Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer
File:                     a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer (raw, json)
Hash identifier:          YBVPwf2JR0LCLVZ+Mqe5rMi0e3P19YxKp9edolHG1SU=
Subject key identifier:   AC:C4:2B:19:FD:7B:64:94:F1:BE:8D:6F:0C:E8:8A:B4:D4:7C:F2:83
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584499A28EA7B214DE9FED9FC800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 19 Jan 2024 01:45:20 +0000
Certificate not after:    Thu 23 Apr 2026 00:45:20 +0000
Subordinate resources:    AS: 18503
                          IP: 199.34.241.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:99:a2:8e:a7:b2:14:de:9f:ed:9f:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jan 19 01:45:20 2024 GMT
            Not After : Apr 23 00:45:20 2026 GMT
        Subject: CN=a53ac0b1-83a3-47f2-b28e-b2b1977dc375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5d:3b:78:9a:5c:4c:48:e4:82:2c:be:94:fb:
                    30:af:2b:df:b6:1a:68:3f:93:5c:e5:f4:6c:b5:b1:
                    8c:56:bd:92:a6:ec:59:37:08:10:d0:96:8b:63:8a:
                    6a:ad:55:91:14:6c:31:8e:0b:91:32:d2:f2:3a:9b:
                    43:74:59:c0:1a:c8:00:94:cc:da:47:ac:e7:ca:ca:
                    44:e5:8e:48:31:41:9b:8a:1a:a2:11:c1:91:69:c6:
                    4e:c5:70:22:de:80:3e:cb:5b:2c:1d:ba:3c:29:bb:
                    56:15:e7:0f:03:f4:e2:7f:1c:9e:6b:f4:b2:5b:e2:
                    5e:ab:af:a7:c4:0c:30:c0:15:69:90:c1:f5:45:b4:
                    cf:1d:b2:3e:ea:50:f5:d5:f9:04:11:41:b5:15:bd:
                    15:0f:4f:36:ec:e7:14:43:8b:7e:64:f9:96:d6:96:
                    d4:bf:b8:16:da:2c:77:9f:27:b0:e1:d4:b1:f8:f9:
                    15:ff:92:54:28:4b:2c:2b:f3:25:45:6a:04:48:7c:
                    c0:90:f3:b3:eb:74:87:14:ce:8e:cd:f5:2c:01:4f:
                    c2:1c:50:2b:c6:ad:b0:92:85:b7:75:64:51:bb:42:
                    29:af:16:65:7b:98:17:38:8e:9f:63:59:7f:a6:57:
                    e3:a0:53:0b:fe:44:5f:19:70:ec:f6:79:0d:b2:87:
                    19:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C4:2B:19:FD:7B:64:94:F1:BE:8D:6F:0C:E8:8A:B4:D4:7C:F2:83
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.241.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18503

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:69:c0:cb:5c:ff:06:41:dd:f3:c5:d9:23:0e:5e:81:ed:99:
         0a:36:4d:48:ff:4b:6b:bc:73:72:b0:c9:56:f9:57:a4:5c:08:
         13:ef:31:8a:cb:c0:30:fb:e6:31:45:82:57:fa:42:94:fe:5b:
         db:cc:dd:aa:5e:53:df:b0:53:41:77:91:20:52:8d:54:4f:4b:
         67:aa:cd:db:b4:51:cb:17:94:b4:29:3e:e9:fa:ea:34:47:4f:
         45:97:98:7c:45:b2:04:95:93:13:d3:a0:40:fc:26:4b:ee:5d:
         b7:99:bb:f5:69:b7:f1:a9:0c:fc:8e:5c:75:4c:85:e1:97:b5:
         26:f6:d1:c1:18:f8:05:cc:7f:91:13:e5:6a:17:6a:34:7b:18:
         34:b4:04:f9:a0:12:0e:97:86:01:73:d6:6b:22:cb:39:2f:89:
         da:e8:e3:3e:3e:b8:34:9e:bc:89:50:22:f2:49:e1:15:a0:83:
         64:3e:7b:86:cc:25:c2:ba:cf:1a:86:8a:a8:1f:bd:9e:b2:3a:
         4b:b5:25:33:ce:db:11:39:02:03:4d:0b:07:1c:b4:6c:0e:74:
         53:47:16:42:ae:79:4b:70:d2:3e:a1:11:0b:ff:73:dd:c7:8f:
         3d:4f:b7:6b:71:c9:63:f5:b6:a4:25:4a:70:9b:eb:02:86:6e:
         29:17:c4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----