Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer
File:                     c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer (raw, json)
Hash identifier:          vmFCZ+3vPmPvXrgdhoAR4jypyFycPD6mNTJO96xBeVs=
Subject key identifier:   CF:1B:30:11:70:75:38:4F:72:3E:E9:B0:CD:09:2A:B7:5A:08:C6:EF
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285841E4835467EEAF10B84AB85200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Wed 06 Aug 2025 19:06:39 +0000
Subordinate resources:    AS: 40706
                          IP: 23.157.224.0/24
                          IP: 2620:57:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:54:67:ee:af:10:b8:4a:b8:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Aug  6 19:06:39 2025 GMT
        Subject: CN=c9fc1d52-c008-4fdc-acd1-73ab6c71b153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5d:76:f5:c3:0c:ee:c6:95:41:90:73:a2:f2:
                    df:ea:2d:83:da:98:5b:08:e0:9b:ba:ef:7e:85:01:
                    27:11:6b:16:52:dc:9c:a8:be:32:94:38:11:ac:b0:
                    81:b5:ba:34:bb:0e:53:25:1f:42:3f:f6:e5:01:04:
                    ca:86:ad:f1:f4:4e:c2:87:5a:59:e8:ed:f9:92:dd:
                    a9:cc:34:6d:15:e6:d8:b6:4a:94:a0:1e:3f:a3:4e:
                    7f:0f:77:b2:a2:ea:cc:8e:11:f0:69:30:8a:79:61:
                    3e:f0:60:c9:d3:54:62:e9:f9:d9:19:a1:18:e7:fa:
                    2c:11:05:f9:3c:11:e7:a9:b8:db:83:99:36:d5:41:
                    e7:ed:2c:63:76:86:46:3e:b2:a6:98:1a:fb:d2:a9:
                    5c:27:a7:2a:9c:d3:65:8f:20:99:e2:a3:86:70:0e:
                    0d:5d:69:37:a1:df:54:62:c3:53:39:08:df:22:7f:
                    c8:32:07:bb:03:91:18:f9:be:1b:66:4e:81:02:ef:
                    19:00:b3:12:46:5c:70:a9:df:86:54:81:2f:47:c5:
                    1d:df:64:25:b4:8a:00:3d:91:cc:04:77:2e:18:64:
                    9f:68:ba:1e:36:d0:9c:bd:40:01:09:20:7a:a0:07:
                    36:5f:2e:00:0b:05:6b:10:2c:18:a3:b5:a1:9c:0b:
                    17:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1B:30:11:70:75:38:4F:72:3E:E9:B0:CD:09:2A:B7:5A:08:C6:EF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.224.0/24
                IPv6:
                  2620:57:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40706

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:92:2f:99:97:9d:2a:9c:ab:0f:c6:46:5e:b9:fc:13:88:ed:
         cf:fc:4f:34:4d:25:11:8c:b0:e7:75:e3:c1:d2:dc:f1:c5:6a:
         92:f5:25:f0:8a:6a:df:2b:71:0f:f1:94:8d:b1:a6:c3:7b:a3:
         11:bb:72:7f:e8:b3:42:50:65:32:f3:92:1e:fb:8f:1b:4c:2e:
         02:81:11:5a:04:01:fa:f1:15:a9:a0:87:83:0d:8a:84:b9:3e:
         87:3d:26:7e:74:8e:f6:fb:a5:80:dc:97:55:b2:58:76:c9:6b:
         93:17:25:ec:33:33:23:bd:1b:ed:1c:ef:d6:c4:60:58:ae:2e:
         a2:de:b0:dc:a2:ae:b2:f6:44:27:58:a7:f0:3d:49:45:27:bd:
         a4:bb:4e:07:75:8d:21:a8:4a:f7:33:0b:e3:6e:0e:94:6e:f4:
         59:23:65:82:6a:c6:8a:56:00:9d:52:73:f0:6c:9a:08:97:f4:
         95:9a:a1:13:fa:a7:9d:3f:7e:cf:9d:16:b2:0a:93:1c:d1:ea:
         1e:44:7f:a4:79:1e:74:5e:06:3b:4e:7f:e1:57:eb:3b:ce:4c:
         4f:ce:bf:28:fe:85:2a:a7:4b:10:c6:84:75:04:23:f2:e3:7e:
         6c:1b:69:01:43:91:83:ec:9d:07:ce:26:7d:f0:0a:e8:b9:d2:
         63:58:54:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----