Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8182fded-d790-489b-a08d-2426b39a19cc.cer
File:                     8182fded-d790-489b-a08d-2426b39a19cc.cer (raw, json)
Hash identifier:          texCgCg1OSCmh8le41gNgTdjA88l9cbipBq7MrmxbdQ=
Subject key identifier:   8F:D8:A3:34:73:99:9C:5D:F1:D5:AB:5B:30:F7:67:C0:D7:D9:BB:83
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842860F043DD9F396D457176800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8182fded-d790-489b-a08d-2426b39a19cc/8182fded-d790-489b-a08d-2426b39a19cc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8182fded-d790-489b-a08d-2426b39a19cc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 12 Jul 2023 15:53:50 +0000
Certificate not after:    Tue 14 Oct 2025 15:53:50 +0000
Subordinate resources:    AS: 40557
                          IP: 204.62.202.0/23
                          IP: 2620:9:4000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:86:0f:04:3d:d9:f3:96:d4:57:17:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 12 15:53:50 2023 GMT
            Not After : Oct 14 15:53:50 2025 GMT
        Subject: CN=8182fded-d790-489b-a08d-2426b39a19cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:87:b8:57:e7:71:91:71:fe:17:08:e6:72:1f:
                    4b:71:87:04:da:32:01:f4:64:de:99:a5:2d:34:48:
                    fb:49:1e:f6:d7:37:27:01:ed:9b:8f:85:4d:7c:c7:
                    9a:e1:d1:0a:21:29:aa:f6:e7:e4:f8:96:d1:cd:d9:
                    4b:91:a6:8c:da:1c:f6:f0:99:d4:94:4c:4f:30:4e:
                    cb:0e:78:18:61:1a:0e:8d:eb:05:05:bb:61:15:f0:
                    68:1a:d2:9d:6b:51:18:b2:9f:c3:df:48:87:b1:47:
                    dd:b1:37:5b:3a:e2:f3:dc:0f:ea:d8:01:28:c4:96:
                    eb:57:80:16:12:d6:57:1d:34:dc:82:af:48:c8:4d:
                    fa:7b:86:e7:96:d0:e7:65:14:7b:76:cd:d4:0a:9e:
                    d4:2e:f6:db:02:10:a6:59:eb:cf:9f:2f:17:38:d7:
                    b4:92:a4:56:74:dd:10:8c:7c:01:9c:a8:a3:c9:5f:
                    b6:a6:64:ee:11:98:ad:dc:55:02:24:8e:c7:be:94:
                    72:7d:d9:79:86:21:55:c2:dc:25:a4:84:68:29:08:
                    6b:18:4f:7c:86:e5:25:ac:87:a2:2c:b9:6e:12:62:
                    72:a5:d6:e8:c7:7a:49:91:1d:3a:04:8c:17:e1:d2:
                    70:84:8e:77:80:d4:da:7f:25:76:c9:f4:4a:e1:15:
                    de:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D8:A3:34:73:99:9C:5D:F1:D5:AB:5B:30:F7:67:C0:D7:D9:BB:83
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8182fded-d790-489b-a08d-2426b39a19cc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8182fded-d790-489b-a08d-2426b39a19cc/8182fded-d790-489b-a08d-2426b39a19cc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.62.202.0/23
                IPv6:
                  2620:9:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40557

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:fe:e6:33:98:08:35:c0:05:fb:5f:90:4c:9e:95:e1:71:a2:
         04:0b:94:88:e6:72:00:10:c3:46:27:42:f0:77:d7:05:9b:6f:
         22:d9:14:26:a1:5b:76:ee:3f:8c:18:f1:e6:16:1f:96:63:3f:
         fa:c8:1c:77:00:14:6b:db:e6:4d:12:d5:22:36:9b:34:e5:0b:
         5b:01:c3:ac:69:7c:74:b7:c4:bb:77:a3:b4:fe:85:a5:9b:72:
         56:39:e3:37:71:db:e7:1d:4a:27:ab:af:73:f1:79:e7:86:68:
         53:38:db:97:e1:33:df:82:16:d3:f3:c4:c3:23:35:bc:61:bb:
         d7:e9:8b:c2:af:63:4e:d0:29:87:6b:82:60:5c:c2:24:25:c6:
         71:a1:a4:32:5b:71:82:34:84:60:0d:de:2f:e2:8d:78:ad:7b:
         15:a6:2a:96:20:90:27:01:20:8f:fd:78:3c:f6:93:78:4f:d7:
         27:97:47:01:1e:d3:d5:11:60:bf:b6:a6:49:94:f4:c0:b8:15:
         58:39:77:23:f9:4e:79:24:11:3f:a5:33:74:b4:ba:42:5d:17:
         5c:5b:4c:80:74:c2:c0:ec:d8:6b:18:63:74:78:f9:30:e9:c1:
         ce:6e:2e:55:b4:2c:23:1c:55:aa:4e:1e:38:16:70:b1:5c:cc:
         68:0c:78:fe
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----