Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.cer
File:                     a47e2843-16e1-4ed0-acc2-7a942bfc46ce.cer (raw, json)
Hash identifier:          1b9djS4wdsuXMU6vYaAdBtw1qdU0pDyfGwIkmMdHV8U=
Subject key identifier:   EF:9F:F6:47:56:F0:E2:3D:69:AA:68:94:D7:E1:F8:8E:B7:CE:01:38
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844A9A41F912BCB68FE2A254600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 24 Jan 2024 19:21:26 +0000
Certificate not after:    Tue 28 Apr 2026 18:21:26 +0000
Subordinate resources:    IP: 216.87.48.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a9:a4:1f:91:2b:cb:68:fe:2a:25:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 24 19:21:26 2024 GMT
            Not After : Apr 28 18:21:26 2026 GMT
        Subject: CN=a47e2843-16e1-4ed0-acc2-7a942bfc46ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7a:91:61:ef:dc:39:43:34:f6:d7:cd:41:e0:
                    5b:bf:cf:1c:85:3b:cf:50:f8:5e:4d:7f:e6:97:42:
                    2d:c9:ac:22:16:c9:a5:78:22:86:c7:c6:82:df:cd:
                    5c:81:55:de:c3:5e:c3:c8:77:34:4c:ec:61:37:2d:
                    05:5c:4d:16:b2:8c:84:bb:29:4f:d1:fb:5f:fb:cb:
                    4c:88:1b:d3:2d:ca:87:5a:ec:e6:21:99:ee:ed:23:
                    d7:fd:76:37:ed:2c:00:6c:8a:74:84:ec:fa:dd:4e:
                    e1:94:d5:ca:b6:a9:cb:6d:90:2a:57:f9:3c:42:21:
                    37:78:bc:be:5e:e0:b0:26:ff:53:35:6a:5c:55:d7:
                    d0:e1:6c:96:87:f6:09:46:53:b9:04:33:c5:44:0d:
                    ef:69:45:8b:4f:02:35:e1:93:72:2a:e5:60:2d:33:
                    a0:80:d4:b4:76:0f:f4:29:d9:09:41:d9:1d:7c:48:
                    30:e9:d6:72:1b:e6:d6:85:bb:e1:81:a1:ae:b1:eb:
                    3c:e7:7a:21:e3:09:3e:8e:89:33:30:f6:cd:ff:5a:
                    22:a2:65:30:1f:9f:8a:63:1b:ca:cf:86:bf:a6:d5:
                    ff:40:64:c5:0f:ee:02:89:98:b8:37:e3:11:3b:7c:
                    07:1d:42:64:91:0b:ce:aa:00:61:3d:4c:5d:4e:e4:
                    16:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9F:F6:47:56:F0:E2:3D:69:AA:68:94:D7:E1:F8:8E:B7:CE:01:38
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:cf:77:0e:7f:71:12:28:95:da:35:f1:f3:6e:f6:1d:6d:22:
         46:6c:28:bb:b1:66:10:c6:61:21:31:f4:73:fa:6a:af:8d:71:
         0e:62:00:12:0c:80:dc:29:b2:69:96:86:45:8d:19:04:fb:03:
         ce:28:eb:eb:0e:91:3a:eb:c5:e0:b3:68:5e:88:d2:35:11:d2:
         db:f6:ab:04:61:a4:9b:16:9f:56:8d:bd:fe:6e:c5:3f:e6:d5:
         c3:42:33:b2:77:1e:c5:cb:f7:c6:c2:5a:17:fe:eb:d6:1c:b1:
         f4:40:f9:e3:2f:9f:a3:a0:b9:dd:35:0a:19:32:17:e5:41:7f:
         a1:ed:8b:c7:b9:12:60:f6:53:e3:a2:9e:e1:de:6d:72:b0:73:
         2d:0e:48:2e:99:6f:58:a9:60:cb:b3:55:d2:88:31:17:66:ac:
         84:0b:9d:8a:91:4c:65:e1:46:46:05:dc:09:29:6b:90:eb:28:
         e3:53:0d:41:4d:e4:b2:c2:2f:f7:15:a5:18:ef:27:4a:51:be:
         c5:8a:99:f0:1c:b5:61:9c:ad:68:14:3b:b9:c1:a6:90:96:9c:
         5e:75:20:76:87:16:7c:01:94:d7:df:4c:d7:dc:7f:21:5a:29:
         ca:ca:f3:dc:da:73:99:18:09:d9:85:40:68:6d:86:b1:16:25:
         f2:46:63:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----