Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer
File:                     06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer (raw, json)
Hash identifier:          L4gQ8QpXbLlwC7s3BOgQ4WkphKtVBZ5bPililgB8UiY=
Subject key identifier:   11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584591FBA57702D63361C7720020
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 Apr 2024 00:45:19 +0000
Certificate not after:    Tue 21 Jul 2026 00:45:19 +0000
Subordinate resources:    AS: 36263
                          IP: 2606:5cc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:91:fb:a5:77:02:d6:33:61:c7:72:00:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Apr 17 00:45:19 2024 GMT
            Not After : Jul 21 00:45:19 2026 GMT
        Subject: CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:5f:62:ba:a0:7c:0e:54:8f:f1:8e:30:f1:
                    a7:f5:22:f0:a5:06:e2:49:b6:ad:e7:68:19:57:a0:
                    08:2c:21:2a:f0:ae:90:e9:bd:23:33:de:5a:4f:f2:
                    45:38:d8:86:0c:aa:c2:37:62:34:f4:d5:de:da:9b:
                    2f:85:97:5a:d6:ea:8a:18:4d:55:eb:b1:ee:4e:79:
                    9c:da:22:41:6b:69:be:80:e1:18:da:23:e9:2a:7f:
                    88:1e:c8:d6:d3:5b:92:21:60:24:61:10:68:d0:b2:
                    1e:d9:b7:08:5c:9b:bf:48:d1:45:e7:38:3d:90:74:
                    46:0b:02:51:11:6c:60:a5:73:49:67:6f:7f:e6:3b:
                    60:52:08:e7:76:10:95:87:a0:72:99:eb:49:a7:76:
                    77:69:fe:ff:c8:fd:9f:d3:6b:76:9b:26:37:c8:c5:
                    e2:39:db:5f:52:c5:71:a4:77:8a:f4:99:b3:25:0a:
                    bc:fc:9c:07:7d:30:a1:8f:43:ad:82:f4:eb:a4:07:
                    fa:1d:0f:a9:2e:e9:3e:e6:67:e2:3a:91:d8:9f:09:
                    29:2e:ff:26:fb:44:2f:1f:a8:11:6b:7f:26:b4:11:
                    4a:67:5c:04:84:2e:ed:01:d9:b3:73:f1:64:56:6c:
                    3d:5d:78:e3:c8:23:51:0a:88:53:df:2d:f2:3c:ab:
                    19:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5cc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36263

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c2:26:61:c7:0e:9c:55:78:b9:0c:cd:45:35:2c:2a:56:9c:
         58:1a:38:47:75:19:37:cc:ef:bf:08:6f:64:a4:6c:90:53:62:
         7a:d4:b6:b1:9b:ed:04:d3:d7:53:b4:9b:9b:32:d1:8f:a3:cf:
         f9:78:9f:1b:8a:88:47:6b:be:b7:ee:f1:2e:99:82:e4:bf:22:
         e9:bd:17:66:ff:e8:29:ed:34:af:76:eb:c2:95:89:be:19:b1:
         4f:4e:14:d7:8b:42:df:3f:b4:28:58:1a:49:9e:cc:ef:e2:df:
         fa:22:6b:0f:a8:f4:27:4a:65:82:47:d2:0c:ba:60:a9:54:64:
         cb:3e:d1:c8:d2:ff:f6:3d:0a:36:bb:82:86:5b:1f:e9:9e:03:
         ee:57:65:3c:a3:e9:80:d2:4b:ef:83:aa:fa:6d:83:08:06:38:
         65:fc:a2:48:b1:6c:1a:9d:0b:f6:a5:4f:2b:7d:d3:c6:34:8b:
         4d:91:0c:d9:9e:6f:5d:d4:cf:43:18:96:ee:af:23:b4:0f:a4:
         ad:ff:d9:ef:ea:5a:c8:49:cf:61:da:7f:70:99:a2:df:06:df:
         d9:5c:ae:1f:1c:78:1c:e3:dd:a8:18:9d:2b:23:ed:f9:84:d4:
         1f:c6:33:dc:20:84:c2:15:32:29:4f:6a:ed:61:21:f7:75:c5:
         b3:68:f4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----