Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.cer
File:                     fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.cer (raw, json)
Hash identifier:          pNcKhjp1oDMxRm879V3fPqOytjNcXEtcnwhhE+NSdTA=
Subject key identifier:   16:A7:A4:32:9B:77:0E:79:90:0B:5D:6F:0A:B6:2E:37:C4:AD:E0:34
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858424F47F5966C11A934D5C03200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 23 Jun 2023 00:59:07 +0000
Certificate not after:    Thu 25 Sep 2025 00:59:07 +0000
Subordinate resources:    IP: 23.154.216.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4f:47:f5:96:6c:11:a9:34:d5:c0:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jun 23 00:59:07 2023 GMT
            Not After : Sep 25 00:59:07 2025 GMT
        Subject: CN=fab6ccf2-19f6-4e96-aad7-9cb606e13cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:43:68:28:3e:9b:fa:7d:03:22:10:b3:f7:a2:
                    45:b5:24:e5:10:df:66:04:dc:1e:a7:82:61:c5:29:
                    8a:e0:88:08:78:2f:36:8f:15:c5:e1:f3:90:36:0c:
                    e2:59:af:b0:2e:a6:c8:21:6f:5a:61:8f:f1:53:7f:
                    d4:74:69:62:8a:5a:a2:a3:82:86:ea:f8:8c:e1:b8:
                    09:a3:fd:78:64:9e:b0:e8:63:f7:ca:98:51:28:8f:
                    15:c0:fc:ef:e1:5b:03:0e:3f:81:e6:57:2a:4d:ed:
                    12:be:11:b6:3e:c6:3c:6d:ce:9c:f1:b0:25:d0:03:
                    4c:4f:17:ef:76:97:34:4a:83:16:be:58:a6:39:3a:
                    75:e5:57:44:83:9d:ae:72:25:cc:0f:1c:a7:18:fd:
                    76:eb:9a:b0:95:f8:c3:29:ad:2e:c7:bd:ec:a9:3b:
                    bd:45:af:e2:02:af:e9:de:2a:d0:96:32:e8:d8:00:
                    4e:8e:e0:c3:d2:f2:ec:72:da:73:0d:67:e7:d5:da:
                    48:17:4a:04:48:75:90:17:69:b7:dd:59:93:64:76:
                    55:ee:39:31:59:47:12:02:4a:d0:56:3f:b3:b7:01:
                    f7:97:da:97:f8:3b:f7:71:3d:fa:a1:0c:f2:12:47:
                    cc:8e:65:58:66:20:dd:5a:08:bc:24:68:1c:34:3a:
                    5d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A7:A4:32:9B:77:0E:79:90:0B:5D:6F:0A:B6:2E:37:C4:AD:E0:34
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:e4:93:de:d2:27:8c:a8:d5:e4:d2:1b:ec:68:6f:3e:87:43:
         e7:b3:e5:d6:ff:57:b4:b9:42:a8:af:c5:ca:48:d6:d5:11:57:
         f6:84:ff:c8:b9:92:f9:4b:ae:70:7a:2a:20:d7:18:02:e2:9c:
         28:e0:82:48:bb:77:d8:6c:12:45:c4:82:48:c2:44:94:27:90:
         c2:87:60:18:a3:57:8c:19:f2:af:ad:48:41:6d:f0:ff:f3:a9:
         be:c2:09:0c:e2:25:d9:8c:d1:2a:3b:84:05:8e:70:fa:7f:6b:
         6e:fc:b5:38:36:d7:97:e3:e6:3d:91:6b:b8:f8:16:be:51:b6:
         9c:96:fe:06:8b:49:9a:a5:93:12:3e:3e:14:57:ce:aa:03:b3:
         9e:b9:6e:79:c5:a7:c3:1b:4c:fe:76:88:4c:88:ab:c1:ba:e8:
         54:9d:14:b6:53:a4:a4:d9:38:f4:ad:6d:e7:27:85:3e:e5:3c:
         aa:0e:04:be:bb:57:3b:fa:d9:6c:71:50:d8:ff:80:83:31:a5:
         43:44:ab:ea:d9:b6:d6:e3:93:dc:2a:26:5f:ab:ad:4b:bf:bb:
         27:8d:ec:e0:be:8e:ba:aa:84:9d:db:56:4a:7c:37:0d:70:9a:
         8a:07:3d:49:04:28:6a:8f:4a:34:9b:e6:6b:7a:51:61:0c:bd:
         6c:e0:ca:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----