Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9.cer
File:                     2522458f-db94-4ba6-8127-005675e4eea9.cer (raw, json)
Hash identifier:          64A4NWjD/llBAMAixMOYtBY2DxS2f+0yvGwlirBT/ns=
Subject key identifier:   59:C1:DC:2B:5E:1E:97:A2:55:CA:3E:43:44:49:99:23:E8:26:E5:01
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844E1D216FFEBF01C1796756020
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 13 Feb 2024 22:19:19 +0000
Certificate not after:    Mon 18 May 2026 21:19:19 +0000
Subordinate resources:    AS: 36000
                          IP: 208.73.76.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e1:d2:16:ff:eb:f0:1c:17:96:75:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb 13 22:19:19 2024 GMT
            Not After : May 18 21:19:19 2026 GMT
        Subject: CN=2522458f-db94-4ba6-8127-005675e4eea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b7:5a:5a:ea:b9:d4:d5:15:be:49:9e:e6:c0:
                    8a:86:e0:90:51:2f:4e:1d:4b:fc:26:5a:bf:7f:f2:
                    d6:a0:b7:73:36:46:ef:11:88:95:29:a4:1e:ed:38:
                    99:a0:45:96:e1:cc:bb:93:28:36:57:32:f7:d4:d3:
                    92:e7:1f:4c:93:4c:d3:02:5d:21:3c:b4:c6:df:fa:
                    63:62:f4:f3:32:b9:d6:e0:f1:19:4b:23:55:1b:a3:
                    ec:db:bf:62:14:d4:86:9e:82:23:d3:22:75:54:7e:
                    34:41:c2:6b:66:6d:7d:e4:f3:51:2e:69:2a:0e:1c:
                    f7:ee:f1:bf:b2:8f:c5:cc:47:26:5d:d9:ef:b2:40:
                    5f:58:e3:2f:3b:06:c4:57:d4:2a:50:08:ea:b8:79:
                    f4:c1:8a:82:90:ba:16:49:a4:14:6f:6c:5e:3e:82:
                    ff:32:1b:07:e9:d9:6f:06:bc:2e:8b:29:eb:ff:cd:
                    7b:ab:c8:ef:05:52:d5:0c:b9:1b:a9:09:8c:51:34:
                    71:72:5d:5c:83:4e:bf:23:3d:33:34:f7:03:90:55:
                    0c:29:7c:d3:de:49:02:67:7c:08:b8:6d:39:24:38:
                    eb:81:ab:bc:a3:85:33:b2:0c:42:36:0f:2a:09:a9:
                    22:ba:ed:3f:c1:9b:2d:f7:38:08:04:e1:2d:d8:d6:
                    52:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C1:DC:2B:5E:1E:97:A2:55:CA:3E:43:44:49:99:23:E8:26:E5:01
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.76.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36000

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:9b:f5:db:96:ee:de:01:af:3b:5f:b5:13:0a:4c:b7:b5:b3:
         20:fc:a5:58:ba:3f:48:a9:18:29:35:d5:d6:07:b2:46:33:64:
         60:bb:49:e4:b4:d8:82:c5:3d:09:0d:60:1d:fe:77:a7:f4:a3:
         c2:ce:1d:0b:17:78:13:6f:11:6f:86:f9:b4:da:45:dd:5b:58:
         04:03:15:a2:7d:49:55:03:36:b9:0f:ec:b7:47:e6:50:9f:45:
         8e:9a:b4:ae:f3:56:0f:b5:25:2f:03:4d:20:94:ec:fa:38:7c:
         04:dc:a1:8b:65:30:7e:a6:42:e1:a3:f5:e3:1f:41:c1:ef:59:
         e0:78:1e:0f:5c:11:82:7f:b2:39:f5:22:4b:25:c3:7d:c4:a7:
         27:8b:b6:b8:50:65:59:0d:5c:9f:64:a0:d1:d8:a8:57:37:3a:
         ff:05:52:41:3a:eb:08:e6:58:b2:cf:08:c5:e2:dd:79:4a:eb:
         9f:39:05:12:66:8d:ea:22:f3:42:4d:c2:ee:36:f0:b4:53:54:
         a9:0c:e6:85:7e:f5:46:2a:bf:31:b2:cb:a7:0d:e5:cd:8c:b5:
         5f:c8:22:d3:9a:93:93:fb:6b:b3:4c:92:18:e5:16:35:e9:9b:
         19:11:0c:54:3a:2d:9d:b5:7f:b0:d6:05:7a:c3:8c:ee:3a:f5:
         e2:80:57:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----