Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843.cer
File:                     3530bd3c-c3c2-4bd2-bf7b-255fc4a87843.cer (raw, json)
Hash identifier:          3ogbdMMSY7XUX19lFhh59Xt/9atn+0VuwjnnCP+LxNU=
Subject key identifier:   AE:74:F2:90:0E:6C:4F:2A:8D:4B:44:04:B9:20:A9:8F:5E:C7:61:00
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844A646747C48F3FAFEE0C3ECA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 23 Jan 2024 14:25:17 +0000
Certificate not after:    Mon 27 Apr 2026 13:25:17 +0000
Subordinate resources:    IP: 66.223.63.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a6:46:74:7c:48:f3:fa:fe:e0:c3:ec:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 23 14:25:17 2024 GMT
            Not After : Apr 27 13:25:17 2026 GMT
        Subject: CN=3530bd3c-c3c2-4bd2-bf7b-255fc4a87843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:30:24:e3:26:9d:1a:60:79:1a:77:16:fe:9f:
                    5d:26:f1:43:d2:23:67:ea:b0:bd:56:5f:87:83:c1:
                    74:ab:8e:e7:bd:fa:ae:d7:81:4b:e6:f2:d4:af:8d:
                    87:41:c8:ae:b8:e5:c8:d1:e4:95:57:3d:15:9e:a9:
                    d9:a4:2b:4a:ba:4b:34:47:33:0d:42:14:1a:74:d3:
                    c0:c2:bf:fb:97:ce:90:75:97:3c:26:af:9d:71:fd:
                    9c:fc:7e:f6:5e:32:5f:d0:35:5f:8f:a0:ee:21:51:
                    f6:11:d9:58:0e:22:49:59:c0:e4:f8:e9:a4:76:05:
                    ca:dd:52:ee:e4:f5:a6:61:46:a1:c2:55:17:e0:e7:
                    10:b3:d4:cf:a3:f4:b4:93:37:3d:34:d7:04:41:21:
                    92:98:ef:e8:6d:68:cc:17:45:c1:dd:0f:0e:5b:77:
                    58:c7:76:88:d8:54:f3:d3:89:71:f1:c0:a6:34:ee:
                    28:be:d8:dd:59:23:7e:ed:07:2c:78:e7:f0:2d:58:
                    ff:ae:0e:fe:e7:f0:8f:75:fc:66:fa:f5:0f:84:2d:
                    ce:1c:71:e6:5c:0e:7d:32:a9:1d:59:3d:74:0d:63:
                    fd:e2:67:14:d2:36:00:fb:84:0a:72:65:d6:7f:58:
                    9a:02:d1:12:6f:1f:9e:5d:1f:b9:dc:19:47:49:48:
                    a2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:74:F2:90:0E:6C:4F:2A:8D:4B:44:04:B9:20:A9:8F:5E:C7:61:00
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.223.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:0a:30:61:04:f3:bc:7a:d6:ec:c8:c9:91:ee:a9:02:07:97:
         94:65:13:5b:10:69:a1:9d:fb:c5:67:8e:1b:69:6c:d1:a4:e7:
         1a:28:e8:27:58:55:2d:53:81:23:42:f3:eb:72:1b:49:d4:f1:
         03:33:06:3b:43:0d:7b:73:6b:04:db:9f:5b:87:a3:fb:40:13:
         26:9e:fd:2b:7a:98:d5:79:2a:2a:25:10:24:45:08:7e:7d:d8:
         f8:9c:9a:95:05:bd:5c:2c:48:9b:00:1c:87:60:d0:db:40:b5:
         5b:e1:e7:87:0f:91:0e:57:cf:f7:b5:02:78:2d:23:52:72:d2:
         71:e9:39:9e:e0:3d:9e:b7:78:fe:45:77:12:c0:ec:40:74:e5:
         6b:9a:a9:7f:f5:65:8c:fd:c6:3a:da:93:16:f7:57:74:37:2f:
         8b:e9:df:90:d6:98:9d:8e:7a:47:c0:70:de:f5:e7:32:12:97:
         00:66:46:5c:40:26:45:6b:99:aa:65:a8:be:ad:8d:bf:96:ae:
         20:64:9d:2d:75:8f:51:e2:5e:a3:ab:b0:11:01:2b:12:00:ca:
         6e:06:58:95:28:66:9a:79:c6:02:f2:15:ba:96:a2:fa:30:14:
         fa:3b:5a:05:a2:c0:38:fe:11:ea:9d:fa:13:93:a3:33:11:da:
         7e:05:5d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----