Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d.cer
File:                     bff7e352-f370-4115-8cf8-ed60841dfe0d.cer (raw, json)
Hash identifier:          gzUTUzXKMzDlSaxGUUD0kheZD00vzHAw1lCxljlcRjQ=
Subject key identifier:   4A:6C:33:40:CB:19:81:F0:68:69:AE:2E:2C:43:B5:D0:8B:E3:DC:7A
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285841E4834C53D62169CCB26D34C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d/bff7e352-f370-4115-8cf8-ed60841dfe0d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Wed 11 Jun 2025 19:06:39 +0000
Subordinate resources:    IP: 207.167.64.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4c:53:d6:21:69:cc:b2:6d:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jun 11 19:06:39 2025 GMT
        Subject: CN=bff7e352-f370-4115-8cf8-ed60841dfe0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:74:db:d8:49:77:3c:84:38:ef:df:5a:b8:
                    4d:19:fe:24:1b:65:86:a1:39:30:c8:65:32:64:27:
                    2d:a7:fd:1a:42:c2:dd:75:a1:12:dc:d0:f5:cb:dd:
                    95:88:4f:26:ae:75:b4:4e:32:82:2e:e6:68:5f:f6:
                    2e:6d:b5:8e:3e:c5:1d:ef:ad:66:d6:14:ab:7d:5b:
                    5d:78:fc:79:52:84:2c:4b:c9:d3:d7:0e:76:25:81:
                    f8:d2:0f:d2:c6:aa:30:98:0b:4f:0c:e9:17:76:91:
                    c9:ca:73:16:6a:97:c2:04:5a:c2:c7:f6:a6:55:e6:
                    22:c1:63:3c:13:ee:25:79:ed:df:bc:b3:ed:9f:50:
                    c2:c9:6d:ad:7b:06:28:bf:4d:61:07:33:ab:e8:e7:
                    36:1c:fc:1f:4c:2a:63:4e:71:ff:89:15:a7:bc:f7:
                    e1:e3:ad:61:1b:b1:55:14:e2:6b:dc:6b:c3:5f:fc:
                    8f:57:a3:37:c8:66:c8:d2:36:28:6f:54:06:be:89:
                    50:3b:69:49:5b:b3:35:ef:16:d2:6f:d2:f7:b3:63:
                    f5:6d:7b:fa:79:eb:88:0a:b2:5a:a6:da:60:b1:97:
                    9e:de:fd:c9:07:b4:ec:42:ba:74:f4:83:9e:e6:f7:
                    37:e3:98:e1:e2:16:52:80:bd:7f:ff:bf:da:ac:f2:
                    94:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6C:33:40:CB:19:81:F0:68:69:AE:2E:2C:43:B5:D0:8B:E3:DC:7A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bff7e352-f370-4115-8cf8-ed60841dfe0d/bff7e352-f370-4115-8cf8-ed60841dfe0d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:9f:c1:32:f6:ec:6a:23:df:a2:aa:54:ef:79:7b:9e:c2:a0:
         33:84:09:b7:08:76:ed:8e:b9:d8:f1:56:5f:90:92:44:60:dd:
         92:60:ed:88:79:c6:6a:41:ee:32:2c:36:90:b1:0d:70:fb:4c:
         ad:f1:bc:a4:62:b5:f2:e1:29:99:e3:37:d1:00:67:5a:24:52:
         bd:96:5b:27:ee:a4:72:47:1c:8a:88:06:24:9a:e0:d8:95:2b:
         60:04:dc:b7:9d:13:0b:43:76:5a:ed:1e:cf:e5:0c:b3:35:aa:
         3e:29:13:4f:09:73:d1:45:b8:d3:ca:1a:ba:5f:90:10:1c:d7:
         e3:aa:24:69:da:1a:25:21:21:a7:4f:97:41:86:0c:96:77:a3:
         dc:d3:d0:73:db:6e:6c:0d:2b:73:41:4b:f1:87:05:0f:1c:87:
         28:dc:6e:b6:2f:46:0f:c7:27:98:5d:bb:2b:f5:5a:0b:58:66:
         7f:42:ba:84:44:40:c5:50:25:60:1d:1c:20:36:80:39:94:d7:
         ca:19:13:79:a3:93:0d:85:36:2a:08:8d:c4:59:66:3a:5c:49:
         60:c8:46:c7:25:ca:18:4f:b7:ec:a4:24:50:64:d0:c9:ce:b7:
         0b:2f:b0:9c:2e:ce:b1:81:a1:03:b4:55:ed:31:fa:8b:65:1e:
         c6:e4:4e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----