Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
File:                     252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer (raw, json)
Hash identifier:          Nf84ClzyZmVp4Tb6KZ116QPC9RQSkxA8LtwRrGySbgw=
Subject key identifier:   13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584344ED572E708697A432D16100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 19 Sep 2023 00:45:23 +0000
Certificate not after:    Mon 22 Dec 2025 01:45:23 +0000
Subordinate resources:    AS: 393732
                          IP: 192.76.185.0/24
                          IP: 2620:11d:5000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:44:ed:57:2e:70:86:97:a4:32:d1:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Sep 19 00:45:23 2023 GMT
            Not After : Dec 22 01:45:23 2025 GMT
        Subject: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:2e:4f:4c:f3:29:0f:db:81:70:e8:33:b1:
                    b0:82:cc:8d:0c:ba:d0:d8:1a:9d:86:3c:6a:4a:dd:
                    37:63:f4:c6:42:00:f4:84:fd:b7:8c:00:a8:c3:51:
                    d3:75:8e:30:31:0b:9c:98:16:65:7e:5c:38:05:b7:
                    94:5f:92:77:7f:42:8b:28:f4:aa:37:ed:35:10:67:
                    ef:bf:7b:40:bd:86:be:0f:2e:be:ca:f6:8d:25:c1:
                    5b:76:3f:7d:db:5d:c5:6e:e3:b0:c1:5d:41:58:6f:
                    b1:9e:49:4c:30:2c:39:a8:bf:f6:12:30:f1:74:0f:
                    99:cd:55:e8:b5:fa:23:1e:e8:b1:a5:c9:7b:1d:ea:
                    80:01:44:62:24:16:24:d6:f0:d3:9b:59:ea:68:b6:
                    06:73:ef:d6:f1:96:f3:d2:74:98:dd:8c:db:97:11:
                    a3:54:52:20:25:55:9b:3c:fb:ce:91:7d:66:e8:14:
                    ad:f7:f5:0c:02:dd:01:94:b5:49:15:81:ef:fe:34:
                    4b:8c:e4:cb:58:05:a2:34:a5:4f:e4:8a:b7:1d:b4:
                    2c:3b:f8:90:00:0e:f3:11:b1:45:90:57:81:14:28:
                    3d:69:51:bb:5c:de:b5:f2:4e:10:ec:6c:8f:86:f6:
                    79:cf:9d:d2:a6:ed:88:7e:6b:6b:e5:9f:a3:cf:fb:
                    be:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.76.185.0/24
                IPv6:
                  2620:11d:5000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393732

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:f8:ba:c0:83:43:84:f8:d7:7d:7b:90:b9:28:ea:14:b5:2e:
         a9:ab:d7:61:d2:9f:ce:cd:8a:6b:e7:73:37:69:1d:86:10:10:
         ad:eb:1a:b6:de:e3:4e:bf:cd:97:8a:72:b1:13:34:4d:e9:fe:
         f5:8c:d3:29:e9:e0:e4:68:a1:97:75:ef:fa:b8:6d:7b:85:20:
         4f:64:65:57:17:3c:4c:33:19:c8:a1:7e:21:bf:ac:84:35:c2:
         8a:ef:83:82:43:b5:cb:f5:c7:62:6c:1c:99:52:03:5a:58:ed:
         84:8f:60:51:be:26:62:4f:d8:ce:39:5b:4e:18:1b:4a:dc:91:
         88:bc:8c:35:52:8d:20:0d:da:55:ed:a7:bc:94:cb:f5:df:d9:
         c9:05:59:e9:4b:ff:9b:82:6d:3c:7b:ed:a2:92:50:fb:a4:7e:
         ba:f2:df:1c:58:b1:e3:9c:c9:6e:ff:e7:28:51:c7:34:c8:f2:
         94:24:15:61:a1:92:76:af:02:6d:d5:00:16:a6:1d:5e:f0:48:
         1f:99:31:79:4c:7a:e0:f5:80:b7:49:93:f9:aa:8c:97:1d:48:
         88:9a:01:65:d4:87:bc:f5:ba:7f:54:e5:bd:0b:06:46:f4:18:
         52:05:d7:2b:2f:38:70:a4:bc:11:9b:3c:6e:b9:fd:b6:b9:00:
         0d:7d:72:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----