Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160.cer
File:                     1e83a5f9-fa06-43d8-bc5f-e73b67992160.cer (raw, json)
Hash identifier:          kNE3PX96SRff1PoG5E4tf4YMJN/wrqbGzUgsFGUncms=
Subject key identifier:   43:FA:C3:B7:1D:27:C1:94:C9:FC:76:50:A8:E1:97:99:C8:E3:3A:3C
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E48341FDDC9F91AC69BBFE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/1e83a5f9-fa06-43d8-bc5f-e73b67992160.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Mon 31 Mar 2025 19:06:39 +0000
Subordinate resources:    IP: 2604:3e00::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:41:fd:dc:9f:91:ac:69:bb:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Mar 31 19:06:39 2025 GMT
        Subject: CN=1e83a5f9-fa06-43d8-bc5f-e73b67992160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e2:5f:bf:f7:f2:42:66:f9:6d:95:ff:06:49:
                    33:8e:a1:25:a8:c2:b9:4a:c7:19:0d:e9:f3:65:8f:
                    09:81:89:f7:d3:eb:48:2a:dc:56:c0:19:a1:7c:3a:
                    a1:1c:8c:67:eb:13:b7:c7:91:58:1b:7b:68:3c:9a:
                    f3:e3:be:b1:92:f3:e9:17:01:ac:59:93:49:18:84:
                    80:ef:7d:f8:c9:1b:1b:9a:e9:b1:5a:de:6d:af:2c:
                    57:82:54:08:16:a3:a5:5f:6c:37:06:29:b9:20:03:
                    3a:80:c6:74:13:a4:18:fa:1a:8f:4c:45:ae:a9:fa:
                    8d:2e:ab:2e:44:46:25:6b:8b:83:c5:74:94:b4:9c:
                    81:80:b2:67:cc:67:1e:ca:d6:7c:73:2e:47:a4:df:
                    21:6b:f7:b6:52:26:eb:42:23:44:ac:36:4a:7c:3b:
                    c3:ac:cb:0a:1b:b2:a6:47:54:7f:26:37:10:d9:1b:
                    c5:cd:91:62:a3:9b:28:8f:d8:99:40:49:89:ff:a9:
                    69:be:1f:ff:09:e8:7b:61:ab:b0:89:a7:29:07:6e:
                    42:3b:03:56:3a:d2:fe:6e:da:ab:c0:3d:a2:c1:05:
                    4f:93:a1:c1:70:6f:7f:ce:0c:a3:a0:ce:1b:5b:30:
                    40:c7:5e:96:9f:1e:a5:a1:06:ce:3e:7c:fc:cb:ce:
                    36:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FA:C3:B7:1D:27:C1:94:C9:FC:76:50:A8:E1:97:99:C8:E3:3A:3C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/1e83a5f9-fa06-43d8-bc5f-e73b67992160.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:b9:84:07:8a:a9:53:34:ed:e1:2a:99:3d:db:33:00:0a:34:
         e8:11:0f:0c:e2:04:00:99:ea:06:c7:18:d0:7f:5c:12:1d:76:
         32:d7:98:e1:49:42:cc:f3:5a:b0:04:a2:46:3f:24:7f:01:77:
         59:3c:a3:fb:fc:b1:f8:66:5c:4e:ef:24:7c:52:b8:bc:d6:71:
         36:21:98:ce:c4:17:13:a0:80:d3:a8:68:32:a3:b1:26:52:b0:
         4e:c2:30:b2:b2:5e:1d:d8:71:fa:de:7f:a7:2a:54:20:69:18:
         18:ee:2e:a5:05:29:f0:eb:b9:0e:41:8a:66:dd:8f:a3:51:01:
         9b:12:9f:75:99:ec:75:44:86:8b:95:1e:fe:3f:94:3c:24:7c:
         bb:56:bd:eb:3e:e6:76:11:b1:03:75:07:7a:a1:1d:32:0c:1c:
         1b:96:ff:ec:aa:eb:41:bc:3e:33:32:d7:d8:02:48:84:92:50:
         b3:d0:26:50:d5:a8:83:34:3d:37:29:fc:b3:ed:c1:20:9d:97:
         9c:f7:91:cc:b0:84:dc:c5:df:14:e2:0c:b9:d0:3e:ea:94:33:
         16:e5:19:33:e0:e5:6a:04:0c:8d:15:89:48:08:75:71:79:bc:
         ad:63:80:13:c9:c4:02:e5:b8:2e:25:00:26:a7:c8:6c:63:67:
         66:8b:cc:d7
-----BEGIN CERTIFICATE-----
MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEHkg0H93J+RrGm7/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDMzMTE5MDYzOVowLzEtMCsGA1UEAxMk
MWU4M2E1ZjktZmEwNi00M2Q4LWJjNWYtZTczYjY3OTkyMTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeJfv/fyQmb5bZX/BkkzjqElqMK5SscZDenz
ZY8JgYn30+tIKtxWwBmhfDqhHIxn6xO3x5FYG3toPJrz476xkvPpFwGsWZNJGISA
7334yRsbmumxWt5tryxXglQIFqOlX2w3Bim5IAM6gMZ0E6QY+hqPTEWuqfqNLqsu
REYla4uDxXSUtJyBgLJnzGceytZ8cy5HpN8ha/e2UibrQiNErDZKfDvDrMsKG7Km
R1R/JjcQ2RvFzZFio5soj9iZQEmJ/6lpvh//Ceh7YauwiacpB25COwNWOtL+btqr
wD2iwQVPk6HBcG9/zgyjoM4bWzBAx16Wnx6loQbOPnz8y842vQIDAQABo4IEADCC
A/wwHQYDVR0OBBYEFEP6w7cdJ8GUyfx2UKjhl5nI4zo8MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8x
ZTgzYTVmOS1mYTA2LTQzZDgtYmM1Zi1lNzNiNjc5OTIxNjAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFlODNhNWY5LWZhMDYtNDNkOC1i
YzVmLWU3M2I2Nzk5MjE2MC8xZTgzYTVmOS1mYTA2LTQzZDgtYmM1Zi1lNzNiNjc5
OTIxNjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAmBD4AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKC5hAeKqVM07eEqmT3b
MwAKNOgRDwziBACZ6gbHGNB/XBIddjLXmOFJQszzWrAEokY/JH8Bd1k8o/v8sfhm
XE7vJHxSuLzWcTYhmM7EFxOggNOoaDKjsSZSsE7CMLKyXh3Ycfref6cqVCBpGBju
LqUFKfDruQ5Bimbdj6NRAZsSn3WZ7HVEhouVHv4/lDwkfLtWves+5nYRsQN1B3qh
HTIMHBuW/+yq60G8PjMy19gCSISSULPQJlDVqIM0PTcp/LPtwSCdl5z3kcywhNzF
3xTiDLnQPuqUMxblGTPg5WoEDI0ViUgIdXF5vK1jgBPJxALluC4lACanyGxjZ2aL
zNc=
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:40:58 2024 by rpki-client on console-fra.rpki-client.org