Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010.cer
File:                     4281be58-d566-431e-b0b8-c563e631a010.cer (raw, json)
Hash identifier:          ZkgxZ64YOzc9wuKowBbTZPxtqPNEnXJyzdTFWeCareE=
Subject key identifier:   EA:9A:80:5E:7D:F8:8C:E2:07:CD:39:FD:E5:BD:ED:33:F8:B3:FE:EA
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858456C8A30555102A83D70E86B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/4281be58-d566-431e-b0b8-c563e631a010.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 03 Apr 2024 14:51:49 +0000
Certificate not after:    Tue 07 Jul 2026 14:51:49 +0000
Subordinate resources:    IP: 104.192.92.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:8a:30:55:51:02:a8:3d:70:e8:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr  3 14:51:49 2024 GMT
            Not After : Jul  7 14:51:49 2026 GMT
        Subject: CN=4281be58-d566-431e-b0b8-c563e631a010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:18:8c:32:75:9e:48:e7:70:1a:39:78:f3:16:
                    1f:75:0b:29:4e:fa:15:03:33:f6:8c:1f:b3:eb:a8:
                    d2:e7:8a:c3:ea:ee:2c:73:3e:a0:5d:44:44:fc:28:
                    04:b5:d3:3e:52:93:8a:d5:55:dc:fd:93:13:82:81:
                    5f:c8:c9:38:f4:57:2d:bd:9b:c2:34:be:dd:73:3e:
                    12:64:08:80:87:c3:05:14:49:60:68:69:79:75:f7:
                    0f:1b:c3:76:a8:69:76:71:87:9a:63:44:03:ff:9e:
                    b2:27:85:30:36:b1:1c:d5:d5:52:ef:dc:da:44:c4:
                    f3:5a:f1:c9:61:c7:48:47:a1:f5:1e:42:53:05:a6:
                    7a:a5:46:0d:77:02:bb:38:1b:43:fb:8e:cf:43:eb:
                    70:6c:17:1f:fd:7c:46:22:43:21:41:68:d3:25:9d:
                    cd:41:5a:82:07:10:56:b2:75:bc:82:95:0d:4d:88:
                    0c:23:5d:ea:66:b2:8a:fb:82:79:22:04:7f:cd:e4:
                    fe:46:6b:0b:f2:55:5e:30:1b:71:82:3a:cd:e9:07:
                    ee:bd:6f:49:53:bb:04:8b:11:73:27:1b:be:7b:b5:
                    51:98:c5:4a:84:af:47:bd:c1:a7:19:4f:82:33:a1:
                    f5:7a:fc:ea:2c:98:b0:61:13:a6:df:77:34:7e:d1:
                    5a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9A:80:5E:7D:F8:8C:E2:07:CD:39:FD:E5:BD:ED:33:F8:B3:FE:EA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/4281be58-d566-431e-b0b8-c563e631a010.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:82:5b:6d:3c:80:79:24:da:e4:c8:b0:8d:4b:18:f4:e1:84:
         f9:dc:ee:34:5a:a0:f1:11:b5:6e:90:99:fd:3a:da:a2:e1:06:
         8c:cb:55:5c:2c:ef:95:f3:0b:38:21:fa:0b:9d:b9:e3:1c:45:
         24:7b:3a:a1:f3:e1:9c:01:64:8a:b5:0e:58:42:45:ae:05:f6:
         7d:69:ab:cb:85:da:c1:ff:89:6d:1f:c9:33:6d:61:12:4b:4a:
         f3:c2:1a:9d:0d:fd:12:8b:d7:ca:88:a7:7d:a3:b4:c1:94:37:
         76:40:89:15:7c:45:63:1a:cd:27:4e:5f:0a:43:5f:56:c1:2c:
         99:68:64:f4:3a:c3:55:bc:61:99:7d:69:c4:c5:1d:12:81:3c:
         a9:80:88:e3:6e:28:21:8b:83:10:ec:49:f6:11:c7:06:68:20:
         a0:2e:13:f7:0b:b3:c3:85:fb:55:ee:19:94:c5:b0:ee:24:7d:
         c3:45:87:5b:2f:c4:fa:c7:56:55:08:50:14:1c:df:99:f3:03:
         5f:51:b6:f8:d5:b2:8d:f4:7f:b3:b0:45:33:35:5e:c6:e5:5e:
         28:53:13:17:e8:b5:36:17:83:85:55:13:4d:7c:c1:13:66:34:
         59:34:c8:d4:fc:23:15:db:b0:84:2c:c8:06:5c:ce:b2:e8:de:
         ee:f1:e6:d5
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEVsijBVUQKoPXDoawAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz
MzdkMB4XDTI0MDQwMzE0NTE0OVoXDTI2MDcwNzE0NTE0OVowLzEtMCsGA1UEAxMk
NDI4MWJlNTgtZDU2Ni00MzFlLWIwYjgtYzU2M2U2MzFhMDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRiMMnWeSOdwGjl48xYfdQspTvoVAzP2jB+z
66jS54rD6u4scz6gXURE/CgEtdM+UpOK1VXc/ZMTgoFfyMk49FctvZvCNL7dcz4S
ZAiAh8MFFElgaGl5dfcPG8N2qGl2cYeaY0QD/56yJ4UwNrEc1dVS79zaRMTzWvHJ
YcdIR6H1HkJTBaZ6pUYNdwK7OBtD+47PQ+twbBcf/XxGIkMhQWjTJZ3NQVqCBxBW
snW8gpUNTYgMI13qZrKK+4J5IgR/zeT+RmsL8lVeMBtxgjrN6QfuvW9JU7sEixFz
Jxu+e7VRmMVKhK9HvcGnGU+CM6H1evzqLJiwYROm33c0ftFaSQIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFOqagF59+IziB805/eW97TP4s/7qMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80
MjgxYmU1OC1kNTY2LTQzMWUtYjBiOC1jNTYzZTYzMWEwMTAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt
YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzQyODFiZTU4LWQ1NjYtNDMxZS1i
MGI4LWM1NjNlNjMxYTAxMC80MjgxYmU1OC1kNTY2LTQzMWUtYjBiOC1jNTYzZTYz
MWEwMTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh
ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw
/5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh
YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAJowFwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZ4JbbTyAeSTa5MiwjUsY
9OGE+dzuNFqg8RG1bpCZ/TraouEGjMtVXCzvlfMLOCH6C5254xxFJHs6ofPhnAFk
irUOWEJFrgX2fWmry4Xawf+JbR/JM21hEktK88IanQ39EovXyoinfaO0wZQ3dkCJ
FXxFYxrNJ05fCkNfVsEsmWhk9DrDVbxhmX1pxMUdEoE8qYCI424oIYuDEOxJ9hHH
BmggoC4T9wuzw4X7Ve4ZlMWw7iR9w0WHWy/E+sdWVQhQFBzfmfMDX1G2+NWyjfR/
s7BFMzVexuVeKFMTF+i1NheDhVUTTXzBE2Y0WTTI1PwjFduwhCzIBlzOsuje7vHm
1Q==
-----END CERTIFICATE-----