Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b.cer
File:                     4266161f-2cd7-4d22-a980-bfb4d861e17b.cer (raw, json)
Hash identifier:          rfb7ks89K3iwxY+ZWWP7VfDEoDXq7GbejiVoBdfpNUQ=
Subject key identifier:   C2:5E:05:A1:A1:3E:84:68:0D:00:F5:AA:13:25:7C:00:10:0C:A2:85
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285843FD4C359FBB843B5C1F297E20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/4266161f-2cd7-4d22-a980-bfb4d861e17b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 24 Nov 2023 01:45:16 +0000
Certificate not after:    Thu 26 Feb 2026 01:45:16 +0000
Subordinate resources:    AS: 400421
                          IP: 138.84.204.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:fd:4c:35:9f:bb:84:3b:5c:1f:29:7e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Nov 24 01:45:16 2023 GMT
            Not After : Feb 26 01:45:16 2026 GMT
        Subject: CN=4266161f-2cd7-4d22-a980-bfb4d861e17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:b0:7c:82:af:e8:4d:76:42:e4:14:5a:ec:
                    50:b6:a8:20:9f:ef:e8:8c:c4:35:b4:c1:75:1e:46:
                    5b:0a:8d:69:09:51:a2:13:47:43:a9:35:05:97:d2:
                    9c:85:d0:37:17:e0:00:ba:7f:df:26:0f:1c:48:82:
                    53:42:15:12:99:1d:01:2f:5e:ef:94:a0:b1:86:ac:
                    31:3d:35:9c:9e:16:5b:45:3f:e9:51:80:12:2d:06:
                    da:2c:c6:ce:54:dd:bd:51:67:d2:8b:e6:4c:b7:5a:
                    68:06:7d:bf:e6:5e:ae:4b:54:82:08:2e:b7:61:9d:
                    c0:16:f2:91:a2:89:4d:7d:d8:d9:75:47:4f:57:6f:
                    fd:70:8c:e8:38:fa:af:95:ba:98:ef:a1:63:b0:b6:
                    21:4f:7a:41:fe:d1:62:88:aa:f1:fa:27:5d:e1:32:
                    71:0a:0e:72:81:7b:df:56:64:82:85:92:6d:42:dd:
                    e1:3d:93:9a:4a:4a:d7:7f:8c:54:60:ae:ca:5a:34:
                    16:74:49:7e:66:78:04:16:8e:64:ad:37:6d:2f:19:
                    3c:d3:c2:92:7c:e9:f6:d3:66:a4:e0:06:0d:dd:cb:
                    0a:ff:79:2b:9c:f9:c4:7c:04:62:13:e4:4b:d0:d0:
                    97:d9:98:ff:47:75:f7:13:ea:99:7e:ae:b5:91:b3:
                    8f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5E:05:A1:A1:3E:84:68:0D:00:F5:AA:13:25:7C:00:10:0C:A2:85
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/4266161f-2cd7-4d22-a980-bfb4d861e17b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.84.204.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400421

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:f5:19:35:3d:7c:b8:a1:2f:c2:0e:e6:28:65:17:47:0e:da:
         e2:31:db:e6:c2:b6:10:79:13:ff:03:a9:a6:01:5b:5e:da:c9:
         67:ae:d2:6a:42:da:87:76:eb:01:2e:37:fc:50:70:48:97:65:
         fe:02:6d:e9:ef:ca:be:77:7d:f7:68:e0:35:a5:7d:5d:70:56:
         e5:10:99:91:de:c9:50:10:d4:84:b1:f8:59:80:b4:69:d1:fa:
         46:15:72:1c:b0:78:fc:6f:92:92:16:cb:50:27:01:33:2c:ba:
         b3:41:5d:14:ab:ed:0c:80:fc:f6:57:21:45:65:39:62:e9:ee:
         f2:63:7e:51:2f:aa:4d:bf:88:ca:ad:26:d6:88:ff:c0:15:e0:
         f1:88:cd:56:bc:b8:44:f9:3e:77:69:7b:0e:58:d7:e5:cb:cd:
         09:73:03:e0:eb:7a:66:cc:a1:60:35:49:44:39:1c:d9:1c:e9:
         af:51:b2:b2:99:d1:86:8f:04:17:a6:3a:1b:76:22:01:a9:e8:
         34:30:51:25:df:0b:78:a3:dd:bd:41:4f:4f:25:9e:58:31:09:
         38:1d:73:ec:68:46:33:df:b4:e5:eb:d2:00:ae:93:97:a6:7d:
         9d:5e:d7:23:81:d5:7b:26:3e:06:8d:04:41:a4:35:fb:81:bd:
         ee:fe:49:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----