Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160.cer
File:                     1e83a5f9-fa06-43d8-bc5f-e73b67992160.cer (raw, json)
Hash identifier:          urSFx56pSYzuSmdtsH72v5H4aRoe6XPvrx9hC3jv2wk=
Subject key identifier:   43:FA:C3:B7:1D:27:C1:94:C9:FC:76:50:A8:E1:97:99:C8:E3:3A:3C
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858456550B6E09193EED0D5B54C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/1e83a5f9-fa06-43d8-bc5f-e73b67992160.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 01 Apr 2024 00:45:20 +0000
Certificate not after:    Sun 05 Jul 2026 00:45:20 +0000
Subordinate resources:    IP: 2604:3e00::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:65:50:b6:e0:91:93:ee:d0:d5:b5:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Apr  1 00:45:20 2024 GMT
            Not After : Jul  5 00:45:20 2026 GMT
        Subject: CN=1e83a5f9-fa06-43d8-bc5f-e73b67992160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e2:5f:bf:f7:f2:42:66:f9:6d:95:ff:06:49:
                    33:8e:a1:25:a8:c2:b9:4a:c7:19:0d:e9:f3:65:8f:
                    09:81:89:f7:d3:eb:48:2a:dc:56:c0:19:a1:7c:3a:
                    a1:1c:8c:67:eb:13:b7:c7:91:58:1b:7b:68:3c:9a:
                    f3:e3:be:b1:92:f3:e9:17:01:ac:59:93:49:18:84:
                    80:ef:7d:f8:c9:1b:1b:9a:e9:b1:5a:de:6d:af:2c:
                    57:82:54:08:16:a3:a5:5f:6c:37:06:29:b9:20:03:
                    3a:80:c6:74:13:a4:18:fa:1a:8f:4c:45:ae:a9:fa:
                    8d:2e:ab:2e:44:46:25:6b:8b:83:c5:74:94:b4:9c:
                    81:80:b2:67:cc:67:1e:ca:d6:7c:73:2e:47:a4:df:
                    21:6b:f7:b6:52:26:eb:42:23:44:ac:36:4a:7c:3b:
                    c3:ac:cb:0a:1b:b2:a6:47:54:7f:26:37:10:d9:1b:
                    c5:cd:91:62:a3:9b:28:8f:d8:99:40:49:89:ff:a9:
                    69:be:1f:ff:09:e8:7b:61:ab:b0:89:a7:29:07:6e:
                    42:3b:03:56:3a:d2:fe:6e:da:ab:c0:3d:a2:c1:05:
                    4f:93:a1:c1:70:6f:7f:ce:0c:a3:a0:ce:1b:5b:30:
                    40:c7:5e:96:9f:1e:a5:a1:06:ce:3e:7c:fc:cb:ce:
                    36:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FA:C3:B7:1D:27:C1:94:C9:FC:76:50:A8:E1:97:99:C8:E3:3A:3C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/1e83a5f9-fa06-43d8-bc5f-e73b67992160.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:22:7f:3f:fa:59:22:11:0b:5f:94:3c:bb:f6:cd:b9:56:a4:
         aa:4c:c8:24:43:f9:ca:73:ef:95:50:61:95:a6:de:a6:4a:79:
         16:4c:36:8f:94:b9:92:16:8f:3b:ea:4e:8d:15:9f:cd:6f:f9:
         45:e3:13:87:f5:cc:53:b4:57:63:18:86:2f:5b:a0:31:e8:17:
         44:da:65:bb:2c:95:70:47:20:3f:2e:a8:f1:9f:e7:ec:4d:da:
         ff:13:17:dd:4b:33:e6:49:d9:73:c0:93:f0:28:cb:05:85:2a:
         e2:08:96:3e:6f:7e:95:99:c7:8c:16:57:93:13:9c:7a:4d:aa:
         64:77:d3:ce:96:90:12:6a:aa:7a:c0:d8:b5:f1:9d:49:9b:a7:
         56:98:f7:56:7f:bb:82:8f:d4:ee:9a:5a:55:22:75:ed:96:90:
         91:71:5a:48:2d:cc:af:ff:47:54:3a:2b:76:c7:0a:7c:c9:17:
         00:7e:26:02:ed:26:e0:5f:2d:cd:29:21:23:a0:45:ea:90:d5:
         fd:c4:70:fb:46:cc:34:f4:17:8e:83:61:f4:1c:42:52:61:24:
         78:a0:c3:69:d6:93:f4:6b:85:a9:d3:57:e3:02:1c:e7:46:a0:
         61:de:6c:34:84:5f:6c:1c:8f:82:d9:6a:3a:3e:a7:59:6a:f1:
         e4:16:32:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----