Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110.cer
File:                     d61cb32c-9cd6-4665-b0bd-25b06b7df110.cer (raw, json)
Hash identifier:          WyjkzyvhTfSAaWqxKx16RKVKjdIx9uFlH7lUZM1nNVE=
Subject key identifier:   4D:74:75:64:E5:D4:D8:70:B1:7E:AA:E9:45:31:A8:CC:2B:67:14:00
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858452F67FD5CC0F45C3A6B723340
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/d61cb32c-9cd6-4665-b0bd-25b06b7df110.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 12 Mar 2024 17:18:36 +0000
Certificate not after:    Mon 15 Jun 2026 17:18:36 +0000
Subordinate resources:    AS: 62897
                          IP: 198.169.194.0/23
                          IP: 2620:a1:4000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2f:67:fd:5c:c0:f4:5c:3a:6b:72:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Mar 12 17:18:36 2024 GMT
            Not After : Jun 15 17:18:36 2026 GMT
        Subject: CN=d61cb32c-9cd6-4665-b0bd-25b06b7df110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:77:c5:fd:a6:c4:c2:9f:f0:4d:9a:7c:ea:28:
                    ac:83:dc:ee:a1:2c:9a:92:6a:f9:11:4c:6a:38:6d:
                    c1:97:5b:f2:25:0d:03:61:22:cb:6a:cb:e9:2d:de:
                    ee:b8:73:03:cb:8f:ab:13:21:76:dc:b1:a5:fb:3a:
                    66:1b:b9:5a:f6:a0:68:b7:1d:9c:31:48:2e:b4:b1:
                    68:f1:b2:1d:7b:9c:6f:ff:f3:a8:34:a6:d7:bc:de:
                    6f:4c:13:1f:e5:ca:e8:1e:b6:b6:3f:95:35:4d:24:
                    4c:5a:55:e1:02:91:53:63:05:a5:01:4c:83:c9:aa:
                    21:76:e3:6e:40:e9:e2:5e:6a:52:c3:3b:e6:57:b1:
                    7a:0c:32:5b:ea:1a:26:47:28:45:92:72:f3:2a:c8:
                    6f:28:49:8a:eb:3a:43:29:d2:35:8f:f6:7f:ae:e6:
                    58:c4:1d:40:fc:e4:25:94:a5:9f:82:b5:27:a8:13:
                    60:b4:21:10:5b:5e:3c:e7:16:38:7b:34:09:37:5a:
                    d3:b5:8e:7f:4b:e7:f0:cd:d9:16:6a:62:e0:b9:b9:
                    86:60:7d:b1:f0:48:7e:5d:3b:f2:a0:36:5e:05:a0:
                    46:74:43:7e:2e:c0:13:c9:04:98:bc:37:9b:76:15:
                    92:82:de:0d:20:95:dd:92:c0:63:fa:0f:0a:8d:69:
                    2f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:74:75:64:E5:D4:D8:70:B1:7E:AA:E9:45:31:A8:CC:2B:67:14:00
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/d61cb32c-9cd6-4665-b0bd-25b06b7df110.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.194.0/23
                IPv6:
                  2620:a1:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62897

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ce:45:88:cf:e6:a9:60:fc:6f:26:71:20:9f:e8:14:37:62:
         f8:bc:71:e8:84:82:ad:81:f4:44:cc:f9:41:b8:22:c3:4c:75:
         0c:aa:f3:ef:a4:7b:ed:15:97:dc:44:8d:aa:04:34:d5:9d:6c:
         c0:5a:f5:65:26:ad:4a:20:8a:c4:a0:75:83:c8:62:7a:f5:09:
         fb:75:c8:9b:9e:29:65:ff:4c:82:e7:ca:18:75:cd:6d:16:d4:
         24:c7:c4:55:41:3b:a3:3c:f4:a0:88:72:c7:fd:97:83:ee:da:
         02:43:8c:b2:c5:01:ea:e9:d7:cb:3f:94:0b:a2:e8:12:c9:46:
         9a:d6:ca:d9:82:fa:6d:d2:e3:33:a0:6b:c7:41:87:fb:32:c8:
         95:c1:13:0d:8b:7c:64:35:65:94:6b:a1:54:c5:43:c0:2d:4b:
         bd:63:a5:67:e1:f5:a2:fe:e4:07:d8:57:b0:fa:50:17:09:55:
         1c:68:48:a6:96:e2:fc:6b:65:41:d8:48:54:31:5d:64:91:44:
         c6:37:b9:53:1b:8f:cb:f8:ad:8c:56:43:d1:81:06:35:a2:72:
         7d:a4:8a:0b:31:6b:c4:ee:3c:8b:b7:99:06:98:fe:1f:c9:26:
         6b:7d:ba:74:b5:e5:2e:a0:32:c2:ee:8f:9a:de:71:54:60:86:
         c0:a0:34:a3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----