Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48a2536b-8c10-4195-83a4-071446d71480.cer
File:                     48a2536b-8c10-4195-83a4-071446d71480.cer (raw, json)
Hash identifier:          mbOSarDQTSCBAY1pHeNeLIqwwXhnyTGtv1CtJCh2rcY=
Subject key identifier:   35:5B:CF:21:9D:7F:91:9F:74:9F:E6:60:3C:CD:04:F1:3F:B9:C4:48
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858429BEFF857787DB01666128000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48a2536b-8c10-4195-83a4-071446d71480/48a2536b-8c10-4195-83a4-071446d71480.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48a2536b-8c10-4195-83a4-071446d71480/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 20 Jul 2023 11:59:04 +0000
Certificate not after:    Wed 22 Oct 2025 11:59:04 +0000
Subordinate resources:    AS: 14946

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:9b:ef:f8:57:78:7d:b0:16:66:12:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 20 11:59:04 2023 GMT
            Not After : Oct 22 11:59:04 2025 GMT
        Subject: CN=48a2536b-8c10-4195-83a4-071446d71480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:7b:d7:70:8f:cd:b1:a6:3c:6b:c7:c3:21:
                    d4:74:35:e5:ca:f6:81:11:d1:ef:55:57:15:13:aa:
                    a8:8e:fe:64:4f:92:86:79:ea:01:aa:3c:09:da:4a:
                    f4:d6:9c:6f:3c:27:26:31:63:fe:1a:17:0b:07:1f:
                    0c:2a:7d:4f:a2:7b:8b:35:c1:64:0d:e3:34:ff:73:
                    d7:34:b0:41:72:35:98:e6:1a:cb:48:84:30:c0:7d:
                    f3:ba:f4:10:66:d6:d0:2f:3e:44:61:9c:13:26:2f:
                    1d:1d:fd:1b:23:b2:0e:51:6e:0e:d4:96:01:8e:2d:
                    4d:88:dc:14:23:d7:43:4e:af:02:31:8a:9e:aa:f8:
                    8d:39:c7:80:ba:b1:9a:da:15:a5:09:bf:61:aa:75:
                    1a:81:40:00:63:a3:49:2b:9f:53:d8:5c:5b:93:f7:
                    ef:a8:e3:e1:61:e6:25:ff:3b:aa:ed:29:15:b9:f3:
                    59:c6:72:0c:c3:5e:64:aa:83:7f:b2:f4:d0:12:86:
                    f8:95:b8:e9:a4:f3:db:1c:90:94:f8:d0:97:16:61:
                    3c:8f:bc:4c:42:c0:0b:46:0a:2d:7f:bc:0c:a7:1a:
                    b5:d6:02:a9:9b:d3:5c:cf:ef:15:04:79:2b:6c:7f:
                    36:de:73:e1:48:4f:3c:9d:2e:52:a0:53:a9:26:73:
                    3f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5B:CF:21:9D:7F:91:9F:74:9F:E6:60:3C:CD:04:F1:3F:B9:C4:48
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48a2536b-8c10-4195-83a4-071446d71480/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48a2536b-8c10-4195-83a4-071446d71480/48a2536b-8c10-4195-83a4-071446d71480.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14946

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:44:3e:95:4e:20:d8:65:c6:0f:c5:7e:9f:f1:ea:e4:89:bb:
         bc:9a:d3:ea:94:13:c3:3f:ab:e8:97:c7:b8:26:1b:9a:72:fe:
         42:4a:25:bb:49:15:42:d6:15:bc:c5:16:c7:9f:cc:77:9f:04:
         bf:2b:ba:0f:76:42:0a:7d:87:96:57:6d:5f:31:e6:dc:3d:9c:
         35:69:77:dd:e5:ff:31:a4:e2:da:cc:86:db:02:e3:fd:59:56:
         b4:e8:84:ac:f0:2f:c2:5d:f0:ab:b3:82:64:fc:c1:b8:7d:86:
         38:fd:e3:1f:79:07:64:22:a3:6a:c7:ac:65:00:a1:47:f9:f3:
         ae:7d:53:8f:a4:50:b8:9c:31:92:b2:f3:12:fa:92:62:c1:13:
         d8:5a:8c:54:fa:7b:0e:ea:a5:36:dd:04:50:bf:7c:77:47:0a:
         66:d6:97:15:92:46:73:d4:be:59:0f:76:b8:e9:f6:27:cb:ca:
         b4:0c:2b:39:27:e8:3a:dc:3c:a0:eb:60:37:12:26:0a:d7:77:
         5c:fe:be:44:27:e2:eb:a3:5c:e5:ec:d9:93:64:57:37:32:b0:
         65:42:50:ee:b7:37:89:ce:82:85:68:53:cd:2b:22:4b:0c:8b:
         9a:c9:26:06:84:09:32:a9:90:73:48:fc:32:81:2d:6d:cd:f5:
         30:59:18:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----