Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25.cer
File:                     52e8f306-ec01-431f-a68c-fec00a6f4c25.cer (raw, json)
Hash identifier:          cuWzm6ALzcTdYPEGM/tefPO5gSFczOa11JwI6J2gwg8=
Subject key identifier:   DF:16:68:A3:6A:E6:02:E8:27:ED:07:0B:0F:0A:47:F4:AC:42:7A:3D
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858437CC304C27E066FE822887780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/52e8f306-ec01-431f-a68c-fec00a6f4c25.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 09 Oct 2023 00:45:22 +0000
Certificate not after:    Sun 11 Jan 2026 01:45:22 +0000
Subordinate resources:    AS: 397546
                          IP: 162.249.184.0/22
                          IP: 2602:fde1::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:7c:c3:04:c2:7e:06:6f:e8:22:88:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Oct  9 00:45:22 2023 GMT
            Not After : Jan 11 01:45:22 2026 GMT
        Subject: CN=52e8f306-ec01-431f-a68c-fec00a6f4c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:65:e4:e5:4d:b7:5f:90:b9:6d:d5:af:83:8a:
                    11:f8:4e:64:c7:8f:e9:dd:bc:dd:35:11:9f:85:0a:
                    5e:c7:10:d5:73:f6:48:d7:d7:4f:08:c7:13:03:97:
                    6a:af:9f:c6:cc:c2:62:3a:5b:bb:dd:16:b5:06:ec:
                    70:a9:fa:9e:d8:a8:c2:51:77:a0:bb:68:19:d9:40:
                    74:31:5e:bb:fe:82:8b:d6:0e:39:30:91:a3:65:5a:
                    a8:0d:31:4a:4a:aa:fa:f1:16:46:7a:9f:93:29:7c:
                    93:b8:01:fe:7c:08:62:fb:e6:8e:03:d3:44:08:c3:
                    d0:e4:25:58:76:6c:c8:c0:7f:87:c4:7d:dd:e9:a2:
                    62:3f:f8:e0:48:3f:08:16:7d:76:35:49:69:eb:90:
                    6a:cb:c7:30:6f:17:f6:96:92:91:0a:08:7f:bc:6c:
                    88:3e:c6:ef:b1:86:65:dd:dd:c6:71:19:63:eb:d3:
                    90:ef:ae:1b:f1:42:06:12:72:47:bd:b2:f3:e8:c1:
                    5e:e8:85:43:b8:2c:65:ca:ea:96:a9:97:c4:50:38:
                    b4:6a:53:8c:d1:1d:90:1d:ab:b3:e5:11:88:38:47:
                    22:bf:34:5f:33:df:9f:d1:22:d6:ae:ee:2f:f6:89:
                    25:02:3a:0b:53:a4:2b:25:c6:63:a5:7a:51:03:63:
                    d8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:16:68:A3:6A:E6:02:E8:27:ED:07:0B:0F:0A:47:F4:AC:42:7A:3D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/52e8f306-ec01-431f-a68c-fec00a6f4c25.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.184.0/22
                IPv6:
                  2602:fde1::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397546

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:40:57:66:42:9e:00:5b:26:d0:02:e8:a2:47:76:e4:7a:66:
         43:cf:f5:ba:3f:4d:47:c7:34:05:4d:e6:f0:2d:b5:b6:9f:a8:
         a8:b4:b2:1c:ba:38:e8:61:65:e3:9b:57:c8:b5:c6:c5:c2:17:
         e8:2a:86:64:10:9e:25:09:50:75:3e:84:18:9c:33:7a:63:12:
         c7:46:a4:1e:73:1e:72:32:7a:f7:df:84:d1:83:dd:c9:fd:82:
         49:f3:3d:ba:df:d9:4d:74:bc:25:83:1c:42:dc:1f:97:39:19:
         7c:a6:f1:4d:3d:2a:1d:1b:af:b6:34:6a:c2:20:99:ba:b5:a7:
         12:6a:e3:42:f6:d0:25:fa:53:9b:ff:ad:e6:03:ac:b0:76:62:
         23:cf:07:49:8d:dd:8e:37:61:de:96:87:60:d1:1e:b3:11:8c:
         63:38:e3:69:98:46:e9:8d:ac:d1:db:c6:7f:8d:6e:dc:0f:81:
         1f:28:15:dc:7a:2e:24:6a:7f:e6:40:24:69:4c:a6:6b:62:12:
         3c:84:eb:60:ff:af:36:fb:67:5b:7a:fe:22:93:a7:0d:10:ab:
         b3:fb:e0:e7:31:72:47:b1:3a:b3:2d:72:dd:07:74:de:ff:a0:
         48:65:ff:6b:de:ad:89:f3:d3:80:c6:d2:8b:bf:a4:49:74:f3:
         b0:3f:a4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----