Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7.cer
File:                     fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7.cer (raw, json)
Hash identifier:          BKP0Y3d+SyNmic1fGUZvLES+3xa2VI7RDM3lc5qYOkE=
Subject key identifier:   4A:1C:2C:D7:AC:8C:F9:15:BE:8D:9A:33:35:F8:8A:C5:4F:E6:5A:78
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584433EB7C07C18FC5E6D1B75BC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 13 Dec 2023 15:19:50 +0000
Certificate not after:    Tue 17 Mar 2026 14:19:50 +0000
Subordinate resources:    AS: 396425

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:33:eb:7c:07:c1:8f:c5:e6:d1:b7:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Dec 13 15:19:50 2023 GMT
            Not After : Mar 17 14:19:50 2026 GMT
        Subject: CN=fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:84:5f:56:09:0b:ee:b2:cf:85:dc:0a:d9:
                    c5:68:f4:3c:0c:43:28:38:3b:37:a7:24:4c:fa:36:
                    0d:eb:3d:0a:59:2d:30:0a:73:51:3c:6f:8a:b9:02:
                    57:8a:9d:f2:01:de:37:1d:48:f3:13:e6:dc:b0:2e:
                    8c:f0:6e:27:db:38:47:fd:dc:29:66:b3:44:7a:c6:
                    0a:91:e2:6d:81:6c:f2:b8:b7:5d:38:cc:8b:55:21:
                    9e:62:dd:9d:11:60:d8:ed:a9:a2:a1:c7:c8:d1:9f:
                    53:06:1c:84:5b:d0:95:73:76:94:22:5d:18:30:29:
                    1e:b0:bb:0e:c8:20:d7:3c:c5:68:b5:e0:8e:9b:97:
                    77:4d:44:71:bf:26:f5:c4:ae:df:d6:3b:92:5f:ea:
                    6f:b7:da:96:f8:f5:ac:41:26:a4:63:83:5b:34:75:
                    02:7c:cb:da:45:7b:e1:45:2d:7b:35:7c:f1:cc:81:
                    3a:95:13:d1:8d:25:16:6d:6a:c7:65:a5:f0:53:ac:
                    2e:2e:99:ed:ed:c1:79:35:5d:2c:fe:87:59:62:9e:
                    33:ff:36:df:4a:69:7b:9e:b8:59:09:2a:7c:df:01:
                    e1:37:b8:f4:dc:5c:f8:d5:2d:16:32:2e:22:4f:bd:
                    1b:97:b0:a2:0e:93:5c:f9:e6:f2:6d:97:b8:8a:bd:
                    73:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1C:2C:D7:AC:8C:F9:15:BE:8D:9A:33:35:F8:8A:C5:4F:E6:5A:78
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396425

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ae:02:94:1c:e8:96:4a:31:06:db:59:36:ca:a0:e4:a2:75:
         dc:54:22:05:27:70:15:a5:c0:8b:8c:fa:36:02:70:7b:2f:f3:
         b4:42:dc:c6:a0:cb:e8:00:a5:45:f7:c0:43:38:c7:85:ff:63:
         cf:b2:b6:1f:c9:fd:de:74:dd:bf:6c:e1:71:39:45:f8:e6:c1:
         57:72:69:e1:d9:c4:ca:7b:b3:06:6a:8e:3a:b9:af:0e:d3:a3:
         90:86:dd:e9:ff:59:c4:8d:51:9b:c7:b3:d5:23:3f:50:23:eb:
         e6:0b:bb:5d:05:ef:e0:6e:a3:ef:e8:70:67:30:27:6a:57:9a:
         45:17:72:82:e9:82:83:22:e5:14:da:d9:e6:d3:6a:9e:93:31:
         7c:cb:5b:af:f5:0e:ec:4f:79:52:a3:a3:50:7e:26:f8:f2:a7:
         29:ed:8f:d9:18:8f:3b:22:3f:63:a6:b3:43:ef:99:db:f7:83:
         ea:82:5b:7b:82:b2:45:8b:91:58:e9:ab:54:32:15:4d:12:c9:
         6d:f9:95:ca:66:b6:01:10:03:2c:55:ed:99:f5:b0:0c:a2:13:
         7d:64:54:35:38:98:5e:a2:86:40:57:52:16:67:30:6b:82:a0:
         1f:17:64:a1:83:99:97:23:45:67:80:3b:fc:36:89:f9:88:a9:
         1b:7f:cd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----