Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/583545a7-f188-4e07-8a43-44ccc99e03bb.cer
File:                     583545a7-f188-4e07-8a43-44ccc99e03bb.cer (raw, json)
Hash identifier:          m5oZ4XTzVD8qH2BrtMak897wIRTMuliFP8brsDHwe/g=
Subject key identifier:   48:17:F5:30:41:45:A7:3E:9D:00:C4:F6:5C:EC:37:38:5C:19:7B:86
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842D1F47112149F96392513A500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/583545a7-f188-4e07-8a43-44ccc99e03bb/583545a7-f188-4e07-8a43-44ccc99e03bb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/583545a7-f188-4e07-8a43-44ccc99e03bb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 08 Aug 2023 20:21:44 +0000
Certificate not after:    Mon 10 Nov 2025 21:21:44 +0000
Subordinate resources:    AS: 11714
                          IP: 72.15.160.0/19
                          IP: 2606:1c00::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d1:f4:71:12:14:9f:96:39:25:13:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug  8 20:21:44 2023 GMT
            Not After : Nov 10 21:21:44 2025 GMT
        Subject: CN=583545a7-f188-4e07-8a43-44ccc99e03bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4b:ae:7f:20:d4:19:5a:e7:05:8c:94:1e:5f:
                    f0:72:8c:7b:1b:bc:10:dd:d9:80:aa:f8:08:c8:c4:
                    67:f8:8a:a8:a2:11:07:a4:4b:d9:4e:5a:e3:0b:9b:
                    cd:79:d7:2f:cd:67:01:07:cd:8a:42:82:37:ee:5b:
                    5a:d7:da:6f:07:7d:96:8c:11:81:0d:7e:00:86:34:
                    19:f9:bb:e8:8d:1d:a9:da:fe:91:51:0a:e6:58:04:
                    a4:41:72:99:9b:d3:5b:6d:7d:0f:ce:f5:1a:99:b6:
                    44:4c:00:a7:f0:b6:8b:c3:f0:84:92:3f:bf:f4:f7:
                    7f:34:15:01:17:14:9e:b0:54:e9:ca:dc:04:73:d1:
                    f9:ae:fb:32:f6:7f:63:8f:b4:04:4d:8e:60:36:4f:
                    8a:31:d7:63:16:76:ea:2b:b7:e5:15:a3:61:53:d0:
                    22:04:e1:2b:0f:89:2c:84:ad:13:5b:c1:70:40:9f:
                    7a:fb:1c:b2:c5:7d:17:32:7e:d8:17:82:79:c9:57:
                    58:1b:ff:cc:82:04:9b:d9:9f:04:d6:7f:ed:cf:0d:
                    a1:92:5b:82:67:73:5a:57:10:23:c9:83:e4:27:06:
                    58:5b:39:7c:f3:82:63:d0:84:11:d9:7e:5f:e6:a0:
                    29:cb:86:8d:e7:74:2c:55:0b:90:ac:ff:d8:78:d6:
                    de:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:17:F5:30:41:45:A7:3E:9D:00:C4:F6:5C:EC:37:38:5C:19:7B:86
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/583545a7-f188-4e07-8a43-44ccc99e03bb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/583545a7-f188-4e07-8a43-44ccc99e03bb/583545a7-f188-4e07-8a43-44ccc99e03bb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.15.160.0/19
                IPv6:
                  2606:1c00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11714

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:12:ea:37:08:4d:32:f9:95:36:c9:20:06:51:e9:98:fe:76:
         13:46:39:5b:63:d0:82:32:61:64:07:d9:87:f1:20:18:70:a1:
         b6:06:e8:de:dc:fc:cb:78:88:26:e6:da:39:ae:f3:e9:ae:c2:
         3d:d2:3d:42:5f:ed:e5:7f:ee:80:d2:cb:e3:bc:39:98:1f:65:
         1a:97:d3:b9:53:89:2b:77:80:ba:13:23:d7:0a:e0:b9:f8:56:
         51:45:81:47:e8:a7:f5:0d:be:7e:a6:3b:d0:af:08:91:9f:6c:
         bf:61:c0:68:d2:5d:3f:6d:bd:2c:ac:dd:6b:2d:44:a2:65:c9:
         3a:85:ea:c9:92:2e:da:88:76:b0:cb:7e:9f:e9:f2:4c:2c:fd:
         b3:66:83:f1:30:a4:42:f4:d7:d8:a1:f0:20:37:35:ef:ec:78:
         9c:a3:4b:ff:9b:37:e5:a9:71:4c:13:78:b4:12:bd:10:1d:78:
         30:af:83:b9:06:04:5b:dc:64:3a:2d:f0:dd:37:a5:0a:5f:b4:
         cd:09:f1:c1:a7:67:e6:bd:72:cc:a5:b9:1c:82:ef:6b:5e:d5:
         52:38:ba:47:31:69:0a:bc:e8:dc:e9:f3:1b:fe:01:36:07:4b:
         f9:39:72:94:39:74:6d:b0:71:81:e6:71:46:79:53:1d:27:1c:
         61:6f:a1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----