Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e.cer
File:                     71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e.cer (raw, json)
Hash identifier:          6zJRrgQoa7jfQiCPcXbdRwVuCAFin7b989otMSPxupc=
Subject key identifier:   FC:72:45:E6:31:BF:30:E5:AF:54:94:5A:DA:17:2A:0C:E7:D2:96:A5
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858424DAFD50F70048B067D887900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 22 Jun 2023 11:16:47 +0000
Certificate not after:    Wed 24 Sep 2025 11:16:47 +0000
Subordinate resources:    AS: 399894

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4d:af:d5:0f:70:04:8b:06:7d:88:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jun 22 11:16:47 2023 GMT
            Not After : Sep 24 11:16:47 2025 GMT
        Subject: CN=71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:86:70:03:1a:a6:3e:2a:f4:b2:6c:cf:1d:0d:
                    a9:e4:f8:d8:1f:92:58:a8:0c:d2:2b:f7:db:68:91:
                    4c:73:0d:56:72:26:a0:53:3a:6e:36:03:15:bf:7b:
                    42:73:f9:7b:82:2c:f8:08:f0:45:e8:77:0e:27:43:
                    36:28:7f:a6:45:33:1e:c3:e6:0b:32:d2:09:1f:61:
                    12:fb:c4:3f:97:4f:3b:c2:96:b5:62:c4:b1:a1:83:
                    89:34:a9:29:9b:ff:c0:97:51:ef:9e:a8:c2:69:e9:
                    1b:8e:d2:06:01:5f:ef:63:60:06:2f:0c:3f:68:1b:
                    53:f6:bc:d6:fb:b2:43:80:c8:83:b7:1d:4b:91:0c:
                    57:82:2f:9e:10:9f:ac:6c:d9:f5:dd:38:65:5b:df:
                    77:22:39:03:17:75:bd:b0:a2:c5:4f:11:37:df:85:
                    38:ac:0c:03:2c:bc:d1:f0:40:aa:9a:44:ce:a7:d8:
                    62:0b:39:83:2b:30:07:7f:ae:72:d8:74:b1:74:4c:
                    a3:08:03:52:d9:bf:22:d0:37:01:75:a6:63:20:65:
                    b9:5d:94:d9:0a:4e:9a:66:83:59:3f:1e:f3:cd:51:
                    07:46:e6:f0:12:a7:4e:93:eb:9d:4f:52:83:3f:be:
                    76:93:66:0a:aa:c5:18:e8:00:cc:50:71:57:3a:45:
                    dc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:72:45:E6:31:BF:30:E5:AF:54:94:5A:DA:17:2A:0C:E7:D2:96:A5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399894

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:9c:61:ba:02:d9:8b:6b:5d:83:f1:2f:ee:21:f5:08:92:bd:
         f9:0e:bb:d7:6e:d1:3e:80:28:5e:e5:7c:f2:84:40:44:05:e4:
         10:7e:be:85:13:70:fb:fb:89:29:f3:46:9e:3c:0c:d7:a3:4c:
         b7:d3:3f:13:c2:d8:fe:51:1f:29:8c:3e:45:ed:ea:ae:11:44:
         99:a5:66:b3:4a:69:24:5e:37:e5:86:88:18:08:ce:45:7f:65:
         6b:58:30:a0:99:98:1a:b8:03:f4:4e:96:5c:04:5f:ff:07:96:
         aa:93:b8:31:3d:72:de:74:52:b1:9c:be:ce:7b:18:8b:2c:66:
         ef:80:2f:c3:29:7b:aa:25:14:88:02:71:b8:fb:88:49:91:9f:
         a5:ff:4e:fd:fa:3d:56:5a:43:bb:9d:4c:41:44:df:49:2b:b8:
         d7:b7:9f:b0:8a:b4:12:fe:2f:af:90:33:76:7e:6f:69:54:a9:
         11:46:52:c8:84:80:50:50:4a:89:e9:e5:40:5e:f7:ad:7f:b1:
         87:a3:d2:c6:ae:15:0e:10:15:33:6f:28:11:b9:5b:bb:c3:bb:
         dc:98:3d:b7:f0:6d:92:cb:22:2c:d1:8a:a2:cb:07:6a:6b:05:
         d1:fe:14:f9:6b:51:fa:b6:62:2c:80:d2:b4:61:65:a9:44:92:
         fc:e8:b0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----