Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.cer
File:                     78eba1b6-855c-4b4c-8ecc-23746cad1ae9.cer (raw, json)
Hash identifier:          +Tn6zO2+TuAB/4wisCyvrhhIY/p8/fEtfwrjHHt+fHM=
Subject key identifier:   FE:4A:C7:EE:73:45:70:7E:5D:45:E6:3E:B4:00:C9:8F:19:66:3E:B7
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285841E48344BE9828D499B8FF0300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sat 19 Apr 2025 19:06:39 +0000
Subordinate resources:    IP: 23.247.200.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:44:be:98:28:d4:99:b8:ff:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Apr 19 19:06:39 2025 GMT
        Subject: CN=78eba1b6-855c-4b4c-8ecc-23746cad1ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:52:25:00:1f:50:d2:1f:4f:c1:48:60:4c:74:
                    ae:0b:0d:23:bd:b2:73:e8:53:45:3d:77:d5:43:19:
                    3c:50:37:79:9f:e2:b9:8a:7a:34:c5:2e:58:16:2f:
                    27:2a:17:55:f0:98:c1:6f:ad:e1:3f:c4:82:46:bb:
                    61:a1:0d:0f:ff:a4:22:e6:1a:cd:20:be:44:41:55:
                    e1:cb:e4:55:b4:4f:ab:18:e6:79:50:20:19:38:2c:
                    35:40:f2:23:14:f6:84:ed:5d:e3:e4:b4:01:b0:35:
                    32:ed:4a:a6:a3:a6:67:d0:da:78:5d:59:de:fa:b5:
                    9a:dd:fa:b6:df:47:d7:21:09:35:ea:da:09:9b:1f:
                    4c:51:1e:4f:58:e6:64:c8:70:79:7d:b5:8a:ef:58:
                    e0:56:51:dc:95:fd:04:a6:21:9a:33:e4:70:b1:9c:
                    9a:4c:a3:f2:e7:97:7e:7a:89:91:60:a0:c6:55:2a:
                    36:b6:5e:98:22:cc:e4:8c:e2:2a:00:62:1f:df:80:
                    64:a2:0c:10:db:ba:3b:0e:bb:85:18:1f:0f:ab:a1:
                    21:23:3c:27:c2:ae:c8:e3:31:2c:57:92:38:69:31:
                    cf:a6:9b:24:7d:d8:7f:46:cc:fb:db:b7:d1:23:25:
                    e0:24:24:8d:0f:f2:28:c0:5c:4e:bd:fe:2b:a1:f5:
                    ae:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4A:C7:EE:73:45:70:7E:5D:45:E6:3E:B4:00:C9:8F:19:66:3E:B7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:50:59:c4:38:0f:69:34:c4:1f:98:21:ab:e8:86:7b:59:bc:
         b5:0b:16:bb:c6:b6:d0:f1:a0:8f:d3:fd:ab:f5:5d:92:e9:69:
         54:a0:6a:75:12:8d:43:2e:d2:1a:b1:f5:22:80:77:b4:39:01:
         90:f6:11:62:1b:78:de:9b:d5:b5:6c:28:93:28:c5:ee:27:e2:
         52:55:9d:2f:f2:32:e0:55:64:6b:08:29:79:3f:8b:71:d3:7a:
         12:00:1a:e4:17:00:9f:79:6a:a6:95:32:89:38:b7:b0:8f:9a:
         cd:bb:71:59:9b:9b:8d:61:d4:49:85:62:5f:25:4c:de:42:a2:
         15:26:f7:6b:e7:7d:cd:ad:6e:b0:b3:d8:e6:d9:d4:47:e2:3b:
         c4:11:da:0c:ff:d2:45:a1:49:34:37:be:ee:c8:4e:14:fa:ef:
         ae:fd:98:5f:95:c8:f3:4e:fd:99:50:cf:bc:2b:65:7a:43:99:
         7f:32:dd:72:14:99:b5:c4:6f:c0:ec:99:bf:e3:78:f6:50:ed:
         a4:cf:bb:37:48:9e:70:44:ce:54:20:ff:06:70:81:42:ef:9d:
         7f:cd:22:89:82:cf:f4:26:41:7b:cc:4d:d8:0a:af:a9:5d:20:
         a4:05:a6:b6:85:51:53:85:a2:b0:d5:41:b4:1c:b4:0e:2c:9b:
         93:6c:6b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----