Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
File:                     6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer (raw, json)
Hash identifier:          xQc9wXdN64eq3MAg4bx/mY3CJYhO6bI92kNOXRtYwUk=
Subject key identifier:   B1:73:6E:E2:05:2B:AD:D4:7E:01:2A:25:CC:44:7E:8F:26:0B:B1:44
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584369383C7B14BCFA6B52E7AA00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 02 Oct 2023 00:45:23 +0000
Certificate not after:    Sun 04 Jan 2026 01:45:23 +0000
Subordinate resources:    IP: 2600:f000::/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:69:38:3c:7b:14:bc:fa:6b:52:e7:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Oct  2 00:45:23 2023 GMT
            Not After : Jan  4 01:45:23 2026 GMT
        Subject: CN=6a9537a8-a685-4b48-9fa8-8362e4fc47ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:57:e8:93:0c:18:d7:c5:b2:d8:9d:d5:c4:15:
                    4f:02:d4:7a:2e:84:f2:84:c6:87:af:17:e9:40:39:
                    f4:4f:04:25:be:35:26:dd:23:20:b2:0a:c8:ce:0f:
                    d4:14:40:e5:2a:e8:b7:a4:3e:03:f4:de:24:4d:30:
                    5e:66:e8:44:74:b9:f2:2d:58:1a:85:3c:f9:31:66:
                    24:ca:9a:6e:c3:18:5f:24:7e:ba:9c:ae:6e:af:23:
                    5f:b7:c0:d2:8b:51:5d:07:ce:0c:1b:ce:a1:5b:9e:
                    8f:4c:fe:dc:51:f0:ed:59:7d:bd:b6:f2:66:3e:97:
                    b3:74:02:78:7f:65:2a:1b:36:72:e0:14:c5:d6:89:
                    07:94:c1:9e:9d:76:16:59:31:3f:57:55:3c:d6:37:
                    e2:da:bd:bc:4b:31:48:f5:47:1a:1f:60:1f:2d:f9:
                    06:18:eb:4c:9a:82:bb:a9:bc:02:b5:5b:48:04:50:
                    c3:df:9f:8e:60:20:5c:a3:62:63:11:97:fc:0d:3d:
                    74:05:c0:97:94:2d:0b:9f:2e:14:b9:e8:ee:9c:11:
                    7b:fe:8a:86:00:1f:37:dd:7b:5d:17:42:dc:96:00:
                    31:e8:ac:2b:e5:25:99:b1:76:46:93:55:a2:09:28:
                    57:b4:7f:9f:d3:28:b8:64:7f:66:84:f4:6e:8f:2f:
                    8a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:73:6E:E2:05:2B:AD:D4:7E:01:2A:25:CC:44:7E:8F:26:0B:B1:44
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f000::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a5:f1:b0:8c:3d:4e:dc:f3:d1:0a:7e:a5:17:19:af:97:af:
         c1:97:81:fb:62:c1:b1:71:11:12:2c:a7:aa:da:d2:2f:2b:89:
         37:64:f5:9f:d2:57:21:f8:a5:e1:e8:e1:73:06:16:0e:21:43:
         80:d1:0e:11:72:da:7d:96:07:37:b8:39:19:fa:bf:9b:fb:f5:
         99:1b:15:a2:ff:1c:9b:9c:66:20:50:4b:71:41:f5:48:88:1c:
         21:06:64:6c:20:19:a6:85:50:75:31:17:8c:da:a5:18:9b:74:
         65:19:8b:c3:05:9c:2b:7a:51:0c:e1:8c:b2:68:e3:ae:d4:9b:
         53:5f:62:51:49:fc:57:87:7b:16:07:0f:ef:27:bf:49:fd:1d:
         cf:28:42:7a:7c:a1:48:78:af:3b:6f:10:d9:1e:ec:0a:96:b2:
         3e:f2:cc:4b:0d:95:a1:35:9f:48:03:a1:27:a7:d4:d5:8f:ed:
         2c:c4:40:7f:61:c6:ed:42:a1:d8:cd:33:3f:40:9b:9e:7c:3a:
         2d:12:f5:02:dc:72:eb:82:68:b8:cf:fb:4e:67:ab:4b:ec:d3:
         0f:c0:97:1c:91:2c:91:9a:ad:b0:b1:8c:d2:ec:24:a4:f4:d1:
         2f:cd:0c:31:b4:e7:3c:47:9e:9e:8b:e2:bf:13:31:9a:86:3e:
         61:9a:89:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----