Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29.cer
File:                     ee24f36d-faae-4b96-97ad-782fa99ddc29.cer (raw, json)
Hash identifier:          1hDGX/JbYv+lmHzxP8k5AmcEZLLMGM0SnUB0q5DP7c8=
Subject key identifier:   1E:18:C0:52:32:5D:C0:37:4F:DD:46:87:55:38:86:C0:27:90:FE:A8
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285843E1615F52F60B5E1C2A320880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/ee24f36d-faae-4b96-97ad-782fa99ddc29.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 14 Nov 2023 01:45:16 +0000
Certificate not after:    Mon 16 Feb 2026 01:45:16 +0000
Subordinate resources:    AS: 62892
                          IP: 168.161.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e1:61:5f:52:f6:0b:5e:1c:2a:32:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Nov 14 01:45:16 2023 GMT
            Not After : Feb 16 01:45:16 2026 GMT
        Subject: CN=ee24f36d-faae-4b96-97ad-782fa99ddc29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7a:14:b4:2a:33:44:ff:7b:30:88:05:8b:af:
                    fe:ed:73:68:74:86:e4:24:8c:cd:6a:08:81:93:53:
                    57:ba:c7:57:51:bc:5a:17:1f:6d:28:71:5d:a4:23:
                    2c:43:79:fc:d1:f9:bb:12:86:51:53:d9:0f:c9:af:
                    c3:00:2c:ff:c5:2b:05:ff:a7:62:00:93:ef:e4:1e:
                    0c:5b:f6:56:ea:a3:4c:66:9b:11:4e:4e:4f:8f:67:
                    37:be:1c:fa:c1:d9:15:2e:99:d4:a0:7d:8d:ce:7a:
                    13:d8:1c:2f:b3:2e:67:1c:6e:73:62:a5:6e:16:5d:
                    69:26:68:d0:65:21:86:68:f2:89:24:c0:35:76:d4:
                    aa:a7:3f:d5:94:6b:bc:4f:e6:38:86:2f:10:d0:f8:
                    70:ba:59:a6:f2:22:e6:1a:2e:dd:97:c8:9f:a0:8a:
                    51:c8:76:63:fa:33:ee:c3:96:69:21:0a:f2:a1:e6:
                    b1:89:f5:62:1c:99:51:80:60:6b:3a:a0:e4:a5:66:
                    fe:c3:2b:41:f4:da:5e:54:f5:a4:73:c1:00:2f:ea:
                    22:98:4f:b6:45:a6:e0:39:b4:20:a2:7e:a8:9b:44:
                    86:46:40:27:d6:67:cb:bc:15:e1:dd:59:13:8f:cb:
                    16:af:2a:89:08:37:8f:45:d5:02:ed:bf:00:62:67:
                    29:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:18:C0:52:32:5D:C0:37:4F:DD:46:87:55:38:86:C0:27:90:FE:A8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/ee24f36d-faae-4b96-97ad-782fa99ddc29.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.161.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62892

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:84:f9:c5:5e:c3:83:9c:0b:90:dd:13:44:6f:2c:70:58:bc:
         9f:02:6c:78:6e:3a:6f:43:72:20:a6:8a:72:82:dd:39:2b:c5:
         4a:be:f8:16:7f:4f:c4:cf:14:66:40:d1:97:aa:d1:b4:39:ba:
         e7:08:74:fb:2d:16:f0:e9:81:f4:7e:58:df:1d:94:fd:5e:55:
         ae:df:69:70:94:87:59:30:84:9c:a2:88:20:a7:10:e8:2d:8c:
         ea:64:4e:d8:81:1e:99:08:50:2d:05:09:7f:cb:cf:a4:56:21:
         64:c9:8c:62:0c:b8:a4:3d:bf:b1:1c:60:08:1c:98:1c:6e:ef:
         33:0e:06:ff:f6:d3:74:a1:31:ef:d6:a4:7f:65:54:a7:09:e0:
         e1:0a:db:46:f4:8a:d5:f6:bf:97:c2:82:38:5a:af:30:87:62:
         81:ec:63:e8:80:64:fd:de:73:ff:8c:6b:ca:e4:50:05:15:7f:
         ff:18:18:1c:1d:5f:31:54:77:cd:2e:cc:17:eb:43:2b:78:b4:
         19:63:fb:63:29:cc:50:58:f4:2b:a9:a5:61:2c:ff:7a:da:bc:
         6b:e7:67:8b:ca:d2:14:ba:ca:4e:5d:b0:b3:e9:d8:64:d9:b5:
         87:f0:dc:a4:1a:78:c1:38:a7:16:42:ed:db:cb:b7:71:99:2c:
         ba:0a:ab:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----