Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9326b60c-910b-4c2d-acc0-4eaf54d2b059.cer
File:                     9326b60c-910b-4c2d-acc0-4eaf54d2b059.cer (raw, json)
Hash identifier:          AVu9RUrMaNmgVs3Ouf9mfynLu+54LEbVK71hAQHH/+E=
Subject key identifier:   75:6A:61:A9:35:56:52:A2:40:29:9C:C0:54:F9:CE:12:E5:07:38:25
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584593ADC03603BD9891CDA77000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9326b60c-910b-4c2d-acc0-4eaf54d2b059/9326b60c-910b-4c2d-acc0-4eaf54d2b059.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9326b60c-910b-4c2d-acc0-4eaf54d2b059/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 Apr 2024 15:19:59 +0000
Certificate not after:    Tue 21 Jul 2026 15:19:59 +0000
Subordinate resources:    IP: 2620:8c:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:ad:c0:36:03:bd:98:91:cd:a7:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr 17 15:19:59 2024 GMT
            Not After : Jul 21 15:19:59 2026 GMT
        Subject: CN=9326b60c-910b-4c2d-acc0-4eaf54d2b059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:25:32:03:37:0b:44:4a:a0:c3:57:72:95:e0:
                    17:e1:4a:2c:6a:8d:ed:aa:87:33:d2:df:d5:5c:c5:
                    8e:ed:d6:2f:81:dd:81:2b:2f:cc:4c:33:aa:2e:d5:
                    91:92:6e:a2:4d:2f:13:4e:e9:35:ea:9a:2f:59:3f:
                    31:f9:7d:08:5f:ec:47:6a:23:5d:16:d4:64:51:f0:
                    3a:71:48:6f:37:db:2b:c9:f4:52:89:c5:03:6c:6b:
                    5e:da:82:ca:1d:d9:71:5c:5d:b8:85:82:4c:b9:b6:
                    c7:ac:0a:58:00:a9:6c:f1:a9:de:23:a6:71:91:5d:
                    a2:1f:46:9d:ae:8b:3a:4a:ee:7c:ba:b5:d1:38:95:
                    63:06:3e:48:51:fc:64:c6:48:92:f9:a3:5e:ac:30:
                    24:a2:29:6f:ae:78:95:48:12:7f:0d:37:a6:f9:19:
                    ce:e2:20:62:7c:a1:5b:ce:a0:fe:96:6f:7f:a8:87:
                    1d:e6:ba:99:44:c4:77:e5:38:6b:82:4f:88:29:ed:
                    e5:0a:9d:6a:4a:77:15:e0:ce:ce:d4:c1:65:02:c7:
                    fb:e4:13:3e:f7:34:76:bf:19:d4:a1:fa:5a:ee:b9:
                    f1:17:92:af:c9:7d:11:41:c9:4b:8f:c5:25:ac:da:
                    0f:77:6a:9d:82:ea:85:52:3c:22:2e:16:09:44:cf:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6A:61:A9:35:56:52:A2:40:29:9C:C0:54:F9:CE:12:E5:07:38:25
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9326b60c-910b-4c2d-acc0-4eaf54d2b059/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9326b60c-910b-4c2d-acc0-4eaf54d2b059/9326b60c-910b-4c2d-acc0-4eaf54d2b059.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8c:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:1f:02:3a:d7:40:55:dd:79:80:ed:97:cf:f8:0d:13:a0:bd:
         de:ba:56:d1:ff:d2:d4:4d:be:1b:4a:32:6a:e5:aa:5b:2e:4f:
         5b:43:49:db:00:71:6c:b5:64:f5:8b:49:a5:76:ff:59:6a:13:
         2e:73:67:a7:8b:8d:cf:58:8f:c5:f7:69:cb:85:46:0c:03:ba:
         47:81:e4:d4:fa:75:46:4c:d2:83:14:69:b2:d0:32:eb:c8:3e:
         42:8c:e8:fb:f6:68:e5:62:0d:ce:26:9f:32:46:7b:ea:13:7a:
         59:52:c9:26:97:b9:6a:74:1c:7f:dc:b4:1f:2f:8d:ca:6b:a8:
         90:3f:da:d2:ff:ba:f6:1a:25:25:84:75:a0:0c:b2:35:4e:c4:
         6c:12:b9:c0:34:17:ad:78:77:2c:9a:5d:70:74:e7:71:e3:d1:
         bf:8e:d6:66:0e:49:ca:9c:b3:1e:61:ba:d1:22:b7:2d:5b:5f:
         d6:6d:01:07:ae:6e:74:4f:de:78:6d:0f:dd:04:2d:54:a8:7c:
         49:56:a9:56:aa:96:a1:91:62:34:07:88:bf:fe:cd:b9:db:06:
         b7:8a:16:ed:d6:11:e2:f0:99:ae:93:8a:58:3d:7f:cd:fe:4b:
         87:73:b8:0e:47:9a:29:a1:94:60:75:73:19:d5:86:f6:7f:c1:
         29:32:87:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----