Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f.cer
File:                     15c06a4e-0bff-4d29-8219-f3995e34a55f.cer (raw, json)
Hash identifier:          8bCh+iX7otBT4VNb6Rvf6Rb2qQjRQKGdjnuSD3uekCo=
Subject key identifier:   0C:EF:5B:7A:0A:2C:08:43:B3:19:9E:38:FD:C4:BA:3A:9E:4E:15:D2
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285842F914E395D7CB749B37343120
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/15c06a4e-0bff-4d29-8219-f3995e34a55f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 22 Aug 2023 20:43:38 +0000
Certificate not after:    Mon 24 Nov 2025 21:43:38 +0000
Subordinate resources:    AS: 36023
                          IP: 209.196.192.0/19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f9:14:e3:95:d7:cb:74:9b:37:34:31:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Aug 22 20:43:38 2023 GMT
            Not After : Nov 24 21:43:38 2025 GMT
        Subject: CN=15c06a4e-0bff-4d29-8219-f3995e34a55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:99:b9:58:8b:03:38:52:a8:06:68:9e:bf:
                    03:47:8c:06:b2:0f:bf:bb:de:78:60:e3:b5:14:c0:
                    3d:2d:f9:43:1b:4d:7b:d6:c1:94:56:5a:10:33:64:
                    53:7a:30:d7:99:70:84:ac:85:79:30:78:95:ca:7d:
                    2d:fb:be:1e:cb:9c:35:3c:c1:95:27:5b:d8:a5:fc:
                    91:a8:b8:b2:b3:33:fd:66:41:a2:1f:e1:0c:9a:23:
                    77:a3:5b:48:1e:91:f3:15:5c:fb:da:05:8d:ce:a5:
                    52:f5:c9:4c:a3:47:9d:23:74:ee:4f:a7:ca:0b:39:
                    72:54:75:c3:bf:60:50:a5:e3:0b:7c:66:2e:31:40:
                    b9:cd:69:d6:3e:4b:bf:49:29:0a:47:f4:18:5a:6b:
                    66:69:4b:3c:25:e7:74:fb:a0:75:5f:e6:fb:49:1b:
                    67:a4:d6:ef:c8:df:30:51:de:6f:e5:b2:07:a7:9c:
                    86:dc:4a:2f:c9:51:b7:34:55:9a:34:8b:1a:78:5c:
                    bf:be:17:e0:0a:e2:91:a0:db:96:c5:cb:32:b8:64:
                    a3:f0:e0:b3:62:5c:e9:d2:14:b4:e2:0e:f3:44:4c:
                    16:2a:67:7f:e0:0d:b3:5a:cf:83:9f:b8:c8:36:0f:
                    b9:97:f1:47:1e:52:28:65:c0:b6:32:34:0f:c3:32:
                    1b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EF:5B:7A:0A:2C:08:43:B3:19:9E:38:FD:C4:BA:3A:9E:4E:15:D2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/15c06a4e-0bff-4d29-8219-f3995e34a55f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.196.192.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36023

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:09:0a:b6:b4:76:4a:67:8f:45:5d:62:8e:f9:7a:a4:bf:99:
         8e:5e:13:32:2d:49:78:ac:87:90:91:26:8d:97:64:6e:ca:f8:
         2b:4e:89:a9:be:5b:9b:48:fe:98:99:5b:60:4a:a8:29:1d:8d:
         4c:eb:9e:28:42:45:33:5b:90:58:cb:53:c5:ed:4f:3f:9a:70:
         80:da:bf:b7:ca:82:16:04:aa:b2:af:94:a3:a4:56:08:37:35:
         e6:3b:42:38:be:a2:94:4e:8f:e5:16:f5:ee:e5:f5:91:1e:1c:
         8b:4a:97:86:99:9e:d3:1d:cf:18:6a:fd:26:77:21:44:a9:36:
         41:81:2c:92:02:e1:a1:61:0e:51:19:6f:9a:8f:6b:9d:0c:7f:
         f4:9e:ea:36:7b:eb:f4:ac:c1:33:f0:75:24:ce:9e:73:76:72:
         25:70:bd:3c:09:b6:e1:d1:32:99:61:3d:de:fd:fc:d9:e3:e6:
         4f:06:8c:00:d2:28:58:cb:54:a1:46:26:05:c9:1f:6f:c4:44:
         9a:62:55:28:30:09:93:d4:d9:84:c1:c0:10:87:7c:f6:ad:8c:
         48:ca:de:e5:34:b3:27:98:2f:83:65:ba:88:fb:29:25:41:d3:
         f8:b3:9c:cc:9e:be:56:d4:03:af:81:ec:4b:eb:f1:1d:36:63:
         53:4a:b0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----