Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123.cer
File:                     eac71b30-0394-4c6c-ba2c-e133113ae123.cer (raw, json)
Hash identifier:          owBmb8YiH1R5+DFFQ560Y4mnlu8A00GNzYdcVYJaaAU=
Subject key identifier:   17:86:A0:47:40:A5:F7:EC:D9:8C:50:52:51:0A:95:C4:AE:A5:A9:05
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842246943937A4A22DE1C1FF7C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123/eac71b30-0394-4c6c-ba2c-e133113ae123.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 07 Jun 2023 16:26:27 +0000
Certificate not after:    Tue 09 Sep 2025 16:26:27 +0000
Subordinate resources:    AS: 40173
                          IP: 206.168.118.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:24:69:43:93:7a:4a:22:de:1c:1f:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jun  7 16:26:27 2023 GMT
            Not After : Sep  9 16:26:27 2025 GMT
        Subject: CN=eac71b30-0394-4c6c-ba2c-e133113ae123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b1:7e:4b:dc:85:64:f7:af:0e:a0:0a:42:47:
                    d6:d7:7f:c3:4d:66:b0:24:d2:2a:3f:df:14:c8:20:
                    e5:ac:e1:da:14:f4:b0:72:96:1f:d2:02:f8:cb:3a:
                    57:d1:37:ee:e5:db:fe:81:43:39:d3:64:9d:14:55:
                    34:29:25:e3:ab:a9:98:50:06:9c:69:a7:46:8b:29:
                    73:1b:c5:1b:80:5d:06:ab:c7:b2:e7:53:24:f4:21:
                    d2:9f:8a:18:fd:d0:ee:3e:47:27:94:3e:ae:49:45:
                    d9:33:a7:39:c4:1f:c2:6c:53:2e:e3:75:f9:4e:e7:
                    cf:a6:65:20:6a:fa:62:4e:c4:98:a4:7f:92:79:42:
                    7b:8f:c4:85:1e:62:6a:59:46:e0:55:dd:cc:f8:6b:
                    22:05:d1:0a:db:4f:dd:ce:40:ea:4d:83:04:1f:8f:
                    87:5d:aa:b7:94:1e:db:29:b8:d9:30:93:03:d5:c7:
                    2e:90:b1:8c:cf:0c:63:2d:f4:73:30:34:20:97:c4:
                    8c:d9:d8:1a:02:87:da:e3:47:6a:20:a4:af:27:be:
                    4e:66:a3:df:99:2f:a7:fb:60:10:da:95:02:1d:f3:
                    f5:ff:2f:3a:ad:e1:0c:10:f5:73:e6:0f:dc:4a:f0:
                    77:10:4b:bb:ad:31:bf:1d:2c:00:ac:f9:6a:31:ee:
                    48:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:86:A0:47:40:A5:F7:EC:D9:8C:50:52:51:0A:95:C4:AE:A5:A9:05
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123/eac71b30-0394-4c6c-ba2c-e133113ae123.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.118.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40173

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:45:3c:e5:8a:ba:bb:62:ae:65:87:e4:51:88:84:23:9f:6b:
         cc:7d:9f:81:9a:71:ee:8c:9d:63:dd:8e:ca:48:3b:fc:06:ba:
         4e:3c:e7:4c:b3:ac:0e:8c:7d:7a:b9:62:9e:f0:db:67:68:4d:
         76:c8:8a:e5:55:12:39:f4:e2:10:d8:ee:69:70:c1:01:84:ed:
         b7:a0:ec:d4:fe:98:1f:61:0d:29:fe:a0:41:f6:ba:d2:72:1a:
         26:e7:ba:98:80:72:76:14:34:3e:f6:32:52:27:b8:a1:17:9d:
         a8:ca:32:90:24:e4:07:3d:55:3c:6f:30:33:b6:72:ac:8a:e6:
         d2:d7:9e:fe:97:d2:3b:6b:fe:34:40:2f:c0:ff:89:db:80:12:
         e5:99:cc:df:2f:db:27:43:eb:d7:15:76:4a:48:49:45:3c:02:
         67:ef:c0:3a:84:cd:28:60:a9:91:66:47:dc:58:2d:16:35:6a:
         2b:3c:28:11:5d:1e:f6:d3:e1:a5:de:01:74:4a:27:9b:60:8a:
         85:3a:4b:54:50:23:f6:f2:20:98:81:81:e7:06:c4:07:5f:fc:
         b7:04:e2:4d:dd:91:d6:a9:d2:93:b3:ba:45:e5:b4:2e:1b:7c:
         de:b3:56:a5:73:27:11:41:d0:cc:4d:b7:e9:5b:60:a7:e1:d3:
         71:8a:f9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----