Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4.cer
File:                     145bac4b-d098-4846-b4b1-ac1761209cd4.cer (raw, json)
Hash identifier:          iKMLhN/ERkGztyN4lGgzwr17O5Jleq+i/bbhlO6Fenk=
Subject key identifier:   AB:FC:69:04:AA:F5:94:85:0E:C8:FB:C7:A1:22:07:1D:20:CE:ED:B1
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285844E23857A24D7D913C2682D880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 14 Feb 2024 01:45:21 +0000
Certificate not after:    Tue 19 May 2026 00:45:21 +0000
Subordinate resources:    IP: 192.86.21.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e2:38:57:a2:4d:7d:91:3c:26:82:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Feb 14 01:45:21 2024 GMT
            Not After : May 19 00:45:21 2026 GMT
        Subject: CN=145bac4b-d098-4846-b4b1-ac1761209cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:c7:a6:31:02:6f:9a:93:8f:87:4c:8c:04:
                    f2:b3:a8:8a:0a:39:48:3b:59:8e:3f:30:c1:be:98:
                    53:42:26:66:86:3a:64:27:09:98:71:77:96:af:61:
                    ab:bb:07:f8:6a:6f:60:7c:4d:62:9d:d9:e0:06:ef:
                    ed:f9:c5:f3:46:2a:85:3f:81:2b:39:4b:b2:ae:fe:
                    70:4b:4a:80:6f:cf:11:db:5f:4b:62:d8:18:22:fc:
                    24:de:87:c1:89:da:73:c7:26:27:a6:d0:91:c8:f5:
                    78:f2:0c:0b:2a:bf:5d:5f:71:ae:62:11:fb:b7:51:
                    58:8d:91:63:e6:c6:cd:23:8b:8f:5c:0c:93:de:ff:
                    54:fc:07:4d:9e:79:e7:81:cb:26:83:a1:aa:37:c7:
                    86:fd:f9:1c:d1:2f:de:58:3b:18:85:df:bc:81:5d:
                    b0:be:f4:87:96:35:96:32:ff:2c:3a:3b:7f:0a:52:
                    b9:5c:37:65:2d:f0:17:aa:b0:a8:af:a6:2a:56:c4:
                    77:3d:d4:a5:0a:95:96:d6:07:f4:55:4f:12:be:f9:
                    0e:18:0f:44:50:78:67:3a:2b:a7:d1:0c:36:3f:a9:
                    cc:0b:6e:ef:05:5e:34:52:12:c6:f2:6c:bc:0e:25:
                    ff:bf:fc:f2:db:3f:45:31:e7:cc:49:e4:8e:73:28:
                    f1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FC:69:04:AA:F5:94:85:0E:C8:FB:C7:A1:22:07:1D:20:CE:ED:B1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.86.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b1:ec:71:2a:9c:6a:c6:93:b0:d1:ae:68:a9:0a:1c:f5:49:
         4d:62:24:8a:4d:f7:d6:c9:6e:29:85:52:ac:dc:ab:4b:94:b4:
         1e:42:fc:c9:8b:1f:16:11:be:42:ec:7d:ef:0b:12:55:4f:f1:
         05:cf:d7:32:c8:6d:95:88:21:30:b2:b3:bb:2c:fd:33:3b:e5:
         31:95:36:50:80:0e:70:ae:3f:d8:58:5b:62:0b:33:7f:53:41:
         4d:fc:ba:c9:7a:6f:22:5f:85:5a:8e:dd:89:f5:29:23:f4:cd:
         7f:4b:7d:b8:84:d8:07:85:d0:b9:78:ef:aa:07:cf:52:04:a9:
         be:99:da:8f:21:bf:f4:d0:a6:d8:d1:a0:ca:a3:f4:7d:5f:50:
         aa:66:c8:40:42:18:eb:64:1f:05:30:3a:a8:6b:a5:a8:0d:e2:
         3a:72:11:25:fd:93:89:e3:e9:5a:e2:01:38:c6:db:87:b8:59:
         66:2d:a4:6e:46:f1:6f:60:7a:d2:d3:5b:51:a2:2b:b4:48:db:
         b3:57:3c:02:b7:dc:08:a1:1b:62:be:4c:40:78:ee:c1:d0:26:
         4d:57:5e:b7:7e:87:8c:5a:eb:63:b2:de:3b:b2:27:b0:e2:99:
         b5:39:05:d6:51:46:20:a6:22:9c:1b:87:6a:99:13:3f:25:de:
         d6:9f:5d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----