Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570.cer
File:                     93652d41-9632-44fb-89a2-b986954b6570.cer (raw, json)
Hash identifier:          h8seeZ209yYmr9Gdi/iZl7pzhe6vx3qLC8CCGGbb7SA=
Subject key identifier:   89:10:A5:9E:8E:2D:D6:8E:E7:2E:9D:F5:FB:F6:D1:34:2B:B8:DA:D8
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285841E48354183D8ADEE107246060
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570/93652d41-9632-44fb-89a2-b986954b6570.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Mon 04 Aug 2025 19:06:39 +0000
Subordinate resources:    IP: 45.45.152.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:54:18:3d:8a:de:e1:07:24:60:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Aug  4 19:06:39 2025 GMT
        Subject: CN=93652d41-9632-44fb-89a2-b986954b6570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:aa:df:3b:4f:28:4c:d2:18:dc:d8:82:53:61:
                    60:33:5e:5b:1c:c4:38:a1:3a:09:37:67:ee:ed:6b:
                    54:5d:b7:3c:7d:2f:27:84:ef:0a:8f:9e:2a:dc:4e:
                    ca:ce:00:73:d1:33:07:a5:c8:58:36:1f:e1:fc:7f:
                    fb:d4:8d:f0:c6:e0:89:ff:32:da:58:24:31:b6:13:
                    8c:36:39:d0:e1:a0:12:af:fc:23:5a:31:44:c1:1f:
                    f7:6c:4e:e2:6e:ad:02:81:d0:84:1b:c3:d5:ef:12:
                    61:79:06:89:8d:8b:b5:31:67:37:40:89:1b:bb:56:
                    d7:5f:e4:42:71:95:ef:c5:54:60:29:fb:3b:5f:3d:
                    d5:47:84:88:95:16:01:52:75:6d:56:e0:39:e4:91:
                    c7:d1:a7:d9:8a:d0:51:cb:cf:17:19:20:35:31:54:
                    d3:53:ac:52:08:bf:66:00:db:57:be:30:64:ad:2b:
                    15:e0:66:4b:39:75:fa:68:5f:6e:3e:5c:cf:67:28:
                    1a:54:e2:27:29:3b:95:11:d5:48:fe:28:5d:a2:bc:
                    b8:2f:38:30:16:05:75:60:72:8e:ba:79:ec:c7:d9:
                    44:90:4b:03:4b:a6:36:2f:47:94:00:fa:5c:de:97:
                    fe:20:1f:4c:d4:78:ae:21:e0:a2:be:8b:36:17:f1:
                    8e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:10:A5:9E:8E:2D:D6:8E:E7:2E:9D:F5:FB:F6:D1:34:2B:B8:DA:D8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570/93652d41-9632-44fb-89a2-b986954b6570.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:58:48:a7:b5:d2:be:9e:ca:29:73:f5:e0:53:cf:fe:00:25:
         a9:38:3f:29:23:5e:bb:b5:89:eb:51:a5:15:96:90:51:1e:0d:
         e0:ad:73:78:16:0b:3e:94:31:7e:f5:3b:4a:dd:b1:d4:12:59:
         e3:64:18:16:4a:95:9a:e2:48:81:12:84:96:cc:02:ae:78:00:
         a1:65:94:98:40:a8:39:f8:27:47:94:77:c5:c7:64:c1:9e:e9:
         10:3c:db:2e:b4:56:d0:37:4d:51:06:23:4e:c9:80:74:0b:09:
         58:24:2c:13:30:f3:3b:66:f9:24:56:65:5a:81:d0:d4:94:01:
         a0:22:b2:a7:08:9b:a5:e1:f1:7b:e3:a8:9e:37:5f:0d:0e:a1:
         38:cf:d8:50:49:72:8a:9f:5f:32:85:81:15:d7:71:6c:f7:b6:
         34:14:9e:28:49:17:84:d5:ce:61:ba:2f:a1:50:a1:52:32:ef:
         34:b8:c3:d3:7d:53:e5:2e:a2:e7:db:e8:52:bc:0e:0b:9d:f2:
         27:21:a1:b1:f2:c3:38:fc:b3:27:5c:37:57:e8:ba:47:5a:1b:
         30:d8:0d:0d:c8:fa:ea:52:78:01:26:83:a4:ea:c1:ed:eb:b4:
         9a:db:12:5e:1a:6e:5a:e4:92:cb:9b:f7:fb:e9:1b:e3:95:4d:
         a4:cf:55:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----