Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bed4a3ee-2da2-4596-828c-6284206c89b6.cer
File:                     bed4a3ee-2da2-4596-828c-6284206c89b6.cer (raw, json)
Hash identifier:          UdP+g4nU8nKhb5vuD6O61Mo/Q6x1l17LmtU2ot5re1Y=
Subject key identifier:   CC:DF:68:8C:CB:11:94:CA:CF:66:EF:63:17:18:44:11:B5:23:7E:C5
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858456AE616186090A031274E7380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bed4a3ee-2da2-4596-828c-6284206c89b6/bed4a3ee-2da2-4596-828c-6284206c89b6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bed4a3ee-2da2-4596-828c-6284206c89b6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 03 Apr 2024 00:45:21 +0000
Certificate not after:    Tue 07 Jul 2026 00:45:21 +0000
Subordinate resources:    AS: 394507
                          IP: 199.88.130.0/24
                          IP: 2606:32c0::/32
                          IP: 2620:e7:4000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6a:e6:16:18:60:90:a0:31:27:4e:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Apr  3 00:45:21 2024 GMT
            Not After : Jul  7 00:45:21 2026 GMT
        Subject: CN=bed4a3ee-2da2-4596-828c-6284206c89b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:00:cf:29:01:1d:2f:b5:89:85:d5:74:5e:be:
                    b3:d7:49:c9:9f:99:92:ec:0d:df:8f:b4:cf:fb:84:
                    14:62:8b:5e:d5:f2:ae:1c:4e:67:69:af:d5:80:8d:
                    56:4a:fc:61:4a:6c:63:fc:b1:f2:87:69:6a:ed:ec:
                    31:da:fb:c8:2d:72:fb:27:ee:cd:95:25:8e:22:d5:
                    a7:6e:89:83:be:d1:3e:9a:30:4e:bc:da:63:c5:95:
                    c7:9b:82:e0:d4:3c:cf:72:ee:a9:7f:97:1c:ed:b1:
                    77:9b:c5:3c:d9:94:bc:cf:39:7c:da:3a:9c:4c:59:
                    e6:7a:c5:89:3c:ca:c7:e5:8c:72:f0:cc:97:3d:de:
                    9c:17:8d:b4:7b:17:58:87:52:74:22:52:14:58:f7:
                    d5:ee:25:26:82:09:75:98:fd:0c:ed:1c:ad:95:90:
                    bf:74:17:a0:e4:92:25:cb:9c:64:1d:90:7c:01:1d:
                    f0:78:7e:7c:c8:20:1e:8c:de:38:5f:68:7c:0c:3f:
                    64:c8:16:1a:50:52:44:25:4e:70:e1:0f:e0:37:a8:
                    5f:3f:be:74:f1:ca:d2:24:87:73:a4:e1:b4:51:b4:
                    49:16:7a:18:86:4c:b1:9c:0c:79:53:96:f5:c0:24:
                    34:26:8c:9c:19:e4:59:c2:97:1a:91:40:b4:1c:53:
                    46:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DF:68:8C:CB:11:94:CA:CF:66:EF:63:17:18:44:11:B5:23:7E:C5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bed4a3ee-2da2-4596-828c-6284206c89b6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bed4a3ee-2da2-4596-828c-6284206c89b6/bed4a3ee-2da2-4596-828c-6284206c89b6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.88.130.0/24
                IPv6:
                  2606:32c0::/32
                  2620:e7:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394507

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:4d:0a:98:17:51:5c:74:67:e8:cb:01:3f:31:29:39:e1:37:
         26:39:b7:8e:42:29:23:13:11:d7:95:78:46:1b:de:9f:5a:1a:
         4b:8d:d0:a8:48:80:8d:16:03:d8:ea:14:c2:08:d2:ea:e5:ac:
         bc:ce:a0:8e:5b:c8:4c:6e:b3:be:ee:f3:07:cb:d1:7d:95:ae:
         f9:4b:49:ad:20:9d:f3:aa:10:60:2a:e3:55:f6:99:ce:16:78:
         34:25:f8:46:48:d1:68:f2:bc:ec:ce:57:ab:63:c1:4a:a5:21:
         34:f4:1d:7f:42:6e:27:87:d4:a0:8b:47:47:5c:b7:d4:fc:2d:
         9f:73:8d:fc:39:52:83:ad:1c:51:4e:dc:fa:fb:10:1d:60:0f:
         fb:6f:7f:9f:4b:6f:ec:5b:b1:b0:df:e5:18:33:56:c0:fa:ae:
         be:ca:ad:b2:de:79:41:a8:70:82:20:d9:c6:2f:bc:ca:cd:b7:
         86:e4:b1:03:f7:e9:43:b6:1f:c0:ec:39:d6:22:8c:cc:ce:f6:
         19:ef:bb:bb:90:ab:d2:3e:93:87:d9:81:82:e0:76:28:7f:85:
         90:9c:2a:ed:fb:85:c1:aa:90:3c:0b:e6:1b:43:13:f3:ff:8b:
         fd:88:bc:14:32:6e:01:d0:ba:ed:88:ee:23:fe:dd:ee:ac:dd:
         ca:61:2f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----