Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
File:                     8e2da239-793e-4082-afde-6458f2319e7e.cer (raw, json)
Hash identifier:          V8f5jl1bsX/mQTneiR8F02INZ6x137HKP2O/7s2SQ3Q=
Subject key identifier:   B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285841F8B5E15A58AA5CB9D0899600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 23 May 2023 00:45:15 +0000
Certificate not after:    Mon 25 Aug 2025 00:45:15 +0000
Subordinate resources:    IP: 2620:f::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:f8:b5:e1:5a:58:aa:5c:b9:d0:89:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: May 23 00:45:15 2023 GMT
            Not After : Aug 25 00:45:15 2025 GMT
        Subject: CN=8e2da239-793e-4082-afde-6458f2319e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:99:1d:e5:71:2e:5d:2c:08:25:65:f5:3e:c8:
                    24:e5:6b:27:a5:74:84:9d:e9:63:99:e1:71:f5:8f:
                    10:93:59:8d:46:f6:8f:9d:6d:86:c7:f4:94:b8:51:
                    86:7b:ea:f1:cf:e2:3f:83:80:f0:d1:48:d6:1f:8f:
                    fb:3a:1e:68:d7:a7:66:9c:d3:74:f1:a1:1f:2e:32:
                    bc:c8:41:78:94:f0:ff:d0:a8:86:00:71:6a:4a:9a:
                    e0:20:aa:93:be:02:a1:d6:f7:29:42:e3:b1:c4:a5:
                    1c:18:95:03:7c:10:52:26:91:53:9d:6f:dc:45:24:
                    b5:71:e3:7f:5f:41:3a:c9:52:ac:b0:1f:e9:46:1c:
                    24:91:47:b3:ea:32:88:8a:2e:9f:d8:a6:19:a5:9b:
                    58:0a:cd:96:4b:1f:f7:e7:5b:ed:bb:f2:ac:f2:25:
                    bb:17:6f:03:d8:de:c9:75:1e:8e:f4:54:4f:4a:b7:
                    67:98:0c:71:9d:20:4a:41:65:ea:ec:3e:33:91:1b:
                    a2:6a:61:8b:99:4d:e9:4e:a6:87:19:62:81:1f:22:
                    a1:f5:5b:e9:fa:36:d5:30:bc:3b:27:47:33:39:c3:
                    cf:04:c8:17:da:69:b6:d1:8a:f4:d4:4a:9f:5f:3c:
                    2a:6a:e7:5f:ce:cf:13:7a:80:1f:8c:c6:31:fe:49:
                    4f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:e4:51:bc:2b:ac:cb:89:74:b6:a6:e1:a6:b6:16:82:ed:f9:
         90:78:49:e0:80:cb:f1:06:f2:7a:8a:3a:7e:42:19:ca:85:64:
         65:bd:a8:fa:eb:8a:2e:2f:b5:9c:07:73:3d:69:a8:7f:89:cd:
         8f:77:bf:6f:d9:9b:34:60:ad:f0:81:f5:cf:c5:e3:c1:de:03:
         c4:ed:7a:f5:a0:3f:ee:ee:14:99:97:32:28:a5:07:14:9c:fa:
         d2:4c:c8:d5:d1:05:34:1c:89:34:43:1b:38:e6:29:46:7b:0a:
         41:27:89:2b:e4:46:1e:6b:7d:d0:ed:98:6a:a6:06:29:4a:f6:
         5e:43:62:92:d9:f8:6d:ba:3b:72:3b:a7:15:0f:cb:35:a9:7c:
         8b:ac:35:23:c7:77:99:07:8f:99:a6:4c:78:35:f6:67:37:77:
         1e:f2:ae:7c:6d:be:cc:27:c7:c7:90:25:8a:77:25:9e:da:bb:
         6a:79:77:a8:a2:48:22:5b:c4:47:6b:2d:ed:18:03:42:6e:81:
         87:9b:44:58:cf:cf:6f:cf:06:8f:58:a7:98:d3:dd:78:6a:bf:
         2c:5f:44:c7:2c:62:28:8d:3d:a2:53:eb:b9:7c:23:74:47:7b:
         51:ed:6d:7c:ba:b9:cc:2d:53:5a:59:1f:a1:35:a5:ff:44:eb:
         84:97:d8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:53:50 2024 by rpki-client on console-fra.rpki-client.org