Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335.cer
File:                     ef4796fd-6bef-4a60-aeea-580d00ee4335.cer (raw, json)
Hash identifier:          LmZxCsv5HUqONtcrF7oZm+Gqzhvuo8ujQX62eXbjzl4=
Subject key identifier:   86:AD:5E:34:50:E6:09:22:8D:AC:4E:97:03:60:0F:4B:11:6C:3B:E1
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285843EF56C79C27844A032DCEABC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335/ef4796fd-6bef-4a60-aeea-580d00ee4335.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 19 Nov 2023 01:45:15 +0000
Certificate not after:    Sat 21 Feb 2026 01:45:15 +0000
Subordinate resources:    IP: 199.165.143.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ef:56:c7:9c:27:84:4a:03:2d:ce:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Nov 19 01:45:15 2023 GMT
            Not After : Feb 21 01:45:15 2026 GMT
        Subject: CN=ef4796fd-6bef-4a60-aeea-580d00ee4335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:09:7e:48:e8:fa:ac:a7:f7:2d:86:a8:e0:
                    9f:a4:58:70:43:19:de:33:6d:a0:a7:81:60:e3:0a:
                    46:25:18:d2:4c:e4:f6:8f:f6:40:28:05:f6:11:ea:
                    cf:f9:ea:aa:9a:39:6e:0c:de:2d:cf:dd:e4:f4:ce:
                    82:6e:a1:ae:60:a1:22:66:e2:82:aa:9c:f6:b5:01:
                    8c:f3:bd:12:89:5b:c8:19:08:dc:f5:8b:4c:0d:99:
                    ca:53:ff:9d:83:5f:c1:3a:7e:b9:d9:ef:23:69:1f:
                    d4:83:16:54:2c:ce:81:b5:d8:04:e1:01:69:77:fe:
                    3f:90:d5:91:58:b1:b5:b3:ef:5c:db:13:e4:f5:79:
                    cf:67:86:5c:86:d5:f1:dc:e4:a1:4d:aa:6e:8b:a2:
                    bc:36:f5:3d:87:0d:21:a7:40:29:fb:47:79:70:70:
                    90:d0:d1:dc:22:82:ec:21:99:f4:e6:61:3d:b6:e2:
                    0f:74:14:6e:4f:70:b5:15:ed:ec:93:31:a6:d0:03:
                    39:4e:94:27:0d:b9:65:2b:7d:48:06:61:7e:db:90:
                    f8:70:52:51:46:fa:3d:d2:33:28:66:3d:94:b4:27:
                    1d:83:0c:72:f9:5e:51:d5:29:a9:bf:45:f8:2c:65:
                    f4:69:a3:23:5c:9d:3d:bc:fd:bf:ba:0e:ef:34:c9:
                    45:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AD:5E:34:50:E6:09:22:8D:AC:4E:97:03:60:0F:4B:11:6C:3B:E1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335/ef4796fd-6bef-4a60-aeea-580d00ee4335.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.165.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:17:a2:df:69:0c:2d:07:4a:59:5d:da:0d:de:63:e7:f7:12:
         33:31:18:e3:0d:39:7b:b7:e3:65:27:d1:b9:ef:38:c9:c5:df:
         54:46:35:dd:20:9c:b8:af:ef:a7:36:88:3f:33:da:df:f6:26:
         e0:eb:52:b9:74:e4:4e:70:51:9b:16:1e:17:03:2f:b7:0c:46:
         e6:7c:5c:6c:ab:c7:73:ce:40:63:a5:d9:7f:21:41:ae:4c:6a:
         6f:24:f7:46:15:0e:60:f8:03:03:f2:d5:74:8d:c5:6b:92:54:
         7c:7c:df:a7:e8:5e:8d:df:19:fb:3e:a5:78:28:a7:aa:72:bb:
         61:e7:96:85:ba:ca:b6:56:c1:d7:33:b0:01:41:3f:bf:0e:a7:
         eb:31:9b:70:2f:f3:a7:df:59:34:ac:16:0d:14:57:92:4a:46:
         32:73:39:b7:cc:f5:32:14:bd:42:bd:3f:1b:01:ef:8a:46:56:
         0d:f9:37:4b:5e:c9:79:98:8d:61:c1:8b:e9:7a:97:5d:a0:17:
         86:03:ed:d1:d1:4a:ad:0c:d4:00:e0:8c:3a:40:d4:e9:03:16:
         b3:53:94:e3:2f:ce:a8:81:c2:92:21:a0:46:9b:93:ca:0b:b7:
         c8:e2:f7:83:33:d7:a7:44:b9:97:5b:c2:6c:d9:8a:66:94:79:
         5d:c6:50:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----