Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360.cer
File:                     9a69b8ce-24da-41b3-a08e-48d64c967360.cer (raw, json)
Hash identifier:          /El/7qpmEqj3chhoayRt5IDEgrZxmyAkYV7AyjyAwog=
Subject key identifier:   C4:6F:69:64:7F:26:E4:FD:96:ED:01:EC:D2:03:4C:0F:72:BC:22:EC
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858429630F6C6EB5D54683E658A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 18 Jul 2023 10:35:10 +0000
Certificate not after:    Mon 20 Oct 2025 10:35:10 +0000
Subordinate resources:    IP: 104.254.208.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:96:30:f6:c6:eb:5d:54:68:3e:65:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 18 10:35:10 2023 GMT
            Not After : Oct 20 10:35:10 2025 GMT
        Subject: CN=9a69b8ce-24da-41b3-a08e-48d64c967360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9f:55:ce:37:39:a9:e2:07:2c:79:78:9c:4d:
                    e2:22:61:c4:48:95:42:b6:f5:73:72:7e:77:c7:63:
                    3d:12:61:b7:89:75:0b:fd:b6:a2:07:28:c9:8c:32:
                    0a:e0:99:13:a7:84:89:75:17:12:e9:f4:37:5e:7e:
                    b4:5e:03:8f:d5:3c:5a:8d:83:ed:23:56:bc:ab:4f:
                    f3:27:d2:dc:6a:e4:f2:f1:2f:5b:6b:28:d4:bd:37:
                    de:a7:ce:b4:6d:4f:26:2f:73:10:bc:1d:d5:06:ec:
                    21:c3:94:0e:93:96:3f:0d:0f:f4:74:fc:24:24:4b:
                    ad:26:83:90:1d:d4:9f:93:e5:45:08:f3:ae:d0:99:
                    1d:2f:7e:41:8f:57:20:98:b0:15:db:6c:b5:ca:39:
                    fa:d8:9a:cb:b6:63:c4:d9:e0:b7:80:02:ed:90:de:
                    84:a4:01:11:65:7e:e9:26:8d:3d:41:52:1b:84:1b:
                    a2:c3:e0:4b:91:af:6d:35:a2:ee:4b:8c:95:9e:6f:
                    91:88:68:5d:91:fc:f0:25:cc:5b:cd:6d:65:fd:54:
                    f2:4c:5c:12:15:b2:5e:41:8a:5d:e0:bb:12:26:92:
                    0e:92:0f:92:0b:3c:14:72:10:89:4e:21:ed:60:c2:
                    97:38:77:b3:3f:85:d8:23:be:95:bf:36:f4:56:78:
                    c9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6F:69:64:7F:26:E4:FD:96:ED:01:EC:D2:03:4C:0F:72:BC:22:EC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:34:c6:af:43:b9:73:9a:9c:96:6b:04:74:01:a3:02:d0:61:
         5d:e4:6a:0c:6a:aa:95:ab:6e:dd:77:b7:61:5e:75:18:f8:6a:
         28:3d:ba:24:08:78:12:cb:e9:06:65:ae:72:5d:1a:96:a6:db:
         0c:c5:a9:fb:92:e9:3c:76:70:e0:8c:61:a3:2e:d4:4d:62:b6:
         1f:75:5d:e0:22:28:09:50:86:ba:9d:58:8a:f3:33:18:ef:c3:
         2e:f4:e7:5e:b3:77:46:08:a5:99:80:28:0d:b4:6e:9a:95:59:
         d8:6f:fd:02:4f:d8:65:59:65:06:46:35:87:2d:03:72:d2:12:
         6e:8d:de:2d:1a:6a:27:12:b4:f3:fc:f5:bb:18:8d:3d:2a:a2:
         b8:08:ef:97:4f:84:48:53:54:08:7e:d5:20:d7:a4:d3:78:3d:
         98:18:f7:53:a9:f0:a7:e1:05:48:b1:16:c4:d3:cf:1c:37:8d:
         d3:5e:cf:35:3f:1d:9a:2d:4d:0f:a0:49:ba:c4:3d:77:69:45:
         d8:11:79:6f:16:06:f9:50:12:42:21:9d:ff:2d:62:53:d5:89:
         fd:64:fc:de:65:c0:9e:3f:02:fb:1f:90:f9:19:54:c2:e6:bb:
         30:01:e5:d3:e1:c6:30:ed:19:90:25:57:df:61:5e:4f:6d:5c:
         68:36:76:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----