Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d9b1dbd-7ab5-41dc-a198-128264877240.cer
File:                     9d9b1dbd-7ab5-41dc-a198-128264877240.cer (raw, json)
Hash identifier:          /3K8z18djmjjJUFExGUe9GYlkAF1Pga9GbX0z+z5VMw=
Subject key identifier:   21:2B:01:88:E1:81:B7:E1:42:F5:D6:72:56:19:E8:51:7D:41:F4:8E
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858423E1783CC6EA0B511D3774080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d9b1dbd-7ab5-41dc-a198-128264877240/9d9b1dbd-7ab5-41dc-a198-128264877240.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d9b1dbd-7ab5-41dc-a198-128264877240/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 16 Jun 2023 21:12:46 +0000
Certificate not after:    Thu 18 Sep 2025 21:12:46 +0000
Subordinate resources:    AS: 32376

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:3e:17:83:cc:6e:a0:b5:11:d3:77:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jun 16 21:12:46 2023 GMT
            Not After : Sep 18 21:12:46 2025 GMT
        Subject: CN=9d9b1dbd-7ab5-41dc-a198-128264877240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:0e:95:ff:b9:30:d0:61:86:e8:66:7e:7b:
                    d5:eb:c6:f7:80:19:6b:2b:fe:e4:db:52:d9:07:88:
                    51:32:84:34:e2:19:13:a2:77:bc:44:c6:14:a6:7c:
                    c5:74:21:ee:9e:27:74:75:98:b0:ad:19:da:67:ad:
                    07:d2:14:b8:7f:0f:69:4a:40:0a:fa:fd:1c:97:82:
                    84:67:69:23:48:19:db:55:48:2f:8d:1e:06:b9:2e:
                    aa:24:56:f6:f8:43:35:7f:ba:d9:f3:64:ff:e7:47:
                    b8:ee:19:95:9a:03:4d:1f:19:fe:b8:0a:f6:0e:ad:
                    4d:1d:4b:a9:06:8d:5f:08:05:15:fd:95:a9:1d:51:
                    e0:8c:13:e9:5a:2b:28:70:1f:bf:ce:9e:4f:5d:13:
                    bd:d9:8c:21:06:c7:f8:72:11:f8:c6:a8:55:cf:57:
                    18:b1:90:7d:f9:41:bd:d4:d5:49:60:4b:2e:60:26:
                    32:79:11:e0:09:1d:58:fc:c1:c6:5a:4d:08:2d:62:
                    a8:22:b3:88:6d:bd:be:47:2a:00:f4:79:cd:e4:db:
                    ac:c1:a5:60:82:f1:03:bb:49:e1:fc:78:44:30:1a:
                    9f:91:19:eb:ed:81:ce:0b:77:bb:1e:39:b9:ef:db:
                    fb:bb:9d:12:a3:c6:18:d7:24:db:e2:b6:e6:5a:2d:
                    b1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2B:01:88:E1:81:B7:E1:42:F5:D6:72:56:19:E8:51:7D:41:F4:8E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d9b1dbd-7ab5-41dc-a198-128264877240/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d9b1dbd-7ab5-41dc-a198-128264877240/9d9b1dbd-7ab5-41dc-a198-128264877240.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32376

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:4e:00:c4:63:93:3b:77:4c:92:12:0d:2c:e3:f5:01:c9:40:
         04:5a:f6:91:12:4b:d3:b9:4c:c7:80:f6:5b:9b:94:83:b5:4f:
         0d:0e:69:31:17:2b:e4:7b:96:20:e0:b4:31:3c:92:1f:c0:8f:
         5e:4c:f4:5d:07:13:7f:bc:60:96:25:d9:47:d0:1b:4c:dd:4d:
         77:46:9a:a8:09:a3:7a:9f:7d:37:13:8a:fa:b2:25:25:20:58:
         a6:80:e4:5c:14:49:8f:81:66:f8:7e:94:8f:cb:88:0d:a8:bd:
         5a:fb:e0:3c:18:92:c1:f5:fe:12:f2:7a:45:01:46:30:47:8e:
         47:2d:bd:9d:b3:12:e5:bf:e6:1f:c0:d1:1a:5a:b0:a5:64:2e:
         b1:5b:ee:7b:d1:13:c3:13:72:a2:76:2d:0f:c1:42:a9:fa:a0:
         28:e3:46:12:ef:38:fe:9a:fb:9d:d6:03:3d:ce:07:6a:63:7b:
         a5:68:2e:d4:a8:aa:ee:e6:19:ad:86:5b:c8:dc:89:e9:c8:89:
         de:88:39:66:c0:27:1c:c3:7c:2c:90:82:54:a9:79:a5:ab:fc:
         6a:3a:a8:6d:e6:97:3b:e1:ea:63:84:e5:40:c3:11:bd:e7:f2:
         01:00:8d:80:3d:62:a5:bd:35:1c:cf:bd:86:f0:9d:eb:55:0a:
         4a:ac:ef:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----