Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer
File:                     c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer (raw, json)
Hash identifier:          vz1+OXMgnCcsemFPIiqaIIQ5qnGMz66ZXH9Hm0C6jlQ=
Subject key identifier:   3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858453045B5D58E31F71533FD3DC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 13 Mar 2024 00:45:20 +0000
Certificate not after:    Tue 16 Jun 2026 00:45:20 +0000
Subordinate resources:    IP: 2606:2b00::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:45:b5:d5:8e:31:f7:15:33:fd:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Mar 13 00:45:20 2024 GMT
            Not After : Jun 16 00:45:20 2026 GMT
        Subject: CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7f:77:cb:e0:fc:b1:b8:fd:32:90:07:91:3e:
                    4f:97:c2:90:c4:32:69:4f:c6:bf:07:6f:cf:3e:a6:
                    72:c6:54:37:a2:e2:2c:8a:38:1a:86:a9:46:e5:91:
                    36:a7:65:4a:7f:18:19:88:d5:72:66:35:44:17:6e:
                    35:a5:2d:89:6f:40:7b:d0:5e:7d:dc:c3:94:73:8f:
                    f2:93:c9:d2:15:79:09:a0:ff:b6:4d:ec:16:4c:f7:
                    68:1c:53:9f:9d:93:ed:83:54:5f:2f:c2:d4:23:d8:
                    62:0d:c5:fa:e6:2d:0a:d4:6d:8a:51:34:74:c5:e4:
                    08:0f:e9:ca:f9:b3:d6:0a:52:7f:e5:fe:90:eb:2c:
                    d2:e3:ef:79:70:9f:65:0f:a3:34:02:9a:74:43:d0:
                    af:92:8e:4b:bf:2c:fe:5a:9c:fd:b0:f0:cc:72:b4:
                    4f:2a:d2:ca:02:73:56:36:51:25:98:ff:34:a7:74:
                    7c:c5:d8:ba:b0:2d:07:98:0e:af:f3:ed:04:6d:7d:
                    1b:13:31:9b:8c:17:9e:96:5c:e5:bf:d4:59:c4:35:
                    ff:17:00:1b:c2:b7:5c:4e:a3:be:90:10:82:db:03:
                    75:d3:25:97:24:64:88:13:11:99:2d:1d:8c:34:e9:
                    f7:01:4b:06:b2:8d:8d:40:0b:9b:a8:de:66:49:3b:
                    a9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2b00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:63:f4:1e:8e:b7:8d:ea:ef:76:5d:f9:7e:a8:6d:9a:a0:4b:
         41:9c:ef:2a:a7:32:30:8e:2e:23:0e:ee:39:e1:23:07:51:65:
         22:01:18:9e:f6:34:68:d6:f6:f4:41:fc:ba:e1:0c:65:de:28:
         b5:10:e6:9b:3a:11:43:5e:18:e4:40:96:6f:e1:df:fd:e4:b8:
         37:ec:26:19:26:4a:e3:e3:f3:c1:a4:c1:9e:ae:dc:a2:30:62:
         b6:88:1e:dc:9b:28:36:9d:9e:12:79:b0:60:21:f2:77:35:58:
         50:5a:75:1d:45:42:19:a3:5a:83:9f:73:ad:e0:43:1a:0f:17:
         bb:6f:57:9c:9a:84:83:18:de:7a:87:38:ff:f5:40:37:50:95:
         86:95:7a:2a:58:ee:2e:86:c3:8d:2a:33:9b:b8:8d:3c:81:72:
         03:69:c1:3b:60:39:d7:35:a9:29:8e:73:7c:17:69:fc:0e:58:
         cd:9c:0d:56:f9:3b:95:d4:12:dc:22:60:10:1f:da:df:50:57:
         cc:1b:c6:94:3b:03:21:47:1e:6b:8f:a4:85:c8:3b:90:69:19:
         a9:12:d5:7e:61:ce:3b:3e:d2:08:b4:dc:24:27:41:b3:20:a9:
         6e:10:08:34:f3:66:2e:61:9f:99:bb:f9:e9:43:fc:9c:8e:e2:
         be:ea:cc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----