Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966.cer
File:                     55e7b8e0-0df5-4481-84e4-83619b05f966.cer (raw, json)
Hash identifier:          OoqCLED7fnxqNoCL6r69qAwS0hAl67TMZmQJdEeFpJc=
Subject key identifier:   61:AA:90:72:0A:BC:38:A3:EE:E2:A2:55:8A:C1:C0:63:76:26:67:D8
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584601A704CCA45652E8C9877918
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 27 May 2024 00:45:20 +0000
Certificate not after:    Sun 30 Aug 2026 00:45:20 +0000
Subordinate resources:    AS: 395970
                          IP: 23.170.112.0/24
                          IP: 2606:ec0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:01:a7:04:cc:a4:56:52:e8:c9:87:79:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 27 00:45:20 2024 GMT
            Not After : Aug 30 00:45:20 2026 GMT
        Subject: CN=55e7b8e0-0df5-4481-84e4-83619b05f966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3c:75:19:01:5b:9e:bb:42:b3:7f:86:1c:c4:
                    a1:3a:bb:93:a9:18:0a:23:9d:29:e7:dc:12:98:37:
                    2b:a3:dc:f3:ad:9a:96:48:c0:1c:07:8a:31:e8:52:
                    c8:dd:3f:0f:40:a1:1d:58:13:7f:89:50:e4:ae:68:
                    7a:fc:d2:ff:ad:70:ef:93:eb:7f:8d:c3:56:e8:56:
                    14:b3:c8:e1:98:75:fe:2a:13:23:db:9c:e5:e5:29:
                    ce:be:dd:41:5a:97:9e:d2:e1:47:2d:f5:cd:bc:31:
                    0c:e9:a4:c7:f1:f8:93:1e:59:ba:80:a5:41:4f:c7:
                    e4:bc:ba:17:ea:01:5b:32:8f:de:03:7a:74:9e:c5:
                    52:0c:c9:aa:f1:bf:f3:1a:ee:20:23:7c:da:61:a5:
                    49:45:34:1d:d4:15:7c:89:61:01:76:aa:fb:4a:fb:
                    36:d0:b1:bd:1a:a3:1e:f5:21:74:6c:cf:40:f2:9e:
                    5d:5a:07:1d:35:94:a3:b3:d8:97:1b:f4:d1:f3:c9:
                    f4:66:26:6d:9f:6b:f3:c9:d1:61:d3:f7:27:c5:9f:
                    1c:e7:44:e0:d5:bc:22:f7:96:1b:2d:d1:7e:0e:6b:
                    b0:8c:e9:0d:b6:2c:69:b4:83:ef:7f:a7:6a:a3:c2:
                    1a:5e:7f:22:3a:54:a9:13:c6:f6:1c:b7:05:e2:bd:
                    aa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AA:90:72:0A:BC:38:A3:EE:E2:A2:55:8A:C1:C0:63:76:26:67:D8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.112.0/24
                IPv6:
                  2606:ec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a6:8d:32:aa:37:5c:20:f1:c0:a0:be:50:4c:c2:02:91:e6:
         00:ab:51:6d:b0:c7:9d:45:99:e7:2b:e9:ec:fe:33:df:5e:11:
         87:41:01:d8:c5:9f:7d:34:84:50:79:97:68:cd:3c:1b:79:0b:
         17:c3:8b:e3:9c:be:ac:20:ba:f3:d9:a5:4b:78:82:e3:bd:1f:
         9e:24:d5:34:06:e2:59:52:9c:2a:c4:23:be:d0:6a:bb:91:20:
         ad:ee:29:68:4f:79:b6:bb:4d:89:11:eb:85:e5:d6:4a:c5:5a:
         15:ff:45:fa:3d:48:28:8d:6c:f8:1c:4e:7e:6b:d8:74:11:94:
         b7:c7:77:f4:fa:06:aa:78:ca:27:30:71:58:a5:1d:d7:fd:11:
         0f:ad:e0:0e:4b:9e:06:d6:e8:25:86:31:89:3e:95:e7:1f:e3:
         0e:ec:16:65:76:e9:d4:2a:20:b7:4d:ec:c7:82:66:a5:b9:89:
         98:1a:c0:0a:0e:17:3c:32:00:59:1e:39:0c:d2:97:55:2d:33:
         4f:aa:45:33:76:d9:09:e6:35:5a:90:69:cc:a0:55:c1:f3:31:
         78:d6:24:54:68:8e:39:57:9a:bb:10:aa:f5:13:37:97:62:f0:
         91:78:30:01:df:5e:30:44:72:61:db:de:85:ab:4a:6b:3a:9e:
         83:93:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----