Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer
File:                     4a81e924-7e18-4312-95fd-09d6d0b08bce.cer (raw, json)
Hash identifier:          t35deyYpDIvOSPCpcm8PxhRI+IecjoKNdoWjswS8VE0=
Subject key identifier:   33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842C21A64A814CDA5907F1FCA80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 03 Aug 2023 04:05:16 +0000
Certificate not after:    Wed 05 Nov 2025 05:05:16 +0000
Subordinate resources:    IP: 207.167.108.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c2:1a:64:a8:14:cd:a5:90:7f:1f:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug  3 04:05:16 2023 GMT
            Not After : Nov  5 05:05:16 2025 GMT
        Subject: CN=4a81e924-7e18-4312-95fd-09d6d0b08bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5c:23:c5:e2:e7:6e:99:b5:78:fc:1e:7c:bf:
                    b9:37:88:64:6b:cf:55:74:2f:26:7b:80:68:d2:e2:
                    01:93:4a:47:71:29:a8:37:ee:db:27:23:29:9e:7d:
                    29:47:a9:2e:10:55:ce:29:9f:ba:c2:e0:25:93:ee:
                    f6:bf:25:96:7a:50:53:b0:0a:98:54:ad:29:92:9c:
                    7c:96:ec:ca:66:7d:e7:4a:f4:46:7a:cf:45:50:db:
                    09:48:88:fe:02:64:a4:f5:68:3a:ea:f9:8e:56:6e:
                    fd:d9:a6:ec:c1:f5:01:4e:83:91:4f:41:c9:86:c9:
                    a4:6a:ea:a0:3a:88:83:20:bf:cd:e0:7b:e2:3a:ba:
                    36:85:dc:5b:7f:4c:d7:05:26:a2:d3:1b:03:d9:ea:
                    6c:09:6f:78:04:08:a5:a7:e3:93:b0:76:f7:b4:c6:
                    f9:1e:fc:cc:60:b4:73:d6:91:9e:a7:47:f7:c5:73:
                    35:58:10:30:73:3d:e2:52:5b:ed:31:5f:a3:71:40:
                    cc:06:23:cb:0a:b4:e8:87:f6:0b:7a:70:2c:fa:e0:
                    9a:71:1d:c5:d1:40:78:7e:fb:23:a1:4d:f1:95:87:
                    cf:8d:ff:8f:8c:69:09:e7:24:a6:bb:ee:ae:53:18:
                    4c:f0:9d:a4:4d:43:9c:d0:38:0c:52:81:3c:4e:b1:
                    29:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:23:f2:00:4d:ba:db:8a:bd:a8:9d:78:83:83:e1:7a:36:de:
         6f:da:fd:ab:25:bb:20:79:56:4e:40:bd:1b:1f:3b:f7:8b:0a:
         ca:8e:78:d9:59:f4:ce:5a:82:5c:44:cd:ed:84:5c:0d:3b:fd:
         f6:7c:43:e1:0b:a3:f5:0a:db:69:f7:ef:d6:da:b2:27:d4:a7:
         2b:cd:c1:20:1a:62:bb:46:62:f6:e0:41:44:57:25:ba:9a:e0:
         68:2a:26:78:b1:ad:1e:33:49:14:85:df:54:c0:d4:0b:3f:4d:
         e2:83:cd:1f:12:7b:bc:f0:bb:00:a5:fd:a1:6a:a7:e6:14:4a:
         76:e9:0e:7c:95:34:e7:65:28:2c:99:da:ba:3b:de:8c:4a:a4:
         1f:92:0b:79:f7:39:65:0b:ae:bd:b5:9c:94:55:36:18:4a:08:
         c4:63:07:d9:07:3d:46:26:c3:46:7b:b9:7b:4c:ae:e8:1c:0a:
         c6:2e:4d:8e:fd:34:31:58:0c:8e:7b:23:b9:26:6b:00:3a:56:
         22:ca:26:03:3c:41:82:e0:bf:a7:b6:e7:b9:13:76:1f:56:00:
         75:9e:78:3d:7a:eb:31:b8:6d:21:01:32:5d:88:47:3c:d5:ed:
         bf:cc:ec:00:72:82:71:b1:5b:2b:56:f1:d2:c3:85:a9:e5:34:
         fc:65:bb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----