Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/85048768-1ef5-4142-89ca-ff7c72fc8b16.cer
File:                     85048768-1ef5-4142-89ca-ff7c72fc8b16.cer (raw, json)
Hash identifier:          ZILWcsRBwuwbocbWUwKGR+ci7ZcHeWdEWyx0P75WX5U=
Subject key identifier:   B9:BD:B8:C6:A7:DF:F8:7B:96:23:58:AE:97:47:AD:72:2E:8A:75:D9
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858481DF5ACC3B3E7B47C7935E180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/85048768-1ef5-4142-89ca-ff7c72fc8b16/85048768-1ef5-4142-89ca-ff7c72fc8b16.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/85048768-1ef5-4142-89ca-ff7c72fc8b16/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 06 Dec 2024 13:40:20 +0000
Certificate not after:    Thu 11 Mar 2027 13:40:20 +0000
Subordinate resources:    IP: 23.188.88.0/24
                          IP: 2602:f820::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Dec 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1d:f5:ac:c3:b3:e7:b4:7c:79:35:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Dec  6 13:40:20 2024 GMT
            Not After : Mar 11 13:40:20 2027 GMT
        Subject: CN=85048768-1ef5-4142-89ca-ff7c72fc8b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dd:8f:f9:0a:8a:fb:61:1f:0c:5e:cb:4e:ec:
                    25:23:fb:7f:19:2a:a8:5f:b9:33:41:91:e3:1b:03:
                    9f:42:2d:4a:8a:60:96:85:29:9a:2f:2d:e5:28:71:
                    aa:c7:ec:e0:61:28:ca:08:f3:79:32:9e:50:aa:19:
                    bf:2a:88:33:c4:f3:2c:7e:b8:90:75:f7:02:3a:da:
                    da:fd:03:61:fa:45:1d:81:6f:c7:5c:da:d4:52:bb:
                    04:a1:56:b0:b7:89:a4:f9:5a:9f:a9:5e:4b:4b:cf:
                    0d:87:cc:fb:3f:71:41:26:47:2a:e8:08:aa:f7:67:
                    63:64:90:e0:82:d4:dc:5e:a8:a8:4b:d3:45:7d:a5:
                    cd:97:eb:cd:41:83:a5:2f:97:26:a7:2d:4f:86:df:
                    71:39:46:8c:9a:7c:30:99:a7:4d:ac:d8:af:68:f8:
                    98:2d:f7:26:5b:67:f9:68:48:6f:c7:52:37:e4:1e:
                    8a:eb:38:de:4b:cd:de:50:6d:3f:9a:0d:45:f9:18:
                    39:a8:cb:e8:7e:76:54:e1:81:32:5f:60:44:c1:d1:
                    3c:49:ae:ed:1f:d9:11:4a:02:4b:54:11:8c:77:70:
                    a0:97:55:de:c3:ad:ba:3f:04:19:50:0c:0d:da:81:
                    52:07:e7:eb:3a:fd:7a:97:59:70:a4:1a:0c:0d:af:
                    f2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BD:B8:C6:A7:DF:F8:7B:96:23:58:AE:97:47:AD:72:2E:8A:75:D9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/85048768-1ef5-4142-89ca-ff7c72fc8b16/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/85048768-1ef5-4142-89ca-ff7c72fc8b16/85048768-1ef5-4142-89ca-ff7c72fc8b16.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.88.0/24
                IPv6:
                  2602:f820::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:fb:a4:59:12:a9:14:bf:b4:b8:1e:a9:24:91:a8:8a:37:59:
         eb:01:17:01:1a:14:86:dd:2a:f8:bc:e5:24:9b:33:57:ee:b5:
         e8:14:55:e6:8b:46:1b:06:f5:78:84:52:a5:5a:21:b8:72:39:
         3e:f6:41:99:d1:13:16:c8:6d:0d:b1:18:1a:fb:b4:62:62:0b:
         98:fd:3d:39:b8:b9:4c:21:47:b1:d9:9f:a9:f5:06:fe:ab:cf:
         2e:ba:e3:65:be:32:e1:42:e8:54:d3:de:71:86:2a:28:e0:fd:
         8b:fa:a6:cb:80:21:36:71:73:64:27:42:76:7b:cb:9e:c2:ce:
         18:98:33:89:ee:ba:17:a5:44:78:f3:64:69:df:4e:88:91:92:
         57:af:6c:5d:46:17:b5:75:a5:67:60:bb:c1:92:cb:a7:13:d0:
         c0:13:56:70:60:e8:67:42:df:e1:69:2d:d7:7e:ba:91:c4:6b:
         c1:9e:45:46:5c:22:9a:88:81:8c:b8:43:87:25:58:89:3f:f8:
         5d:8e:78:45:6f:95:ae:9f:2d:51:62:c4:01:e0:9c:82:46:62:
         37:6e:55:9f:ae:26:66:e4:59:16:e7:26:5e:43:1b:d5:8c:1e:
         8a:5c:c9:d6:20:6f:52:16:99:9c:db:06:0b:db:96:61:3c:af:
         73:7d:0a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----