Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d.cer
File:                     258880f7-56fa-4c7c-a7e7-6d113eda383d.cer (raw, json)
Hash identifier:          PejEKH2OK7VWXkSbBoxDL+a3HHV13xmfd4LDs13s/dM=
Subject key identifier:   E0:77:99:0D:E0:ED:30:9C:45:71:0C:2E:B0:73:14:DD:FC:55:BE:8A
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847ACC9BA9178E990A86D68B200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 27 Oct 2024 00:45:26 +0000
Certificate not after:    Sat 30 Jan 2027 01:45:26 +0000
Subordinate resources:    IP: 23.142.200.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ac:c9:ba:91:78:e9:90:a8:6d:68:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 27 00:45:26 2024 GMT
            Not After : Jan 30 01:45:26 2027 GMT
        Subject: CN=258880f7-56fa-4c7c-a7e7-6d113eda383d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fc:e1:ff:33:91:4a:8c:c5:0e:57:43:61:d7:
                    ce:6b:f6:e7:cc:bd:84:0a:29:9b:10:c8:85:9c:c3:
                    0c:fc:a9:f0:5e:3b:b3:79:aa:25:b3:de:67:17:d1:
                    45:d7:fd:d6:91:03:ca:8b:94:18:3f:0e:c0:bf:b3:
                    20:09:fa:0c:22:3f:d0:73:26:20:a0:ae:19:3f:0c:
                    67:3b:08:63:82:cb:7d:19:69:08:10:c0:8b:88:fb:
                    67:e1:d0:9f:d6:c9:64:01:f2:f1:d9:53:90:3b:3f:
                    7c:6c:65:5f:22:ad:2d:f2:e3:2b:79:39:0d:ef:a5:
                    99:90:7e:73:32:78:54:0f:ea:9e:d3:4f:f2:4c:b2:
                    d0:29:0e:35:a8:b4:9e:35:44:e2:7a:f1:53:51:f1:
                    ea:99:65:48:24:fd:92:0c:d5:4c:59:19:9c:2d:52:
                    92:54:fe:a0:85:83:fc:f5:63:56:b4:27:85:46:06:
                    c4:5d:71:cf:20:98:16:6e:6f:4d:54:25:d0:4e:a2:
                    02:e7:5f:8a:3e:ba:01:40:13:b9:27:23:e2:10:cc:
                    0b:68:06:0e:c2:bf:b4:0f:45:1f:9f:42:38:22:81:
                    68:6d:ac:33:38:b0:86:72:90:f6:7b:cc:da:4f:2b:
                    26:7e:40:8c:58:91:e5:15:d9:62:b2:d7:d6:58:88:
                    de:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:77:99:0D:E0:ED:30:9C:45:71:0C:2E:B0:73:14:DD:FC:55:BE:8A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c3:10:67:c0:84:0f:30:fe:c0:1b:97:fa:1c:c6:ff:bb:61:
         10:7a:dc:b5:35:dd:17:43:16:db:ee:4c:98:bb:8b:41:4a:db:
         11:d8:47:09:b3:57:95:bd:60:bd:e6:9a:1d:0d:af:8e:69:66:
         07:dc:eb:83:31:46:70:ca:59:e0:69:bc:d1:ee:65:f7:da:77:
         6b:0c:c8:1c:18:f7:81:35:3b:bf:df:08:82:88:46:61:10:c0:
         37:cf:31:c5:9b:db:70:1b:57:ae:80:d2:60:03:3d:72:cd:2e:
         ba:df:6c:0e:77:1f:52:ea:66:44:9d:fb:e1:f6:6f:22:7b:57:
         8a:e3:30:1e:37:95:d6:5e:a6:f4:b9:86:74:51:5c:dc:bb:67:
         e1:90:d5:63:59:59:a3:d6:f3:79:f4:c2:70:33:44:37:90:d1:
         f3:56:91:03:0a:34:62:ba:fa:6a:c4:77:63:d8:a8:07:26:60:
         8a:20:4e:53:34:fe:30:5a:02:10:a7:63:fa:eb:86:70:60:ad:
         14:41:33:a2:41:b7:d0:67:ec:8b:e9:9c:03:6a:0e:78:ea:4a:
         dd:c5:77:c1:27:95:2b:e5:e0:8f:80:88:55:21:9b:32:ff:c2:
         31:29:d3:1e:c1:7b:28:8e:b4:e4:cd:00:69:8b:8a:bc:a2:23:
         0f:5f:a3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----