Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer
File:                     02e3db6d-40b5-4639-a499-a02b80a4befe.cer (raw, json)
Hash identifier:          FXSPcBG67dR/JWAw3VYzGWiSd1iKlTW5gMLq7+6Zd2I=
Subject key identifier:   CC:62:08:D3:2D:E8:6B:71:2B:A1:F2:C0:86:A8:B6:62:99:81:EF:B2
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858454910E10F193773A6DB3B3B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 21 Mar 2024 21:54:06 +0000
Certificate not after:    Wed 24 Jun 2026 21:54:06 +0000
Subordinate resources:    AS: 62488
                          IP: 162.216.24.0/21
                          IP: 2604:cc80::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:10:e1:0f:19:37:73:a6:db:3b:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Mar 21 21:54:06 2024 GMT
            Not After : Jun 24 21:54:06 2026 GMT
        Subject: CN=02e3db6d-40b5-4639-a499-a02b80a4befe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3c:6b:72:78:97:e5:6e:14:25:24:ea:4d:f6:
                    0f:e7:b5:d0:17:0c:e2:03:be:88:8b:c7:2d:86:56:
                    0b:3a:43:f4:8e:b2:75:a5:21:6d:16:1d:0b:1d:04:
                    3d:4a:dc:a6:b3:08:fd:69:f9:af:34:e7:e4:69:47:
                    cd:2e:f9:07:1e:0a:08:ce:89:23:8e:a9:91:7e:01:
                    92:f4:ac:92:ae:75:7c:5f:78:24:f2:ec:91:d5:2b:
                    cc:11:79:e0:0a:25:04:c7:93:63:97:08:f8:98:ea:
                    fc:be:b1:9d:96:84:61:fd:e4:bf:1f:9a:1d:5c:69:
                    ca:cb:66:4b:dc:15:f3:72:33:b2:b0:bf:2f:75:4b:
                    e9:44:ac:57:5e:2c:df:cf:ab:d9:46:2d:b6:ca:8b:
                    98:a8:c0:ac:6a:12:f0:45:9e:82:65:66:f2:2a:b7:
                    f5:87:35:e1:1d:cc:c6:d3:09:92:37:7c:78:bf:d4:
                    a9:b5:bf:29:62:90:50:96:d0:8c:bd:2f:bb:ef:4e:
                    6d:8d:0b:8a:f0:04:cc:9d:b0:4e:6d:4c:b9:80:4b:
                    1c:9c:ec:42:ad:62:ff:47:64:ad:65:d4:02:b9:41:
                    69:54:36:1a:e6:4a:9c:30:d1:9f:b4:fc:e0:f5:2b:
                    dd:7c:f2:be:30:eb:0e:93:55:5f:57:de:d5:68:b9:
                    25:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:62:08:D3:2D:E8:6B:71:2B:A1:F2:C0:86:A8:B6:62:99:81:EF:B2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.216.24.0/21
                IPv6:
                  2604:cc80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62488

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:6b:8d:04:b9:d5:ab:82:9f:f3:02:29:3d:8f:92:89:c7:0b:
         f3:8b:71:fe:3e:2d:e0:61:39:3f:8d:18:b8:92:e4:ac:1b:ae:
         b2:e6:2d:cd:5e:23:dc:a8:6b:76:b5:bd:85:bf:c3:fe:6e:78:
         85:e7:51:2e:5a:81:c6:71:db:e4:ba:d3:be:f1:f5:6c:c7:2d:
         73:0e:fd:a5:60:cf:7d:a1:24:0f:98:bf:27:16:8d:6a:b0:4c:
         e7:6e:3a:65:71:1b:41:a7:7b:89:8e:f1:c5:3d:46:1d:a1:bb:
         ed:f3:27:de:41:9a:10:12:e8:38:24:c8:08:d9:08:95:a0:e6:
         6f:a1:33:aa:95:ad:8c:d2:33:d8:49:d0:2c:42:09:3b:a2:df:
         97:60:d0:eb:8a:75:66:48:ff:86:fb:8e:cb:69:2c:8a:40:63:
         4d:e8:37:b2:7b:21:19:46:74:83:d0:28:ea:c1:00:6c:01:9a:
         4d:79:ca:6b:f0:ac:f8:81:33:29:4e:a7:5e:be:d9:4e:2b:da:
         21:63:1d:ae:a3:3d:41:47:8f:40:65:f7:90:e7:b6:ee:8e:67:
         6e:7b:85:03:50:b1:6a:39:2b:8a:1b:cb:48:ed:bb:1a:ab:c7:
         66:b9:3b:68:d5:f6:f3:16:55:3f:a1:92:09:d9:b0:37:e5:54:
         8d:0f:8b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----