Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
File:                     4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer (raw, json)
Hash identifier:          3EsfWPjI+g489+RHvtmwF3bcJA0Hh+2SF1C3NrzNf04=
Subject key identifier:   67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Authority key identifier: 62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64
Certificate issuer:       /CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
Certificate serial:       010D0C9F43285844823673BA111E5B31CAA6AB00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 10 Jan 2024 16:23:56 +0000
Certificate not after:    Tue 14 Apr 2026 15:23:56 +0000
Subordinate resources:    AS: inherit
                          IP: inherit
                          IP: inherit

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:82:36:73:ba:11:1e:5b:31:ca:a6:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
        Validity
            Not Before: Jan 10 16:23:56 2024 GMT
            Not After : Apr 14 15:23:56 2026 GMT
        Subject: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5a:56:10:5c:0f:d6:fe:6e:38:5c:d2:12:aa:
                    b3:e9:2f:46:a7:27:1e:2a:6c:60:e3:c0:da:e3:07:
                    4a:48:67:0d:1d:7a:7c:aa:10:6a:9e:39:c4:b9:b8:
                    4f:0e:2e:d9:16:66:1c:d4:b7:cf:55:aa:ed:79:3d:
                    1a:44:1f:3b:dd:b0:37:52:a8:36:da:12:6f:a5:66:
                    bf:25:af:cb:ef:ea:1f:3e:51:16:f3:c8:c2:6c:f2:
                    5c:ab:33:27:fc:ce:96:5b:84:bb:cd:9a:44:25:a7:
                    56:de:e6:62:b8:d1:1d:a6:e8:0e:b5:1f:a7:18:a1:
                    2c:5a:a6:fc:d0:ce:65:fe:a4:35:97:56:46:2a:8c:
                    3e:ef:f8:a3:d9:fe:19:3e:07:26:07:65:58:d3:b0:
                    36:bd:07:f6:79:eb:a4:9e:e8:43:03:d1:39:8c:05:
                    56:51:8e:25:19:05:dc:4b:54:4d:34:e0:5c:f9:c6:
                    79:28:f0:2f:ae:95:16:e8:6c:13:fb:be:a6:bd:65:
                    e6:51:1e:c1:a3:3e:a1:00:65:ff:c3:49:54:7f:db:
                    46:57:3e:b4:66:28:29:e1:95:9a:28:ee:08:2e:f1:
                    77:30:c9:56:94:85:31:63:b1:71:51:b0:28:ce:76:
                    00:7b:d5:c2:7b:d7:53:17:ac:5e:ab:ff:e0:3a:73:
                    e0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl

            X509v3 Authority Key Identifier:
                keyid:62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:12:d4:1c:9b:8c:b2:6f:8a:be:1a:fe:e4:96:a7:b3:2c:a6:
         de:a5:d6:4c:b2:be:ea:68:13:3e:dd:07:ee:d8:7e:bb:45:67:
         cf:4a:27:d1:3d:a4:34:61:65:95:35:28:83:75:d4:01:04:2c:
         de:e9:93:0e:18:b4:2c:a8:f7:3f:fe:fb:74:35:21:5d:74:b9:
         de:15:77:1e:c7:0d:48:b1:e0:f2:d8:3d:2b:5c:8f:8c:4e:d2:
         94:f1:70:55:52:7c:99:c0:8b:37:5c:88:d1:41:3b:2e:8d:39:
         9c:08:a6:93:85:40:86:ed:a1:69:06:c9:ef:6a:3d:16:e7:4e:
         1b:bd:a9:fb:9e:77:a5:3c:3d:97:25:c9:0b:36:b4:23:e3:a2:
         43:5b:ac:7a:6d:f0:9d:91:94:3f:b0:84:6e:93:26:fb:22:29:
         22:41:ee:03:45:03:17:8e:fa:0e:5a:d8:83:9c:18:0b:f5:45:
         3f:53:2f:c2:39:e7:08:8e:f6:2c:27:2d:09:09:3c:64:6a:07:
         67:cc:ff:b2:5a:49:03:36:ed:ae:ac:60:20:96:d5:9c:ae:a6:
         bf:cb:7d:1d:be:f8:8c:90:5d:0c:74:fa:ff:02:3b:ab:9c:e0:
         4a:a9:ff:df:64:3a:12:2b:2c:1b:16:ae:5b:1a:99:34:de:8e:
         eb:9a:57:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:38:54 2024 by rpki-client on console-fra.rpki-client.org