Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c.cer
File:                     8e262294-f3c0-4a56-8c97-786e6ae2f14c.cer (raw, json)
Hash identifier:          g8Z64ao0LS/Cs3Kx2w4q+n/OHu49l6NEyflBXfLnQMg=
Subject key identifier:   27:A7:46:6C:19:A9:9A:2B:26:07:13:D0:A7:19:8D:AE:5C:29:52:64
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584586912A47A41FC8C6B5EABB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/8e262294-f3c0-4a56-8c97-786e6ae2f14c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 12 Apr 2024 22:36:53 +0000
Certificate not after:    Thu 16 Jul 2026 22:36:53 +0000
Subordinate resources:    IP: 207.228.208.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:91:2a:47:a4:1f:c8:c6:b5:ea:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr 12 22:36:53 2024 GMT
            Not After : Jul 16 22:36:53 2026 GMT
        Subject: CN=8e262294-f3c0-4a56-8c97-786e6ae2f14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:26:23:ea:1e:bc:64:9a:45:12:5f:7f:0c:43:
                    bd:da:61:62:a2:b8:4e:8d:b4:4a:b8:8d:76:57:37:
                    9d:2e:e6:60:07:06:82:c7:69:64:ea:cb:60:7f:f2:
                    2e:32:b6:5d:70:74:29:44:a4:ee:40:91:b2:b5:11:
                    2e:bb:95:96:28:2c:6c:ef:f3:83:00:ce:3d:01:8e:
                    c5:84:5b:4c:00:ce:fe:06:38:32:11:ab:97:df:0a:
                    a7:62:25:91:e8:06:88:38:22:52:ef:6e:41:e3:eb:
                    f0:9b:e2:b1:6d:10:bc:57:01:2c:3f:3e:0b:ae:08:
                    08:a6:67:35:36:3f:c6:b0:d0:58:bc:41:ea:4e:32:
                    92:32:50:0f:6d:1d:7c:37:c6:a3:f6:05:bb:f1:4e:
                    a0:a8:26:30:35:70:f6:f9:1b:95:c7:ab:8e:15:01:
                    e4:f4:df:c4:5d:ad:be:2a:ba:5b:51:4d:4b:0f:6e:
                    fe:f8:37:dd:ff:0c:62:84:30:d1:f8:f0:42:a2:a0:
                    32:ed:d7:b2:72:6f:73:fc:31:fb:a3:93:4b:06:97:
                    d6:30:e4:32:84:10:7c:88:03:a3:92:92:a0:6a:d0:
                    63:26:26:a5:ae:35:da:b5:89:11:29:92:7f:96:68:
                    91:22:0e:50:db:22:2b:9e:c9:82:b6:23:fe:a4:13:
                    6f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A7:46:6C:19:A9:9A:2B:26:07:13:D0:A7:19:8D:AE:5C:29:52:64
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/8e262294-f3c0-4a56-8c97-786e6ae2f14c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d3:1b:07:3b:43:b8:2d:19:68:cd:5c:16:8e:90:05:87:61:
         88:a7:ed:c0:8c:79:d5:bf:f8:3e:2b:4e:ab:0e:33:ae:92:f8:
         aa:27:5a:1b:e6:64:8c:eb:e6:12:c6:b3:52:d2:86:4d:27:c9:
         6c:31:96:40:50:95:62:77:66:45:8c:57:c3:06:15:49:cb:72:
         b6:1e:08:df:80:54:59:e7:c1:a0:d7:76:85:3c:df:85:bd:0d:
         0e:7d:69:60:c1:13:78:97:3b:7b:5b:40:f4:eb:9a:01:a3:45:
         80:af:1d:e2:19:06:4e:b8:70:c9:1d:51:5e:6f:12:61:2f:5d:
         fb:35:99:30:ce:22:e2:25:f2:8d:db:ef:7c:77:5f:1f:77:04:
         4d:8a:72:c5:6e:58:69:cf:93:10:4a:a9:ee:33:be:fd:a1:c8:
         6f:68:44:9d:ec:ba:dc:59:a7:e5:64:92:d9:68:4b:be:31:f7:
         b5:f1:8b:58:e6:fd:e2:3a:31:60:db:c3:4c:f4:5a:2a:73:00:
         a7:fc:9b:42:d4:cb:0f:ec:63:37:1c:f9:31:b8:08:8d:5a:df:
         0e:d7:d1:62:1d:7f:c2:67:ac:b0:dc:3f:da:f5:0c:f5:23:71:
         65:ef:77:71:96:a1:0a:19:33:90:34:47:e0:da:02:7f:cd:1a:
         88:ce:4a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----