Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer
File:                     a2235d90-d905-4ef7-9447-870904044658.cer (raw, json)
Hash identifier:          J3JL8CxSP8Umfk1G/z+2TxpVCOXj/Uek0vV2v+znvB8=
Subject key identifier:   12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842FD7B5C2B214EBAAEDB652680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 24 Aug 2023 10:33:20 +0000
Certificate not after:    Sat 25 Oct 2025 12:18:53 +0000
Subordinate resources:    AS: 19852
                          AS: 23017
                          IP: 2607:5ac0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:fd:7b:5c:2b:21:4e:ba:ae:db:65:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug 24 10:33:20 2023 GMT
            Not After : Oct 25 12:18:53 2025 GMT
        Subject: CN=a2235d90-d905-4ef7-9447-870904044658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:34:15:04:67:fc:32:4d:9a:cf:6b:85:88:b0:
                    1a:50:df:78:a2:fa:4b:30:2d:94:e8:cb:42:44:f0:
                    db:e4:61:45:c6:e6:f4:3a:84:22:ee:f0:da:df:c9:
                    08:6d:8c:db:7c:54:e8:ee:dd:7f:17:9f:b9:3e:4d:
                    b0:6c:01:a9:86:46:5f:37:53:cf:e6:25:2a:28:2e:
                    46:65:6f:c4:a7:26:0c:d1:2f:c7:b1:5a:82:84:cb:
                    03:f5:ec:21:ed:4e:01:bf:c9:10:06:fc:24:8a:dd:
                    aa:13:9c:f9:62:07:84:a1:9a:d2:05:33:25:e3:c9:
                    0c:b3:ff:38:ab:15:9a:4a:58:e1:8e:0e:cc:79:3a:
                    f4:aa:be:b2:1e:fb:4b:8c:1b:99:a7:42:1d:61:21:
                    cb:5a:97:d8:82:0c:4d:74:29:3f:d6:17:0f:ac:33:
                    d3:00:43:ae:da:0a:85:ff:f5:00:5f:9d:7a:cb:b2:
                    23:8d:e4:1c:f5:b4:8f:b1:05:4a:fa:90:2f:14:bf:
                    7f:20:58:f9:cb:dd:56:c7:4a:53:81:62:d6:ac:43:
                    2a:7b:ab:9a:19:6e:f1:86:ca:9f:d2:3e:0d:2c:0f:
                    33:30:66:35:8b:e9:5d:1d:64:f3:3f:e1:f3:ae:df:
                    5f:63:73:6c:a9:d1:d1:13:b2:0e:52:f5:52:c3:30:
                    fd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19852
                  23017

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:54:37:b7:01:a9:84:47:3f:2f:c5:f1:73:51:8f:ff:96:04:
         02:ab:ca:89:56:ec:7d:01:f7:43:0c:71:9a:6e:9a:dd:d0:5a:
         e5:c4:f4:2f:07:ff:1d:6d:6d:f1:61:16:45:84:e0:81:20:96:
         53:25:70:a3:69:48:14:c6:16:84:3f:3b:5b:6c:22:6d:43:60:
         ff:87:c9:9e:be:69:54:d2:3b:9f:ae:6f:49:7c:19:c6:d5:48:
         a7:c0:45:f9:da:dd:fd:b1:a9:de:6f:0c:e8:c5:d0:2d:c5:61:
         69:ee:8d:b8:41:73:62:93:e4:50:4c:69:e3:ca:e3:44:b7:b8:
         c5:63:63:ba:6a:6b:ce:3c:a7:16:78:7c:1f:a3:03:7f:d5:9f:
         3d:db:76:98:40:35:76:6c:ec:e6:97:57:14:27:8e:70:e9:a6:
         18:70:8d:fc:c8:96:7f:b4:6d:fc:0a:c4:b8:94:ef:11:68:8d:
         c2:ee:b5:1b:24:2c:12:35:92:d6:37:77:c6:fc:ef:01:4f:fd:
         e1:d0:5a:78:66:0a:40:e9:71:00:70:6f:31:bd:cd:78:17:23:
         64:6e:00:aa:c9:69:f1:6d:87:9e:04:5a:99:a5:44:ec:d9:33:
         da:0c:69:9a:71:a7:a1:c4:f4:90:80:18:78:81:93:07:c2:de:
         25:3b:93:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----