Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b811437-826c-47f8-ad78-fae81aa27cb6.cer
File:                     9b811437-826c-47f8-ad78-fae81aa27cb6.cer (raw, json)
Hash identifier:          pUqGPguM+bi3Mu9XM2vt7XwwxxUKfQBLNEr4ABhfSSw=
Subject key identifier:   1A:F5:39:0D:12:63:93:43:4B:3A:B2:75:22:61:A9:58:5C:08:55:4A
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842486CF1747147BF019E53FA80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b811437-826c-47f8-ad78-fae81aa27cb6/9b811437-826c-47f8-ad78-fae81aa27cb6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b811437-826c-47f8-ad78-fae81aa27cb6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 20 Jun 2023 14:02:58 +0000
Certificate not after:    Mon 22 Sep 2025 14:02:58 +0000
Subordinate resources:    AS: 395815
                          IP: 23.148.88.0/24
                          IP: 2607:1540::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:48:6c:f1:74:71:47:bf:01:9e:53:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jun 20 14:02:58 2023 GMT
            Not After : Sep 22 14:02:58 2025 GMT
        Subject: CN=9b811437-826c-47f8-ad78-fae81aa27cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e4:71:9a:a2:aa:6c:ff:93:36:37:4e:c1:9e:
                    39:2d:c1:0e:1c:72:89:3b:0b:87:fa:93:16:ee:ec:
                    8f:08:86:92:c8:ad:2a:d2:38:36:01:c5:b8:47:7a:
                    cc:63:27:85:3e:6c:4a:3d:f5:c9:7c:ee:79:3d:5e:
                    25:7b:89:85:98:8e:1c:a2:79:b9:06:7e:88:56:e0:
                    f8:d9:95:dd:aa:36:25:77:6f:50:55:1b:32:40:ba:
                    50:42:06:ff:25:5f:04:17:0d:1c:1b:a7:74:83:80:
                    b2:77:fb:c7:ff:63:e9:e0:3e:25:bb:ea:ad:b2:44:
                    eb:89:37:24:95:c4:bc:b1:36:a7:28:ab:da:0b:9b:
                    54:e2:c9:2e:f1:be:b0:94:9e:03:e5:85:27:60:d6:
                    b8:30:17:fe:ba:f1:ec:72:80:ed:63:74:09:29:99:
                    d3:d0:d3:43:62:c1:dd:69:02:a8:ad:fa:aa:83:38:
                    b8:ca:ba:d4:52:be:37:f4:5d:4a:b1:a4:d4:c1:ae:
                    f0:5e:2a:7d:f0:70:ce:fa:98:67:c0:ab:d8:02:d6:
                    87:5c:a6:f2:28:0a:72:03:a6:b5:dd:a0:8d:b3:6d:
                    80:a7:c4:a7:64:cf:7d:14:2d:5a:49:a2:c1:c4:6e:
                    ad:54:03:54:97:8c:d3:21:5c:ce:c3:ac:1b:3a:48:
                    aa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F5:39:0D:12:63:93:43:4B:3A:B2:75:22:61:A9:58:5C:08:55:4A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b811437-826c-47f8-ad78-fae81aa27cb6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b811437-826c-47f8-ad78-fae81aa27cb6/9b811437-826c-47f8-ad78-fae81aa27cb6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.88.0/24
                IPv6:
                  2607:1540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395815

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:19:79:1f:db:af:7a:c7:17:32:60:d8:21:78:df:06:94:0e:
         d7:c5:65:b1:13:20:53:d4:16:25:d4:b4:5d:c1:51:f1:f7:6a:
         9f:40:c3:b8:23:eb:e4:82:90:c5:b8:52:83:42:17:69:f8:fd:
         5c:6c:bf:99:f5:06:71:f6:d2:ef:cd:0c:e0:44:24:92:10:5f:
         ff:57:c7:15:e0:ab:5c:91:17:4f:fe:ff:95:16:07:dc:8c:71:
         07:8b:5e:3c:e7:08:d3:ef:be:c7:17:3f:f4:38:de:4c:98:52:
         49:45:5c:93:e3:3c:ca:46:96:f6:76:54:1c:17:7c:48:8e:4a:
         0a:58:92:89:b7:73:dc:f4:44:c3:ad:e0:fc:1e:6a:7c:2d:30:
         77:6e:51:86:9c:be:5a:ea:c3:82:5e:6b:28:8c:ea:09:b2:c4:
         3f:7d:a0:3d:09:38:25:09:4b:09:0f:00:76:48:37:95:1b:e4:
         06:e1:54:c9:da:6f:82:b6:91:23:f8:49:2e:a2:92:cc:98:a2:
         09:e3:49:d4:67:5c:8f:24:43:c7:74:3e:22:eb:63:e9:49:37:
         cf:11:8c:0b:de:96:49:a8:41:fa:18:d6:d8:31:fe:e9:2e:87:
         1d:ea:bb:e5:7c:54:13:93:31:a4:45:e8:a0:54:b6:a3:9b:1f:
         53:12:40:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----