Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4.cer
File:                     7a920796-5a78-4996-9f81-4e3af8d7a3d4.cer (raw, json)
Hash identifier:          rtzxI89saPWCQmxAMTFeKNozyvh12+oPKSl6/MOZsSo=
Subject key identifier:   EF:F0:09:80:5F:78:30:59:A6:09:7B:0B:1B:82:9C:98:1A:79:BF:27
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847E1F28F9932A8DC9A25B4B500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/7a920796-5a78-4996-9f81-4e3af8d7a3d4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 15 Nov 2024 01:45:33 +0000
Certificate not after:    Thu 18 Feb 2027 01:45:33 +0000
Subordinate resources:    IP: 204.10.0.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:f2:8f:99:32:a8:dc:9a:25:b4:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Nov 15 01:45:33 2024 GMT
            Not After : Feb 18 01:45:33 2027 GMT
        Subject: CN=7a920796-5a78-4996-9f81-4e3af8d7a3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:87:06:f1:65:c8:ae:6d:d2:69:b4:3a:61:17:
                    4a:fc:67:e5:37:4c:00:23:8d:84:25:f2:b1:a5:c7:
                    a6:df:72:29:62:bb:4b:2b:5b:16:31:0b:6b:75:2a:
                    af:8a:47:69:e3:fb:f7:20:d6:5e:45:4a:ec:32:ce:
                    63:5d:8b:18:6e:c4:3d:93:e4:08:35:43:96:37:bd:
                    72:0a:11:a9:f2:d8:cd:95:f5:0b:3e:97:d3:da:c9:
                    85:78:ef:02:48:db:57:66:1f:4e:5d:ba:30:64:e5:
                    60:31:7e:6e:43:59:bf:14:c5:25:e4:ba:e7:5f:50:
                    10:6d:7e:66:33:0e:9c:19:07:20:44:06:46:9f:1a:
                    a3:c8:26:0d:c3:2f:ff:61:c4:f5:42:20:b7:5e:67:
                    41:fc:f5:64:3b:10:f5:d8:53:49:13:86:49:d1:af:
                    13:2c:bb:55:d1:bd:57:5f:f6:f6:fa:44:08:b2:20:
                    75:7a:a0:5f:9b:54:7b:24:a9:92:9a:a2:f7:a8:a4:
                    0b:d4:25:c8:3b:87:62:d9:9e:be:f9:fa:a2:a1:41:
                    5a:f0:4a:67:99:50:ed:02:a2:3f:6b:a4:2b:19:08:
                    82:6d:80:ba:fa:2d:43:b0:77:54:f1:43:0d:ba:2d:
                    4f:ac:9a:f4:8b:81:9f:30:4b:6c:2d:df:2f:f0:58:
                    a2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F0:09:80:5F:78:30:59:A6:09:7B:0B:1B:82:9C:98:1A:79:BF:27
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/7a920796-5a78-4996-9f81-4e3af8d7a3d4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:26:2e:3f:7a:64:de:b2:72:61:b8:04:5d:1b:ed:11:96:77:
         5c:91:4c:3f:6e:8e:31:e9:76:73:c7:2c:25:9c:cc:3e:22:5e:
         2a:1b:f5:4e:59:9a:d4:e1:9c:eb:43:73:37:36:07:9a:c6:de:
         87:96:a0:a9:8e:10:3c:3b:9d:92:47:64:4f:d4:d6:b0:71:da:
         4f:0c:e8:85:0a:16:8b:d2:6c:6f:64:7c:ea:b9:89:53:90:cd:
         c2:6d:40:da:ca:91:2e:3b:ec:f1:a0:75:bc:43:30:e0:b0:a5:
         98:c3:84:f7:7b:23:7b:87:26:6f:9a:d7:53:bc:8e:d4:b8:e0:
         f4:26:3a:b5:23:6c:66:65:77:0f:26:e0:d5:cf:3b:a5:3c:b8:
         e0:ad:c0:a5:c1:80:33:43:92:d6:e9:a6:38:fb:fb:2a:b6:92:
         a1:5c:52:49:9b:a4:e3:a2:9d:fb:97:d3:3b:5c:05:49:10:fd:
         b1:27:5f:53:16:59:e2:81:dc:1e:98:8a:52:6f:1d:26:19:1e:
         e5:7b:67:c9:87:49:c4:6c:dc:98:be:f1:e5:6a:06:d8:25:d3:
         6f:94:cf:f7:ee:0a:33:af:06:f6:9c:f3:ab:d2:cf:fd:37:a3:
         f6:d1:a8:ea:8c:7c:1f:99:e3:63:eb:e6:07:3e:2e:b5:f3:10:
         bd:db:de:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----