Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
File:                     628d865a-2d19-4af1-984a-6c443304d9f0.cer (raw, json)
Hash identifier:          3a4nprmqnCxxKH1ysftkZ0q/4Suwlnj38KxRaxB/BgI=
Subject key identifier:   25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847F42BFB6D07F52FFBDAA83F60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 21 Nov 2024 14:25:48 +0000
Certificate not after:    Wed 24 Feb 2027 14:25:48 +0000
Subordinate resources:    IP: 152.30.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:2b:fb:6d:07:f5:2f:fb:da:a8:3f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 21 14:25:48 2024 GMT
            Not After : Feb 24 14:25:48 2027 GMT
        Subject: CN=628d865a-2d19-4af1-984a-6c443304d9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:34:60:6c:4a:cd:2f:0e:63:c7:63:e7:37:d5:
                    c5:22:53:d0:d7:58:5c:4f:2d:0d:fa:9f:e1:e7:ad:
                    40:9d:68:b7:17:a5:21:f6:96:30:4b:99:87:8d:d3:
                    71:51:73:42:14:72:41:65:d1:61:28:65:72:5c:bb:
                    e8:2d:b1:56:8a:5a:28:2b:c4:02:d4:df:8d:e9:de:
                    1e:f3:70:b2:5c:cd:9e:bc:ce:6b:89:72:04:ac:40:
                    04:23:a3:17:60:bb:3c:d3:c8:36:60:91:7f:e4:35:
                    da:55:83:d7:ef:7b:79:c6:62:e9:89:93:6d:3c:b2:
                    56:1c:d9:67:4e:98:53:ad:4e:84:ef:f5:5f:cb:b7:
                    a6:2f:31:35:c7:75:75:19:5c:8e:9b:c4:2d:95:31:
                    35:a5:91:d0:b5:c8:c3:92:cb:35:86:36:ea:c5:4d:
                    b2:f7:0b:8f:de:2e:0f:b3:d1:e2:f5:30:71:5b:f4:
                    94:63:46:f4:48:bc:9e:38:a8:56:1a:4c:cd:0c:60:
                    24:b9:a0:c8:08:50:50:9a:58:af:18:1c:ad:30:32:
                    e3:a8:72:ff:d4:64:d0:41:fa:2e:83:0c:6a:00:8a:
                    2d:52:dc:bb:df:a7:0b:df:c5:a0:d8:8e:5d:bb:50:
                    3d:8e:b7:92:f9:4a:50:20:96:dc:8d:99:96:34:63:
                    af:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.30.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:5c:cb:6d:1d:71:b9:f3:03:7a:c3:26:46:78:74:f9:17:52:
         0c:af:32:5b:2b:b3:38:2d:72:c3:d3:0e:91:d1:93:10:38:16:
         e4:fd:99:d6:8c:38:9c:47:75:09:17:be:32:5f:dd:67:89:d7:
         0a:3c:24:32:39:c8:87:42:60:cf:4c:ec:04:61:c4:72:c5:eb:
         35:b1:ac:21:06:9d:04:90:85:a7:a8:0c:9b:04:f1:7b:59:b5:
         4d:68:b7:76:54:16:f7:9f:94:13:5b:6e:ed:46:1a:d7:a8:d7:
         e7:54:d7:55:70:4a:d5:0a:67:41:ab:36:b3:9c:d0:ce:a2:75:
         37:48:a9:ad:2d:36:a0:1d:e8:9d:35:2a:88:ca:f3:98:d2:00:
         da:01:bb:56:26:f1:90:cc:53:65:8e:76:f5:81:23:76:b8:90:
         20:35:ba:fc:74:f1:42:03:4c:b1:6f:e9:96:79:03:ac:c8:75:
         90:5f:db:f1:9a:f4:82:46:a9:53:cf:fd:37:7a:78:55:26:f0:
         3a:65:67:48:2d:96:49:fd:01:6a:6f:86:04:9c:1a:bc:3e:06:
         fa:c5:ff:8a:aa:a4:35:8c:03:ea:1c:4a:7f:d4:5b:ed:37:a9:
         46:8c:ff:16:d5:bf:ba:5f:31:a0:70:56:8b:3e:b9:28:ff:c7:
         22:7b:af:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----