Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da.cer
File:                     1701ecde-5b4d-441b-badd-359ef0fbe0da.cer (raw, json)
Hash identifier:          fjlSrSOk5HILon5ZzTN0wbiPQwW0RTe5h5K9T3mnwp0=
Subject key identifier:   EA:16:5F:15:BB:9E:79:99:F1:45:B7:67:86:00:6C:08:9F:C6:55:3C
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584493ABEC44B8B3EB210B100A40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/1701ecde-5b4d-441b-badd-359ef0fbe0da.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 16 Jan 2024 22:29:22 +0000
Certificate not after:    Mon 20 Apr 2026 21:29:22 +0000
Subordinate resources:    AS: 395194
                          IP: 147.92.48.0/22
                          IP: 149.19.104.0/22
                          IP: 204.77.164.0/22
                          IP: 2607:5480::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:ab:ec:44:b8:b3:eb:21:0b:10:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 16 22:29:22 2024 GMT
            Not After : Apr 20 21:29:22 2026 GMT
        Subject: CN=1701ecde-5b4d-441b-badd-359ef0fbe0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:77:e1:7f:6a:8c:90:9c:1c:53:39:1d:8e:3d:
                    9f:f7:63:8f:a5:d8:98:7b:2a:94:7d:2c:c2:b9:8a:
                    05:5d:67:cf:cf:b4:0a:fa:ff:2c:b5:29:69:94:0c:
                    f8:3a:dc:3a:3b:8a:e3:68:2a:b3:6c:e6:6b:4e:64:
                    ce:ad:df:8d:6c:7a:52:95:bb:e2:8f:d4:0a:a0:0e:
                    04:df:99:f9:6a:d8:cc:fb:00:80:93:ac:da:61:7d:
                    db:d8:4c:69:2a:fe:bc:ef:b3:85:75:92:27:61:17:
                    de:2d:58:87:b9:8d:a0:b1:3f:51:dc:a5:ac:af:7d:
                    48:2f:ee:16:91:3c:ba:96:35:3e:d0:4b:51:63:8c:
                    6f:85:ff:54:74:45:76:4b:b8:5c:54:6d:af:6b:0d:
                    cd:38:e1:e6:5b:89:3a:a5:34:9b:32:ca:95:54:a5:
                    19:29:bd:7b:44:dd:78:84:40:72:b4:86:5c:56:bb:
                    5e:ce:35:8f:50:94:74:24:64:5b:78:24:b8:d9:09:
                    33:d3:8a:c6:06:72:dc:9d:c4:3b:4a:74:6d:0f:6b:
                    b5:4b:4d:ba:86:e4:f6:41:71:4a:27:30:89:3d:49:
                    1e:e6:07:e1:4a:5e:8b:cd:1b:98:a8:54:f3:1d:7e:
                    70:f9:ac:66:7f:84:62:05:f1:a9:43:6f:a2:85:e0:
                    76:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:16:5F:15:BB:9E:79:99:F1:45:B7:67:86:00:6C:08:9F:C6:55:3C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/1701ecde-5b4d-441b-badd-359ef0fbe0da.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.92.48.0/22
                  149.19.104.0/22
                  204.77.164.0/22
                IPv6:
                  2607:5480::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395194

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:8f:49:b5:78:0b:4e:e0:82:fc:11:04:b4:bd:f9:e7:6d:cd:
         4c:50:3c:ba:8f:76:2b:86:be:90:53:73:a8:0b:2a:5b:77:55:
         1d:18:ee:64:96:19:27:37:64:f2:4b:4b:b2:f0:72:18:15:2e:
         35:79:93:2a:97:28:cc:88:a1:ff:f7:2b:62:3d:a4:d8:a3:1a:
         d9:a4:02:cd:63:f8:71:c2:52:9e:f6:ae:91:5d:17:49:de:57:
         f1:41:35:14:2e:40:dd:16:16:61:68:28:43:0a:57:6d:b9:b4:
         50:62:89:d2:a1:a7:ea:1a:50:44:58:dd:57:e3:2a:e5:b1:06:
         44:3e:04:19:25:8e:a9:21:0d:e4:81:a2:03:0f:66:ab:fc:0b:
         d1:c6:5a:63:42:ca:e0:a8:65:40:1a:71:82:bc:3f:5a:39:96:
         aa:35:53:75:a2:bf:de:3b:37:e2:e9:27:f7:f3:13:e8:a6:0a:
         d1:43:ac:33:b6:8e:64:0c:34:eb:3c:93:dd:1c:d3:06:04:3c:
         2d:12:f7:53:0a:c3:37:b3:32:7c:03:67:66:eb:47:4e:2f:4c:
         98:1e:b0:ae:57:5f:0f:53:24:57:06:b2:c6:19:07:37:50:90:
         e2:0b:20:ab:91:28:a2:b0:14:da:d8:bc:3c:fa:24:68:eb:7b:
         38:b7:86:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----