Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
File:                     0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer (raw, json)
Hash identifier:          +dVeXb0agFY6NA/p/m+Im5JbSyEilXfJK11b1PUlntE=
Subject key identifier:   6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285845323014A94B2E26FA0A11B160
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 13 Mar 2024 17:13:22 +0000
Certificate not after:    Tue 16 Jun 2026 17:13:22 +0000
Subordinate resources:    IP: 23.173.152.0/24
                          IP: 2602:f94c::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:30:14:a9:4b:2e:26:fa:0a:11:b1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Mar 13 17:13:22 2024 GMT
            Not After : Jun 16 17:13:22 2026 GMT
        Subject: CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f6:04:fe:9c:7e:e9:90:1c:d0:99:50:ff:2a:
                    59:64:17:7f:2a:1b:63:89:56:e9:e3:cb:3b:57:36:
                    a0:8c:e4:7c:ba:58:1f:5d:f3:96:a8:64:db:78:63:
                    ee:bd:ea:4c:33:80:a9:88:1e:78:f1:51:d5:2a:25:
                    d0:42:60:cb:7b:0b:1e:4e:e4:d7:bc:df:1c:75:a0:
                    68:dd:82:57:77:2d:26:d9:f8:ff:eb:54:61:c4:de:
                    00:7e:25:c7:22:63:6b:12:00:14:f0:15:e2:09:f1:
                    94:0b:81:2b:e2:40:6e:3e:e5:49:b8:b0:75:fe:ae:
                    e9:56:34:3c:1b:c2:3a:f5:ea:ad:5f:25:e8:17:59:
                    36:4d:4b:15:6e:1a:fc:24:75:3e:a2:15:66:44:53:
                    2e:b1:c9:42:d7:be:9f:d4:35:e5:19:2a:86:24:44:
                    e3:59:41:eb:45:4e:0e:9b:8e:dc:e1:14:97:c5:88:
                    40:41:5d:bb:2e:3c:0e:2d:f3:7a:eb:14:da:9e:b8:
                    65:75:7b:cb:4a:77:57:f4:9b:2a:90:ee:2c:87:f9:
                    9f:d5:56:55:cf:bc:65:68:c8:87:98:5f:4c:82:94:
                    26:de:27:62:f8:fb:0c:f6:a8:6f:41:b7:d3:65:c1:
                    c4:57:a6:fa:4d:47:06:57:7b:1f:be:2d:3d:99:46:
                    ed:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.152.0/24
                IPv6:
                  2602:f94c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:7a:c6:ab:b8:2a:67:eb:62:32:26:db:e0:05:f6:05:59:b0:
         4d:d5:41:44:74:30:b0:a1:d3:9b:f9:af:6d:5c:32:5f:8e:cc:
         3f:48:4b:7d:a1:fe:bb:3c:53:de:14:90:b0:b0:ff:41:48:9d:
         98:a0:33:1e:86:29:a3:21:91:31:4d:96:27:50:76:d6:76:c7:
         d1:32:7a:df:d6:36:82:93:d9:34:ce:22:21:db:1e:09:dc:49:
         e7:06:b8:93:29:0e:af:72:97:3b:1c:c8:7e:3d:58:1a:22:f3:
         00:1c:c0:d7:08:a1:1f:59:b7:fc:62:78:f9:43:6c:83:27:2e:
         13:67:d6:08:c2:32:2c:4e:d9:48:ba:7e:2a:cf:e3:66:b9:4a:
         7b:b6:4c:c2:7b:c7:4a:4e:30:60:83:69:c3:3d:4a:6f:f4:d8:
         01:b8:c9:d2:8e:6f:5c:9d:90:67:34:bc:cb:af:11:d9:d3:ba:
         2d:5f:7e:e8:9e:2d:a2:f4:7f:6d:7f:4b:bb:54:34:cb:4a:04:
         3b:20:0a:08:a5:1b:69:1a:b5:94:9d:fa:5e:a1:09:e8:d3:10:
         df:61:96:b0:60:37:ec:bd:e3:48:e4:33:b6:a3:11:b5:e3:95:
         82:c1:ac:0c:8a:1a:a3:c6:65:8b:96:a5:3e:e1:a7:f6:07:71:
         6c:bb:22:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----