Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8a0273a2-d606-403e-a213-2f42a740c6e6.cer
File:                     8a0273a2-d606-403e-a213-2f42a740c6e6.cer (raw, json)
Hash identifier:          LEMIzCxyjuRU18sBdacKQNi/W7WD1RTuQx6bDucAhSM=
Subject key identifier:   5E:CC:12:FF:48:F1:8F:62:58:DB:D1:A0:77:87:D0:F3:4E:84:DA:05
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285845157617A69DA5C8298AD0E540
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8a0273a2-d606-403e-a213-2f42a740c6e6/8a0273a2-d606-403e-a213-2f42a740c6e6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8a0273a2-d606-403e-a213-2f42a740c6e6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 03 Mar 2024 10:15:59 +0000
Certificate not after:    Sat 06 Jun 2026 09:15:59 +0000
Subordinate resources:    AS: 395822
                          IP: 2620:c5:e000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:15:76:17:a6:9d:a5:c8:29:8a:d0:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Mar  3 10:15:59 2024 GMT
            Not After : Jun  6 09:15:59 2026 GMT
        Subject: CN=8a0273a2-d606-403e-a213-2f42a740c6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1f:4b:de:a6:24:da:af:3e:44:e2:50:e5:63:
                    d2:0e:fd:a3:9d:5d:c3:84:6a:d9:05:8f:82:4b:8d:
                    6c:76:a7:f3:8a:0e:eb:d6:04:67:5d:4a:f5:44:c0:
                    66:8b:15:08:fb:93:bd:e2:1c:9a:99:67:6e:a4:7e:
                    93:47:e6:40:d7:45:c8:66:57:09:bb:5c:5c:2b:63:
                    d3:78:74:a5:77:33:ba:ef:36:3d:6f:66:0c:95:90:
                    d2:dd:dd:c7:c4:5d:17:73:08:8b:2b:47:62:69:42:
                    b5:78:14:82:0b:95:52:fc:f8:04:0c:de:f1:e4:e7:
                    4a:5e:8f:37:06:94:ca:c5:20:fa:cf:22:1d:43:f2:
                    b8:2d:50:ce:be:1e:c7:d0:79:9d:10:2d:7f:55:94:
                    2a:e3:4e:38:35:9a:bb:da:4c:50:31:7a:aa:c5:79:
                    4b:c8:32:3e:79:cc:67:60:7f:72:93:c1:0f:5d:09:
                    6c:46:c7:e2:53:e0:15:1a:a4:ae:e3:3d:ce:a0:c6:
                    57:31:3e:49:95:42:7c:c3:9b:f2:3d:5d:58:fe:b6:
                    4a:39:ff:54:43:21:32:db:01:0f:95:50:02:24:a0:
                    9f:43:bb:5f:93:ca:bd:17:cc:41:3f:67:f1:d6:8f:
                    73:78:fc:bc:5c:36:3c:6a:60:f0:a8:1a:93:62:f1:
                    32:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CC:12:FF:48:F1:8F:62:58:DB:D1:A0:77:87:D0:F3:4E:84:DA:05
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8a0273a2-d606-403e-a213-2f42a740c6e6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8a0273a2-d606-403e-a213-2f42a740c6e6/8a0273a2-d606-403e-a213-2f42a740c6e6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c5:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395822

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:42:f0:68:25:00:a4:55:13:a8:c8:0d:89:38:fe:23:c2:28:
         e2:af:fd:c9:47:07:39:ea:bf:be:8b:69:64:7e:ba:1b:a6:fa:
         5b:d4:f8:f3:e3:3d:7d:d9:d8:b9:bb:ab:10:da:2d:f3:70:2d:
         01:3a:5a:53:10:ac:3d:96:71:df:27:51:01:17:59:bb:01:26:
         42:8e:e4:f2:99:d2:b0:58:9b:9a:58:be:f1:63:65:47:79:b9:
         bf:0c:48:97:14:71:57:b2:1c:37:9f:ce:d3:81:ec:30:59:07:
         09:a3:49:43:e8:58:b3:f7:4d:5e:68:72:79:d9:2d:2d:89:5a:
         a9:3a:c3:fa:62:17:ee:2d:0f:cf:52:ab:b5:bb:9b:9a:74:92:
         7d:92:f4:10:3e:bc:fe:40:c0:21:2e:8a:4d:35:b2:61:7a:26:
         6f:30:49:ac:62:d9:02:1b:e8:cc:34:55:02:ec:d6:32:3c:13:
         36:fe:26:29:02:3d:d2:32:9a:96:69:9b:d4:09:1a:6c:df:bb:
         11:99:1f:fb:fc:97:27:07:74:a3:cf:29:6a:7d:5a:6c:6f:c4:
         0e:87:f1:d0:e6:84:34:e6:bc:39:05:05:a5:21:7f:b6:d5:78:
         6c:5a:2f:02:36:0f:94:74:cd:63:34:e4:02:59:12:6a:ef:9d:
         c6:72:77:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----