Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/627331bd-3468-4a2e-8d59-a1229df28b6e.cer
File:                     627331bd-3468-4a2e-8d59-a1229df28b6e.cer (raw, json)
Hash identifier:          7PiXj2Dr8sIpQ4uekD+PhRoJIKk4v9mYMfdiOGBbC8k=
Subject key identifier:   19:B0:31:21:1D:43:DD:BD:7D:84:CF:EE:B1:0E:B6:98:41:CB:15:14
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584509807D8D9B54C07E3343BB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/627331bd-3468-4a2e-8d59-a1229df28b6e/627331bd-3468-4a2e-8d59-a1229df28b6e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/627331bd-3468-4a2e-8d59-a1229df28b6e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 28 Feb 2024 03:27:15 +0000
Certificate not after:    Tue 02 Jun 2026 02:27:15 +0000
Subordinate resources:    IP: 199.167.229.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:09:80:7d:8d:9b:54:c0:7e:33:43:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb 28 03:27:15 2024 GMT
            Not After : Jun  2 02:27:15 2026 GMT
        Subject: CN=627331bd-3468-4a2e-8d59-a1229df28b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e6:e3:b1:72:2e:e8:bc:ed:55:bd:03:1e:66:
                    11:fb:ed:a5:93:80:bf:0c:54:4a:cd:73:27:6e:a7:
                    aa:69:3c:53:2d:8c:d8:54:a7:06:55:e2:0a:8f:39:
                    b6:c1:38:70:81:5c:2e:bb:01:d9:2c:17:a2:35:88:
                    24:70:a9:86:54:38:0b:64:46:af:72:d5:a3:54:79:
                    cc:c9:61:ca:f3:97:62:ed:0e:cd:8f:0f:f1:26:7d:
                    ce:fe:01:17:77:08:be:8a:eb:9b:7c:9e:82:30:32:
                    ba:7d:c6:3c:de:a3:88:de:ba:99:33:72:bf:56:43:
                    5c:f7:51:5e:05:e5:b0:eb:24:fc:bc:c5:24:c1:92:
                    15:42:5b:ea:7e:4a:5f:45:15:e8:a7:f2:c1:07:34:
                    0c:72:98:4a:58:74:61:a4:29:70:5f:19:f5:b5:7a:
                    2b:5e:8b:a7:26:10:fa:31:57:ab:92:b5:92:59:b5:
                    ec:c4:f4:50:50:4f:e3:c1:08:14:d0:32:5e:9d:cd:
                    32:8b:b3:90:19:e0:0b:ec:5f:0d:60:fe:2f:c4:64:
                    94:f0:9f:76:40:70:b2:fd:d2:fe:52:4a:de:80:8c:
                    0a:92:92:c9:d4:02:74:74:01:c1:6d:9b:a5:d4:2e:
                    72:79:02:da:0c:98:bc:02:ad:4d:4c:b9:36:44:43:
                    a7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B0:31:21:1D:43:DD:BD:7D:84:CF:EE:B1:0E:B6:98:41:CB:15:14
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/627331bd-3468-4a2e-8d59-a1229df28b6e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/627331bd-3468-4a2e-8d59-a1229df28b6e/627331bd-3468-4a2e-8d59-a1229df28b6e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f3:92:cf:eb:9b:42:60:b9:b9:fe:2b:89:f3:11:cf:9a:c8:
         37:ee:f5:ae:4a:fa:d5:85:8a:2a:49:01:8c:27:6d:a4:39:34:
         b7:ec:6b:3a:1e:8c:cc:d1:c1:f1:9e:dc:f5:0d:ad:64:eb:62:
         10:14:0b:18:25:bc:0f:b3:04:6e:f4:de:96:ba:62:6c:95:89:
         26:55:b6:29:4e:28:9a:d7:97:74:84:48:c5:94:82:43:c4:13:
         87:bd:39:82:3a:05:6e:8a:2a:ab:45:d9:b5:4c:e6:f2:df:49:
         4c:41:80:ec:b9:24:86:71:12:ad:05:1d:3d:d8:18:97:e0:13:
         f3:11:4c:3b:f6:d4:54:41:4b:8b:7f:f9:d5:a7:db:90:bb:fc:
         11:b6:23:f2:5e:41:a1:86:7c:1e:c1:40:88:f4:e1:4a:6e:d9:
         b9:73:19:db:7c:1c:e6:02:a0:26:75:74:bf:20:36:d0:6d:11:
         d8:d2:b4:b7:18:7e:c3:af:1e:f0:29:9f:bb:b1:14:7c:0b:1f:
         d2:63:09:ad:6f:5c:9e:86:f8:1e:26:bc:49:83:6c:de:30:6d:
         b3:6d:8e:cd:12:c2:f9:58:66:7e:d4:ab:ff:ac:f1:83:b7:42:
         79:3f:87:87:b2:54:ec:be:f0:62:e0:5b:a7:a2:55:a8:cb:cf:
         f1:03:18:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----