Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c440a43c-775a-4623-b6c5-4e27f05b38e6.cer
File:                     c440a43c-775a-4623-b6c5-4e27f05b38e6.cer (raw, json)
Hash identifier:          MqpQwTH1DO/tHFAe8Qb+PPX0MwiaX/FxZdZr4C+zZOw=
Subject key identifier:   61:19:97:CE:6E:BC:A7:E5:7F:C9:DE:1C:DA:EF:36:8E:05:B7:C2:9B
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285845574DA83A91340E7861570EF0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c440a43c-775a-4623-b6c5-4e27f05b38e6/c440a43c-775a-4623-b6c5-4e27f05b38e6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c440a43c-775a-4623-b6c5-4e27f05b38e6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 27 Mar 2024 00:17:52 +0000
Certificate not after:    Tue 30 Jun 2026 00:17:52 +0000
Subordinate resources:    AS: 18567

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:57:4d:a8:3a:91:34:0e:78:61:57:0e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Mar 27 00:17:52 2024 GMT
            Not After : Jun 30 00:17:52 2026 GMT
        Subject: CN=c440a43c-775a-4623-b6c5-4e27f05b38e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9f:46:a1:f6:4c:53:82:74:c3:58:ed:33:10:
                    6c:7a:7e:9f:64:3c:08:8a:9d:55:d7:e5:14:76:e5:
                    59:1e:c4:4b:fc:1d:95:5f:d0:24:26:52:a0:7c:fa:
                    1c:e4:72:e5:40:0d:f2:df:87:cc:dc:e6:7e:5e:98:
                    f2:95:05:3e:f7:92:7b:4a:c7:4c:5c:ad:93:64:a2:
                    95:32:a3:7e:f3:c9:d4:25:71:ac:db:0e:a0:f1:91:
                    ef:33:ab:0f:cd:d5:dc:97:18:a2:17:95:0c:bd:b9:
                    c9:64:72:a9:94:1d:c4:4f:27:4a:3c:d1:58:3d:42:
                    ed:e7:06:fb:35:da:13:04:19:b9:2e:76:12:5a:f3:
                    c2:ba:9a:d5:f8:dc:2f:69:49:d7:4a:2b:43:9f:3f:
                    c5:36:b6:58:30:aa:f8:54:88:96:05:78:02:38:90:
                    55:83:4e:40:3c:93:94:fc:d3:71:78:4f:49:85:1b:
                    7a:d2:f4:f3:7a:bb:98:0e:f7:8d:7e:b2:9c:90:a9:
                    69:18:ee:53:12:e9:c3:4f:54:24:ee:ef:63:90:2b:
                    15:68:47:90:fd:cf:eb:2b:0c:8f:a4:04:7c:88:4d:
                    a2:dd:3f:2b:4b:f2:0b:51:16:3f:5a:94:f1:56:e1:
                    dd:5a:02:d1:33:5b:58:d7:5d:4e:a8:c4:3c:85:f7:
                    8b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:19:97:CE:6E:BC:A7:E5:7F:C9:DE:1C:DA:EF:36:8E:05:B7:C2:9B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c440a43c-775a-4623-b6c5-4e27f05b38e6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c440a43c-775a-4623-b6c5-4e27f05b38e6/c440a43c-775a-4623-b6c5-4e27f05b38e6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18567

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:cd:29:5d:ac:06:31:21:df:c3:50:e3:54:67:7c:71:92:4d:
         d5:78:f3:15:a1:56:bb:ee:c4:59:a4:d0:75:2d:7e:4d:95:6c:
         83:68:b5:a0:c9:5b:24:7b:94:2c:30:e3:89:8e:66:ca:32:da:
         80:80:73:15:43:6f:a8:74:54:8b:39:dd:9f:ce:5c:77:b2:32:
         06:21:26:fe:75:04:17:1f:3f:55:ae:ef:a0:77:46:1c:18:23:
         70:a4:54:f4:8a:89:1e:35:8f:96:1a:7a:38:4f:59:2c:96:c9:
         a2:0c:29:9d:1d:c0:dd:6e:85:f1:2a:42:a6:7c:35:2f:79:32:
         d8:44:f5:c5:55:76:ae:41:dc:c1:c8:7c:62:75:cd:6c:3a:48:
         53:6b:cc:b3:99:31:b1:19:d4:ee:8f:b5:78:29:56:f9:d9:52:
         75:65:5c:18:39:96:19:51:d8:2a:8c:ec:2f:18:b9:ec:64:15:
         88:d8:36:72:a3:30:ba:40:44:ff:df:a8:96:ef:99:9b:b5:b3:
         12:a1:64:14:31:94:3b:96:54:4f:e5:87:9a:24:7c:eb:e4:8d:
         b1:5e:23:1e:aa:70:59:3f:73:e5:74:cc:be:9a:a4:12:04:ad:
         d7:13:0c:94:f2:7a:db:c0:e9:2a:a5:16:e6:86:6a:25:a1:95:
         a5:7f:3d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----