Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a380bde-cea4-4356-b30c-38cc42ab112b.cer
File:                     4a380bde-cea4-4356-b30c-38cc42ab112b.cer (raw, json)
Hash identifier:          XH5XuoERF9GvmV1VaXlenwp6TUT9ATMya4CH/M3fAlE=
Subject key identifier:   73:B7:C5:13:8B:BF:37:5E:BE:FB:08:DB:9A:AC:08:45:8F:94:7F:37
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285842AB61AF1340F3C5BA13A7D3D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a380bde-cea4-4356-b30c-38cc42ab112b/4a380bde-cea4-4356-b30c-38cc42ab112b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a380bde-cea4-4356-b30c-38cc42ab112b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 26 Jul 2023 00:45:18 +0000
Certificate not after:    Tue 28 Oct 2025 00:45:18 +0000
Subordinate resources:    AS: 21635
                          IP: 199.200.116.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ab:61:af:13:40:f3:c5:ba:13:a7:d3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jul 26 00:45:18 2023 GMT
            Not After : Oct 28 00:45:18 2025 GMT
        Subject: CN=4a380bde-cea4-4356-b30c-38cc42ab112b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:db:1f:bf:eb:ab:ce:ee:45:81:54:60:1e:91:
                    e5:25:e7:b8:54:f5:3f:63:13:c0:2d:ea:d6:35:c4:
                    9d:59:c8:6b:24:38:06:c2:51:58:6e:46:b1:ce:51:
                    9c:6c:cf:ca:a4:f0:dd:4d:5e:6e:a7:17:ba:b4:87:
                    4f:54:13:27:46:e8:47:a9:f2:68:a3:6e:9e:a8:e1:
                    4e:4f:f9:08:6f:13:35:93:60:ab:2f:8d:8e:a0:3e:
                    7a:b9:23:1b:98:ac:00:f9:90:e6:38:a5:dd:59:9d:
                    65:b2:58:0c:94:3b:c2:eb:01:ec:4b:b3:32:7d:dc:
                    a6:eb:6b:d9:9c:08:ab:1a:d0:3f:6e:68:cd:5a:7d:
                    66:ea:39:a5:97:06:6d:6d:c0:48:d9:1f:c5:68:2c:
                    24:c3:9f:25:c4:42:b1:b2:f7:2b:7b:20:b4:5d:88:
                    a9:18:fc:c2:18:91:17:5f:95:10:08:8d:ae:8d:bc:
                    2e:72:f2:e1:41:2f:bf:20:c0:7c:da:d9:d2:44:36:
                    ff:59:eb:10:53:a1:f7:5d:be:e1:30:6e:11:03:62:
                    5c:00:dc:be:92:71:aa:67:7b:72:86:51:19:0f:d9:
                    0e:78:9b:d3:4b:bb:33:32:eb:64:7d:b9:4c:22:b1:
                    20:76:61:a2:0e:06:32:5f:1a:76:88:62:bd:74:d1:
                    06:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B7:C5:13:8B:BF:37:5E:BE:FB:08:DB:9A:AC:08:45:8F:94:7F:37
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a380bde-cea4-4356-b30c-38cc42ab112b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a380bde-cea4-4356-b30c-38cc42ab112b/4a380bde-cea4-4356-b30c-38cc42ab112b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.200.116.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21635

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:3f:8f:c1:d0:cd:a9:bc:fd:12:88:83:d8:b0:86:b6:6f:90:
         2d:3b:a7:75:1e:d4:91:e2:63:66:fb:18:22:b5:32:f0:93:9d:
         36:2e:61:18:17:58:7a:6d:80:e5:04:de:df:83:10:c7:5c:80:
         3e:e9:ce:1b:7b:13:61:12:bc:3f:33:0d:c9:61:48:4f:f2:d7:
         b0:e3:d0:85:02:4a:47:00:08:68:c9:e6:fc:dc:12:6a:a7:6a:
         8d:04:66:3c:66:97:d9:9e:b5:0d:ad:c0:f2:b3:1e:e8:15:ae:
         04:3d:57:76:eb:e5:a1:07:8b:9a:e2:94:11:4a:c8:12:5a:fe:
         f3:a4:e2:9c:50:fa:03:5b:61:b6:36:0b:92:72:61:a9:ea:30:
         30:be:b6:78:98:2e:c5:34:88:c6:34:62:25:44:bb:f0:1c:54:
         c5:a0:18:be:b3:80:97:26:b5:bb:61:90:05:aa:09:48:ea:5a:
         e9:9e:59:9b:e4:e5:2f:5f:9a:51:16:58:de:5d:17:72:86:be:
         a6:b8:0f:64:81:7d:c2:f8:69:43:82:a4:f6:18:9d:07:52:f0:
         46:59:5e:50:52:33:3e:25:ad:05:8f:63:83:b7:c6:d7:ad:51:
         25:3b:e2:6f:eb:ed:fc:30:cc:7f:60:c6:af:8c:83:cc:bc:53:
         6b:f1:6e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----