Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer
File:                     25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer (raw, json)
Hash identifier:          lNf9+3APFSYM6H+7ekoIPmJvUEWox7ym/MJdW4YPHDc=
Subject key identifier:   13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584500EDDD4F105CD24F263EC400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 25 Feb 2024 01:45:20 +0000
Certificate not after:    Sat 30 May 2026 00:45:20 +0000
Subordinate resources:    AS: 22446
                          IP: 205.233.244.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:00:ed:dd:4f:10:5c:d2:4f:26:3e:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Feb 25 01:45:20 2024 GMT
            Not After : May 30 00:45:20 2026 GMT
        Subject: CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:13:1a:f2:8f:ff:b0:da:c2:5c:64:f2:b8:
                    57:06:75:2a:1a:c2:4d:3e:21:54:e8:e7:cc:06:c6:
                    5e:d4:ab:4c:be:ca:4b:2c:74:55:12:a2:ab:cd:8b:
                    74:ff:04:97:d3:e4:de:89:35:f6:77:aa:cf:7f:06:
                    19:ad:e5:e1:cf:6e:77:92:5e:15:c9:da:20:57:5b:
                    82:fb:93:6c:fe:ec:ab:20:88:ed:34:1d:b7:fc:c5:
                    ae:18:a1:f7:a2:cc:b7:6f:03:1f:b8:9b:97:0d:a0:
                    bd:5a:9f:71:51:a4:2a:60:0c:2d:41:56:2f:08:f0:
                    cf:cd:f6:9c:b0:8c:34:51:43:20:37:6a:07:1f:c0:
                    0c:7b:c5:e8:98:1c:45:18:e5:1a:ad:91:0a:88:46:
                    d2:65:f9:21:e1:10:19:d0:6d:4a:4c:2e:ba:cd:5b:
                    a9:22:53:d5:22:78:5c:66:b4:d2:a9:1f:ad:5c:65:
                    28:ce:c2:21:17:7f:12:b0:b1:28:71:81:b8:f3:11:
                    c5:24:b7:bd:dc:53:40:8a:39:38:d3:58:6b:2c:9e:
                    a1:a6:6a:14:5e:a6:0d:f3:44:e3:cd:6c:ab:77:cf:
                    60:f8:b8:e5:f6:db:37:e7:fe:9b:30:69:15:55:44:
                    4c:2d:7a:45:24:b9:8f:5c:fe:bd:e6:e8:37:34:94:
                    be:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.244.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22446

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:bf:07:21:30:0b:a7:15:d1:5a:89:81:aa:7a:cd:fe:5d:35:
         4d:2e:63:c4:a3:2f:ef:89:83:94:ac:65:fe:52:cf:96:e9:b1:
         74:8f:b1:50:69:91:32:b1:8e:93:f2:ef:55:4b:97:77:ab:29:
         06:6a:c5:71:80:a1:e6:80:c1:7e:c1:e2:6f:c9:1e:e5:fa:2b:
         3f:9f:f0:34:e6:bd:f2:92:61:b2:30:e3:46:2f:5c:ee:65:72:
         13:a4:ad:fd:db:f5:5a:89:4f:1e:cc:51:66:29:e4:19:a1:60:
         14:0e:c6:b1:80:a8:7b:17:b8:0f:29:ba:58:d2:0e:68:14:93:
         b7:5f:1c:27:be:71:57:4e:48:b5:a3:c6:b8:0a:d9:0e:df:60:
         c1:df:ff:92:2a:27:c2:25:cc:2b:ef:65:57:23:9c:5b:ca:89:
         2f:72:fd:2f:17:d5:5a:ea:da:e7:69:79:99:5e:12:27:d8:f4:
         5c:99:09:d3:9d:2e:45:43:ea:4d:c6:46:47:a4:24:a7:a8:fa:
         fd:3f:18:2e:9f:d3:44:57:62:65:61:cd:80:52:f8:54:b1:6b:
         11:e5:cf:84:93:94:59:7d:35:87:14:58:dd:b4:68:2b:8c:32:
         a6:f0:23:7c:3b:fd:e8:54:ac:ea:6b:c1:fb:24:92:dd:a2:4d:
         52:f1:1f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----