50:9c:2c:eb:6e:d5:d1:32:fc:e0:fc:9f:9a:
         4c:bf:b6:d2:df:3a:ab:9f:6b:41:68:ec:65:f1:e2:4b:fb:81:
         6a:77:4c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----