Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer
File:                     4e08a47f-8ddd-473c-bb7b-011963e78626.cer (raw, json)
Hash identifier:          5fxiKXDNPa/+uaYagNS9HQ4IKITWbFVbYwxaT1cTPA8=
Subject key identifier:   5B:2B:92:1F:0A:91:18:93:54:79:F2:F8:EE:6A:AC:CC:EB:E6:F6:63
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584628BC9693B5B1042FAB28CA40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 10 Jun 2024 00:45:19 +0000
Certificate not after:    Sun 13 Sep 2026 00:45:19 +0000
Subordinate resources:    IP: 207.66.104.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:28:bc:96:93:b5:b1:04:2f:ab:28:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jun 10 00:45:19 2024 GMT
            Not After : Sep 13 00:45:19 2026 GMT
        Subject: CN=4e08a47f-8ddd-473c-bb7b-011963e78626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:94:65:08:7a:d3:78:a5:a8:c5:a5:17:0e:e9:
                    6a:a1:da:2f:f7:ab:34:f9:c4:82:45:d3:fe:e2:e1:
                    ca:b2:ee:61:78:f8:21:6c:8d:df:18:3f:23:f8:56:
                    5e:ac:22:ac:69:e5:1b:4c:09:8e:59:60:bb:28:2f:
                    f1:b0:aa:a4:39:c7:25:9c:d6:e4:11:d0:04:27:b8:
                    ed:4b:1a:6c:1b:9e:90:2d:65:ab:ac:fb:ad:16:02:
                    c7:95:67:9a:b0:b3:5c:a2:d2:9b:9c:bc:63:b1:05:
                    a3:2e:43:cb:ab:82:61:37:c4:a2:25:46:40:ad:63:
                    52:b1:2a:e2:06:f8:aa:b9:0e:bf:f0:03:75:bc:8b:
                    73:df:cb:0f:6c:1c:1f:f4:b8:62:c6:33:f7:cd:6b:
                    eb:f5:65:ab:3e:68:78:0e:56:d9:f7:b7:83:5f:9f:
                    eb:ac:f2:d8:c0:3c:67:05:81:96:54:9f:9e:8a:61:
                    80:11:7b:aa:11:4a:ba:ad:53:8d:b9:15:09:a3:b7:
                    a6:02:38:ce:60:fd:52:54:1f:ba:07:ae:15:af:5f:
                    f7:d8:23:78:f8:15:95:f5:b3:54:5e:0b:06:d4:5c:
                    fb:01:04:d3:08:33:89:71:2a:db:de:d4:e4:ae:b9:
                    a2:41:8b:37:4a:23:c4:6a:a5:1b:e6:ad:42:39:7b:
                    dc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2B:92:1F:0A:91:18:93:54:79:F2:F8:EE:6A:AC:CC:EB:E6:F6:63
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.66.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:16:9f:9f:97:52:d3:00:6d:b5:45:4a:46:58:b3:11:3e:6e:
         ee:ef:c2:8d:1d:f9:8b:47:94:58:62:20:9b:37:31:c5:59:e4:
         fc:2c:17:45:93:b9:9d:84:66:56:74:65:26:57:92:e6:4c:c3:
         1f:72:f2:91:86:2a:c2:4e:d0:18:4f:9c:26:f2:14:f1:e2:d4:
         94:c4:bc:86:21:26:eb:70:cb:73:91:4a:5d:f0:f6:53:8e:e8:
         11:bb:4a:48:ba:ad:d3:ac:de:8f:5c:27:5f:fb:f7:d8:c2:f2:
         8e:fa:ed:16:c4:e2:4e:f3:97:f5:83:d4:be:7a:b3:e3:5e:82:
         80:13:4b:3e:d5:7f:d9:2e:97:0d:42:47:b3:e2:cc:0e:b8:a9:
         e7:9b:56:cb:cd:0a:da:88:0a:67:33:56:48:fd:c4:58:81:cf:
         2c:4c:42:82:59:5c:74:15:8c:ff:a4:ae:33:ab:a0:f5:6c:a9:
         87:f2:7b:4b:58:6a:4b:23:8c:33:58:53:e8:dc:63:dd:4c:53:
         06:1c:e3:a3:6d:33:a8:3b:c5:2f:32:d5:44:31:08:95:09:03:
         6f:7b:95:72:13:6a:06:c8:15:ca:66:96:e0:82:3a:b9:b5:20:
         ff:af:69:95:2e:35:f3:f8:14:3c:33:2c:a7:03:fe:fb:b0:7a:
         d1:62:f8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----