Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b97dcf28-5160-4073-b534-4d59060c438c.cer
File:                     b97dcf28-5160-4073-b534-4d59060c438c.cer (raw, json)
Hash identifier:          h/79AhYDW0jQQNXjtLA69PwShY03VjwEgTS5gqMlgpY=
Subject key identifier:   80:45:68:7A:7B:47:75:E1:8F:66:1C:3C:8B:4B:97:A0:C0:31:AC:EB
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858453B7072DED049E3F83A7BDD80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b97dcf28-5160-4073-b534-4d59060c438c/b97dcf28-5160-4073-b534-4d59060c438c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b97dcf28-5160-4073-b534-4d59060c438c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 17 Mar 2024 00:45:20 +0000
Certificate not after:    Sat 20 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 63315
                          IP: 192.81.98.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3b:70:72:de:d0:49:e3:f8:3a:7b:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Mar 17 00:45:20 2024 GMT
            Not After : Jun 20 00:45:20 2026 GMT
        Subject: CN=b97dcf28-5160-4073-b534-4d59060c438c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:a5:5d:c1:59:98:89:0b:ea:3b:9a:7f:28:
                    3d:4c:cd:7b:13:91:83:e0:2e:2e:a4:2f:c3:11:b1:
                    ed:78:48:43:b3:76:d7:e4:87:ea:d9:78:96:fb:52:
                    ba:57:a1:1c:24:cf:cd:6e:ab:92:96:48:58:bc:4e:
                    94:7e:4d:95:74:ec:57:ca:3e:21:ee:42:b0:2e:41:
                    dc:6c:a5:6f:74:bc:54:b1:87:e9:af:46:d7:55:28:
                    a0:72:10:8b:56:30:53:ff:04:06:a4:4d:f1:0d:a4:
                    92:c1:d5:cc:21:25:fe:1b:ee:27:92:5b:be:24:16:
                    2a:92:5f:5c:3e:c6:b5:88:d2:b9:ac:29:b7:f0:4c:
                    7d:bb:28:b7:e3:57:88:8d:7f:2e:6f:b9:e3:e4:75:
                    4e:37:d9:db:61:53:4a:4b:c1:e7:2d:f1:45:c2:eb:
                    5f:ca:4f:3b:0a:19:79:6f:7f:ad:c6:6f:c6:f6:c3:
                    48:54:54:3a:03:d7:9b:3e:ad:8c:93:2c:58:2c:a4:
                    d0:96:e4:45:3a:a8:e0:cc:23:93:88:12:35:8c:4c:
                    b1:00:ea:0a:22:ec:95:9b:07:f7:30:ba:98:eb:c8:
                    f6:da:55:2b:93:23:09:b1:49:d4:1d:b8:f1:17:5d:
                    8f:8e:6a:58:24:94:6a:41:1a:52:46:b4:a8:db:62:
                    23:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:45:68:7A:7B:47:75:E1:8F:66:1C:3C:8B:4B:97:A0:C0:31:AC:EB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b97dcf28-5160-4073-b534-4d59060c438c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b97dcf28-5160-4073-b534-4d59060c438c/b97dcf28-5160-4073-b534-4d59060c438c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.98.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63315

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e9:47:1f:aa:fa:8f:66:c5:ce:2b:4f:b5:c7:f4:f3:51:a1:
         16:89:5a:34:52:0a:36:f0:bd:4e:1e:0d:55:a8:a9:01:8d:e0:
         1d:78:73:5c:79:02:4d:77:8a:8a:d7:c9:b8:83:c1:30:e0:6a:
         60:1e:1a:a7:24:f9:b7:a9:b9:ab:3a:6b:eb:4a:5f:d9:8e:e6:
         23:1b:30:00:50:34:70:6b:fb:01:e4:f1:1f:0d:bf:f4:bc:ad:
         7f:98:0b:a1:6f:19:7e:13:38:c4:04:99:ea:2e:d2:42:78:84:
         83:92:9b:7d:73:dc:1c:cc:bc:8f:3d:31:ef:ac:52:0c:a8:1c:
         a5:5b:e7:31:96:75:5e:5b:02:95:e6:a9:72:36:0c:6e:c1:06:
         b0:e6:d2:51:b4:87:33:3d:51:1e:cc:3e:a2:a8:eb:55:1a:88:
         fd:c8:9b:78:d9:16:5e:79:15:39:76:87:0f:90:9f:80:02:1b:
         2f:e5:68:a9:54:b0:03:fd:32:b9:4e:5e:bd:b0:f6:17:59:e5:
         b1:2a:76:c4:76:98:ae:ac:f2:d1:80:02:42:c5:b4:e5:17:1d:
         6e:4b:22:6c:10:c4:9a:a2:12:be:70:fd:9c:8c:21:8d:0a:89:
         a1:b4:df:65:2e:34:0f:2d:4e:1a:48:43:44:89:3c:f9:a0:07:
         8f:f1:04:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----