Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer
File:                     052fe149-2c89-4322-a901-3a7f35c17350.cer (raw, json)
Hash identifier:          qrWKu9i7i+lK/phpOkiQuC9gbp32X/P9NPpCewVT8FE=
Subject key identifier:   50:20:97:10:96:AD:7B:A9:07:D8:8D:4A:9C:90:3A:6E:F0:43:B9:57
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858461D0B18A6FE8FCAE11B0D74DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 05 Jun 2024 20:13:49 +0000
Certificate not after:    Tue 08 Sep 2026 20:13:49 +0000
Subordinate resources:    IP: 192.111.123.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1d:0b:18:a6:fe:8f:ca:e1:1b:0d:74:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun  5 20:13:49 2024 GMT
            Not After : Sep  8 20:13:49 2026 GMT
        Subject: CN=052fe149-2c89-4322-a901-3a7f35c17350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:73:d4:b6:38:75:80:d0:cb:83:c5:d4:5e:
                    e6:cd:17:6d:91:57:15:6d:e1:de:8f:80:e8:90:79:
                    79:61:a6:e8:38:53:02:b7:d8:7c:80:78:e7:33:af:
                    08:5c:00:8d:db:b7:4d:c9:f3:58:00:cc:44:a1:40:
                    bb:c3:3b:33:9a:c3:9c:2c:b0:d3:90:32:a7:62:84:
                    d8:4b:3d:83:57:dc:e8:54:39:46:0f:13:ad:29:12:
                    1e:d3:8a:e3:b2:f3:16:99:16:62:4c:9e:1b:97:ef:
                    31:c9:03:7b:cf:d1:67:1d:5f:75:72:10:9d:81:22:
                    78:02:23:bf:04:b8:d1:d2:3e:6e:fa:0c:87:e0:ca:
                    50:e2:52:be:44:74:d3:59:68:00:11:9c:25:1e:ce:
                    1f:9d:ee:fb:e0:57:66:2c:7b:db:4d:60:5f:9f:d0:
                    54:d2:e4:1a:93:98:ae:15:a0:21:85:3e:81:24:18:
                    44:b2:c5:f2:42:ad:9f:cc:99:65:0c:a0:07:dc:80:
                    4c:2c:b3:6f:45:ae:d6:91:8d:0e:13:98:70:48:08:
                    95:19:6e:6c:3b:3a:70:0d:f4:71:77:75:db:9b:68:
                    37:af:48:1a:33:f0:6b:55:8d:ff:fd:e3:b3:d6:ca:
                    f5:7e:38:48:77:b2:76:50:5f:88:82:75:c5:d2:f2:
                    40:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:20:97:10:96:AD:7B:A9:07:D8:8D:4A:9C:90:3A:6E:F0:43:B9:57
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:54:28:7f:62:52:20:13:79:45:c9:ac:9e:1b:eb:94:2f:b9:
         51:e2:2b:9b:4e:34:43:ab:82:8e:ba:b7:a4:43:b6:5c:81:3e:
         05:23:9f:9d:dd:a4:62:6e:90:fd:2b:7a:1d:ba:e6:01:1d:02:
         c9:7c:22:ac:1a:41:5c:d3:94:4c:48:54:53:86:48:dc:d8:b7:
         07:e6:a1:b3:98:77:20:69:4d:77:f6:07:1c:cf:0f:59:eb:79:
         98:59:7a:68:8f:2e:d7:04:b6:37:7b:26:e4:7c:72:43:ef:ae:
         64:2c:aa:0a:5a:03:80:64:11:62:7c:43:4c:34:90:e5:ca:bb:
         ea:08:14:b7:07:42:55:c3:45:63:4d:a6:68:d1:0c:b3:76:24:
         69:ed:22:f7:d5:24:46:9a:c7:d5:04:ef:a8:70:9d:0e:11:06:
         23:5a:1d:47:ba:14:b5:7b:36:6c:29:0b:8b:5b:ba:81:17:a4:
         9c:75:4e:29:06:c5:38:43:fd:78:cc:94:93:6b:b7:9c:0b:1f:
         df:b9:e1:52:a3:27:62:45:81:49:54:49:04:26:5b:6f:a2:27:
         43:b3:28:37:11:bf:83:83:a5:5d:bc:52:ac:d1:26:f5:7c:be:
         6f:ce:04:6e:c8:bb:dd:94:91:23:e1:5b:67:dd:91:9b:06:92:
         40:57:40:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----