Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/889ef45b-e23c-4be5-bbee-2d6f2cb747ea.cer
File:                     889ef45b-e23c-4be5-bbee-2d6f2cb747ea.cer (raw, json)
Hash identifier:          lHZEQ5zKwKp6799F6bbE+y12J5M8KI2M/2jUdIvuuiQ=
Subject key identifier:   FB:53:B2:D5:8C:72:35:DD:51:4D:76:BB:E4:78:0B:45:BB:7D:E6:05
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584594083B1903FFDCD34D90A980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/889ef45b-e23c-4be5-bbee-2d6f2cb747ea/889ef45b-e23c-4be5-bbee-2d6f2cb747ea.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/889ef45b-e23c-4be5-bbee-2d6f2cb747ea/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 Apr 2024 18:22:18 +0000
Certificate not after:    Tue 21 Jul 2026 18:22:18 +0000
Subordinate resources:    AS: 397088
                          IP: 216.38.166.0/24
                          IP: 2620:5a:6000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:94:08:3b:19:03:ff:dc:d3:4d:90:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr 17 18:22:18 2024 GMT
            Not After : Jul 21 18:22:18 2026 GMT
        Subject: CN=889ef45b-e23c-4be5-bbee-2d6f2cb747ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8d:29:a1:bf:43:dc:e9:74:d2:17:c4:0f:f9:
                    d7:e1:70:4d:6c:b1:e0:8e:5b:45:39:60:e7:fe:d7:
                    ed:9c:78:40:13:0c:bc:18:d6:92:4e:d0:fc:22:5e:
                    a0:24:b8:15:65:86:22:cc:b3:60:8c:67:60:5c:73:
                    55:ca:7e:14:96:2b:a2:34:09:50:53:6a:f5:80:62:
                    8d:5d:d6:de:7c:d4:66:dd:b9:81:35:3d:72:04:0f:
                    10:3b:41:5c:2e:f0:48:f7:0c:24:3d:0d:5a:c1:39:
                    2c:a5:1e:c2:22:d2:f0:96:ea:a7:4d:a2:7a:57:83:
                    fe:cb:40:93:e4:50:b0:07:3f:d2:9e:b8:ef:1a:66:
                    64:40:4e:2e:69:cb:39:ea:28:b8:5d:3f:6a:83:dc:
                    e4:0b:00:1f:92:3c:a4:e2:2c:67:3c:ac:30:ed:3f:
                    25:05:5f:9f:e0:cd:1f:f8:7f:7b:0a:28:09:ae:7e:
                    a9:81:77:d0:9e:98:d0:25:53:5f:69:3c:44:fb:33:
                    c5:a6:9c:d6:d9:01:c9:67:fb:97:48:00:2e:65:02:
                    20:d8:2c:48:b0:2e:72:93:6c:2b:d6:f2:a4:89:18:
                    23:76:0c:49:2e:ed:ba:06:37:85:82:bd:c9:e9:66:
                    63:70:57:9c:82:a8:87:42:86:e4:e9:b8:c7:2d:cc:
                    38:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:53:B2:D5:8C:72:35:DD:51:4D:76:BB:E4:78:0B:45:BB:7D:E6:05
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/889ef45b-e23c-4be5-bbee-2d6f2cb747ea/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/889ef45b-e23c-4be5-bbee-2d6f2cb747ea/889ef45b-e23c-4be5-bbee-2d6f2cb747ea.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.166.0/24
                IPv6:
                  2620:5a:6000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397088

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e0:84:25:78:7d:69:5b:49:72:83:92:10:3f:f0:4e:f9:9a:
         db:b0:ce:6c:d8:bc:23:0f:be:f6:54:85:cc:34:82:a4:07:e6:
         6e:fd:d0:0e:cd:6a:4a:e4:89:55:0c:4e:ce:1d:23:b3:8e:17:
         f3:8f:62:a3:44:1f:c7:36:b2:f1:e6:31:3d:29:ef:bc:c2:15:
         76:b6:a4:b2:44:a1:71:d0:82:93:a5:8d:66:1e:64:30:d0:45:
         93:3d:68:c8:2b:90:6d:05:5e:ed:fc:45:b2:60:21:a5:02:86:
         48:97:b9:6f:2d:4c:18:07:d4:d3:7e:c9:27:98:e3:6e:75:44:
         63:aa:95:cc:0e:89:a5:7d:2d:c2:54:d3:14:e3:88:83:9f:f3:
         21:25:77:36:09:ab:de:6f:7b:ea:01:49:54:a3:12:28:63:65:
         67:66:ca:b4:b7:6b:f7:45:49:2d:b4:1a:2e:ce:0d:0c:97:b8:
         b4:6e:cc:10:0f:e3:e3:e3:16:47:77:66:bd:1c:d1:0a:b7:97:
         12:7e:42:19:ee:29:e2:a0:81:05:e0:8a:df:27:67:72:a3:72:
         5d:53:3a:db:a5:db:4d:37:6c:bc:dd:2d:4a:5a:1e:f5:6e:ab:
         65:17:d2:37:55:9b:20:6f:5d:53:b0:26:65:85:45:f0:f1:8e:
         da:0d:85:24
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----