Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer
File:                     d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer (raw, json)
Hash identifier:          rZy8BxyiIipYqoq3NF3MYGniwSvhZOC7/7eCh5pPq6o=
Subject key identifier:   6B:46:77:60:80:69:68:F3:21:4D:61:F9:72:1E:55:99:6C:AE:A7:41
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285841E4834EA4E04126DDD9563320
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Fri 27 Jun 2025 19:06:39 +0000
Subordinate resources:    IP: 198.199.155.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4e:a4:e0:41:26:dd:d9:56:33:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jun 27 19:06:39 2025 GMT
        Subject: CN=d849c62d-50e4-4fcb-9dfe-8634d409fe65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0f:78:f6:b0:c4:29:0e:a5:20:eb:66:3a:34:
                    e6:2a:eb:cc:2e:fb:4e:49:45:e9:c8:7d:6e:53:b3:
                    b9:44:4c:d2:8e:c1:6f:e5:76:7d:ff:78:75:7a:67:
                    49:7d:0d:f9:11:37:e3:27:19:b4:e5:88:23:66:ce:
                    9d:d7:de:48:a6:5d:52:fe:75:62:c4:8f:20:a5:2d:
                    c1:18:c1:94:b0:60:ef:2d:18:00:cb:64:41:c9:aa:
                    b3:ba:a5:c6:01:38:24:61:40:0e:22:aa:e2:ae:c9:
                    bf:49:58:e0:4b:0e:53:df:c3:a0:50:1e:5d:3e:d0:
                    5f:e2:60:53:92:97:84:8f:39:df:e7:fa:ac:21:1c:
                    fa:79:fa:d5:75:b0:dd:5f:31:80:ab:ad:3c:a6:57:
                    c5:e7:45:b0:37:f5:a8:50:a7:38:1a:56:4c:7b:ee:
                    1c:9a:e1:d3:34:c2:7d:9e:82:a0:e1:a2:28:c2:00:
                    71:b1:af:6d:0d:30:c7:8d:1b:6d:76:c0:12:87:1a:
                    aa:3c:5a:99:bb:d0:ea:93:14:08:3d:70:d2:9d:25:
                    ff:70:58:9b:d0:ea:70:36:6e:bd:e7:a0:5b:54:d8:
                    aa:bc:e8:db:66:03:48:98:88:16:06:77:ab:6e:1f:
                    c4:a6:19:b3:e7:2c:38:21:52:14:c0:83:09:79:fd:
                    6c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:46:77:60:80:69:68:F3:21:4D:61:F9:72:1E:55:99:6C:AE:A7:41
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.199.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:8f:35:43:ca:dd:e0:95:96:2c:45:40:f6:02:48:05:c0:9a:
         2a:e6:1b:a8:ae:d4:35:85:0b:c3:b9:b0:67:64:1b:90:d8:cc:
         4f:3c:67:cb:52:27:d5:af:e5:37:5d:45:68:a7:d0:41:8b:49:
         0c:0f:4c:15:88:7d:d4:35:27:68:e6:44:76:b9:69:d5:67:ac:
         d1:46:9d:0f:ef:75:bb:60:3b:91:ed:cb:03:e8:76:c3:c0:e1:
         3a:75:e3:5c:77:96:88:73:69:2b:56:02:46:11:9f:e9:38:27:
         57:f6:59:19:11:f8:74:c3:2c:0c:bc:c4:c7:c3:2c:fc:8c:3d:
         20:1a:fe:dd:c7:71:6e:4e:3a:fa:1d:c2:2f:ee:d5:58:c8:d8:
         97:65:0a:a3:78:32:52:8d:35:25:5c:43:70:45:2d:f5:47:27:
         71:aa:fe:cb:22:94:55:a2:a0:d5:c0:a4:12:9e:d9:fd:27:33:
         d4:45:36:76:fb:31:c6:e4:76:88:ef:fd:f9:e7:15:b6:2a:2e:
         78:9d:0d:b6:a3:6f:c2:ef:63:df:ae:9b:a4:7c:2d:85:fa:6e:
         a3:05:66:d7:04:30:62:0a:be:d5:42:90:b2:13:38:1a:00:1c:
         94:b7:73:47:90:6c:ba:4a:74:9c:10:a0:3c:f9:b7:8a:57:9f:
         3e:4e:7b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----