Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/462ac9f8-cc47-4eac-9b24-9c898b5261f1.cer
File:                     462ac9f8-cc47-4eac-9b24-9c898b5261f1.cer (raw, json)
Hash identifier:          MM8CcHVDtjpEzRr14giP33CvpX9teQVg2N3g/nDqGPM=
Subject key identifier:   2D:6C:4D:1A:7E:68:60:49:ED:3B:F3:F1:E7:07:32:91:D4:B8:28:2C
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842D7B231C20F8E3F56E2D5D968
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/462ac9f8-cc47-4eac-9b24-9c898b5261f1/462ac9f8-cc47-4eac-9b24-9c898b5261f1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/462ac9f8-cc47-4eac-9b24-9c898b5261f1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 10 Aug 2023 21:43:06 +0000
Certificate not after:    Wed 12 Nov 2025 22:43:06 +0000
Subordinate resources:    AS: 4966
                          IP: 2620:131:8000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d7:b2:31:c2:0f:8e:3f:56:e2:d5:d9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug 10 21:43:06 2023 GMT
            Not After : Nov 12 22:43:06 2025 GMT
        Subject: CN=462ac9f8-cc47-4eac-9b24-9c898b5261f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5a:07:a4:c5:df:32:a1:05:2a:53:1a:ec:11:
                    09:33:48:bb:f6:27:8a:aa:13:fa:66:d1:2f:9b:87:
                    77:1f:52:f6:a6:32:31:98:03:90:57:e2:de:4e:86:
                    2c:b1:9d:17:ef:86:d5:4e:35:5f:5b:db:4f:c4:c2:
                    18:c8:42:15:33:3b:92:83:78:47:0a:d3:e9:1e:92:
                    b5:10:4f:27:1a:54:af:b2:36:c7:43:25:bc:09:3c:
                    d0:92:93:07:55:73:22:c2:81:a4:05:96:f2:af:57:
                    73:2f:79:fd:a4:92:c9:62:2f:8f:64:e3:01:60:0f:
                    57:42:2d:70:45:f4:a0:3f:71:da:39:7a:a5:ac:3a:
                    1f:bf:6c:75:5c:77:75:99:c4:41:16:6c:01:bc:5d:
                    c9:3a:1c:e6:dd:ea:34:9c:b8:d4:6b:4a:af:f8:0e:
                    33:5b:f0:cf:7f:fb:1b:32:6e:88:77:2c:6e:f5:64:
                    b3:2d:2c:d6:de:a9:44:ea:79:b2:9a:7b:f0:fd:2d:
                    6b:08:a6:1a:24:71:89:7e:f6:71:1d:44:8b:fd:18:
                    94:6f:c3:e6:2d:d1:59:4e:44:43:f5:f2:ec:38:0b:
                    91:70:23:1f:6b:19:d1:04:41:d9:68:9f:b2:aa:5d:
                    f7:94:a8:5f:3c:1f:44:62:e4:03:87:77:e8:c7:cb:
                    fd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6C:4D:1A:7E:68:60:49:ED:3B:F3:F1:E7:07:32:91:D4:B8:28:2C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/462ac9f8-cc47-4eac-9b24-9c898b5261f1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/462ac9f8-cc47-4eac-9b24-9c898b5261f1/462ac9f8-cc47-4eac-9b24-9c898b5261f1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:131:8000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4966

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:64:e8:8d:61:b9:db:de:40:41:43:af:70:73:c0:44:ed:cd:
         29:11:d4:af:e7:fa:25:9e:ca:8b:cc:27:47:a3:b1:a7:a1:dc:
         c3:31:ab:57:0a:8b:4b:25:b0:11:68:a6:08:dc:2f:f1:d2:44:
         88:c0:e8:07:92:81:fd:2e:be:a3:6f:36:68:87:7c:81:67:48:
         7e:46:07:6d:04:05:1f:a4:aa:10:59:28:a6:8b:3b:f7:c4:f1:
         d9:5b:ba:03:d2:64:ba:e4:d6:3a:c9:d0:77:49:af:0f:66:ec:
         4b:af:5d:b7:9c:6e:0b:c6:19:f1:dc:62:65:57:c6:61:56:e1:
         3f:c8:9a:80:0c:63:40:2d:60:51:4b:e2:53:0a:fb:c7:65:1d:
         10:1a:de:38:8e:0f:d0:7f:56:01:4b:f2:02:bb:45:7b:bd:ce:
         d7:84:5e:07:d6:fb:0b:52:b7:08:75:09:f9:d0:e5:4f:f0:54:
         ed:81:77:59:2d:90:87:c3:a7:2d:48:a1:b1:9c:30:f4:c4:b0:
         35:a2:5d:85:e2:6e:9a:1c:22:27:ce:c4:b5:05:89:f8:86:ed:
         c0:22:5b:de:ad:fc:fa:d5:8c:ea:38:34:17:01:f6:4c:f9:ab:
         20:5b:39:03:89:e7:2c:66:30:0b:3f:a7:0a:3b:e7:b0:37:53:
         a8:2e:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----