Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer
File:                     f0dba087-0567-4455-9983-ac2ca8102281.cer (raw, json)
Hash identifier:          PYikbFK2Lnws9ePVv2IekbWZqnle/1y2vfxp/SwmdfU=
Subject key identifier:   72:DC:68:AE:CA:BE:D0:04:AF:54:CF:CC:3E:73:0D:49:FB:BD:61:A9
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285841E75F647B07D3A8490B7BA980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 16 May 2023 19:42:15 +0000
Certificate not after:    Mon 18 Aug 2025 19:42:15 +0000
Subordinate resources:    IP: 2602:fa87::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e7:5f:64:7b:07:d3:a8:49:0b:7b:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 16 19:42:15 2023 GMT
            Not After : Aug 18 19:42:15 2025 GMT
        Subject: CN=f0dba087-0567-4455-9983-ac2ca8102281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6f:5a:58:3a:74:6c:a4:55:3b:e9:7e:58:d9:
                    93:13:22:51:1b:3f:fe:3d:ba:99:0e:8b:45:59:fb:
                    ce:ad:76:f6:0e:07:c1:a0:ff:24:8f:cb:86:d3:cd:
                    4b:e0:c5:a5:c5:ae:d9:52:c0:fd:89:1e:98:3c:f8:
                    c5:76:be:0f:84:b8:a1:67:56:4e:45:da:62:0c:48:
                    b6:34:2e:56:3c:06:f7:37:35:54:5a:53:a4:f9:0e:
                    a1:10:2f:fa:aa:77:13:b5:db:7b:b2:40:e6:bd:9a:
                    16:53:f4:9a:2c:30:da:cb:bf:81:f6:d5:06:cc:ae:
                    84:62:04:43:e0:6c:96:04:61:15:ba:13:1d:1d:22:
                    6b:93:0f:59:48:fe:de:31:24:25:e7:b9:06:ea:72:
                    8f:7d:87:c3:c0:cd:95:8f:9f:17:99:fd:3d:e4:a9:
                    a4:1a:97:67:24:e9:9c:a7:fa:1c:b4:74:f9:4f:3a:
                    95:a8:7a:f8:3d:a6:4e:ea:b8:24:d4:1f:10:6b:22:
                    f5:89:66:ab:0c:b1:db:db:2f:79:ae:7d:ed:4e:80:
                    6d:84:91:de:01:7f:fc:30:05:40:bf:59:a6:02:4b:
                    94:49:76:78:f5:5d:e5:93:ec:37:84:09:c3:42:f3:
                    ed:b3:9b:49:94:ef:35:69:a6:f6:c7:da:6c:bf:4d:
                    63:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DC:68:AE:CA:BE:D0:04:AF:54:CF:CC:3E:73:0D:49:FB:BD:61:A9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa87::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:8f:12:73:1c:1b:8c:52:11:75:30:bc:a4:07:4a:0c:44:25:
         91:b7:7d:82:a9:01:cc:8c:14:7f:02:65:58:bf:87:91:71:77:
         ba:dc:3b:b0:19:94:6f:83:9b:d0:51:b3:06:7b:da:9f:59:c9:
         1e:f8:e7:76:71:bc:84:13:2b:c0:21:9e:d7:0b:14:c2:fb:73:
         89:21:3d:4d:37:9b:74:78:65:e1:ca:37:cd:e9:47:82:1c:e8:
         2d:bb:44:bb:5f:64:77:97:48:e8:65:1e:a0:6a:15:53:46:c9:
         52:40:6e:eb:40:12:55:8d:b7:c8:e7:1a:35:f1:c0:f8:6c:58:
         7f:c0:3f:d7:eb:c1:48:42:4b:3b:3e:d4:02:ef:bf:69:cc:5e:
         40:cf:fd:b7:fc:18:26:81:ae:b1:22:e6:73:18:bf:65:ae:05:
         d6:67:84:63:fd:a6:b6:f5:e2:13:c8:0a:89:39:1d:df:3a:e6:
         91:43:98:5c:16:25:d7:df:10:a2:b0:f6:5b:9b:d3:ff:ba:bc:
         89:5b:9e:db:bb:ec:98:9e:26:d3:b8:9d:91:fc:a5:92:80:4c:
         44:19:5d:ef:83:28:06:e0:eb:a9:db:3d:4f:3d:da:e6:23:8d:
         9e:de:90:30:e9:2d:ed:76:e1:44:d4:c3:a5:2c:50:83:07:8e:
         eb:92:4f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----