Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.cer
File:                     3e5a4c55-417a-4d58-b604-09c3cc10a5ef.cer (raw, json)
Hash identifier:          vTVSS+XkixVVULfvA0cIOjGajxNhwyox3rmmo7s3P6Q=
Subject key identifier:   A3:E5:0B:36:A4:C1:EA:2D:86:7F:C4:88:88:08:44:45:FC:2C:32:2A
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858434C5FC97926B00C7299327E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 21 Sep 2023 16:46:38 +0000
Certificate not after:    Wed 24 Dec 2025 17:46:38 +0000
Subordinate resources:    IP: 2607:6a40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:4c:5f:c9:79:26:b0:0c:72:99:32:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 21 16:46:38 2023 GMT
            Not After : Dec 24 17:46:38 2025 GMT
        Subject: CN=3e5a4c55-417a-4d58-b604-09c3cc10a5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:93:96:92:59:b8:ed:da:75:a8:66:e3:34:6f:
                    96:f3:19:fb:b6:76:ef:2e:68:ae:dc:1f:3e:c4:2d:
                    52:15:b7:7f:2a:bc:5c:70:bf:11:52:c1:9d:04:38:
                    03:10:9c:d8:43:79:b0:fe:61:b1:c0:fa:4b:59:74:
                    7b:68:e4:a4:c7:ac:f5:d1:5b:8a:a2:98:2f:48:b3:
                    3a:2d:50:6d:40:32:93:4a:4b:47:55:31:b7:e7:74:
                    62:66:68:c3:e8:a4:d8:0b:05:a9:da:9f:34:1c:29:
                    c1:33:ef:cd:60:45:59:c9:cb:c4:bd:d2:37:24:b3:
                    3b:14:1f:55:d6:c9:3a:c0:49:aa:62:d1:d2:f3:1e:
                    bb:d3:46:bc:d4:94:3a:b3:31:7d:c8:cc:76:37:75:
                    35:44:dc:2f:ec:4a:15:d8:8d:92:dc:95:84:cf:1f:
                    31:29:33:6e:47:bf:ec:79:34:85:39:f2:12:75:ad:
                    bd:5c:cd:86:6b:c8:a4:a9:e0:7d:0a:8b:78:f8:01:
                    5f:c5:2e:e7:f9:20:a3:4c:26:18:57:fa:d2:79:d3:
                    fa:e2:d7:14:58:a0:f5:42:c8:30:5c:e6:5e:6d:cd:
                    3e:cd:26:a6:6a:f1:0b:07:59:a1:eb:01:05:2c:89:
                    1b:63:6d:25:04:14:92:15:e4:97:a2:c7:4a:e1:75:
                    26:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E5:0B:36:A4:C1:EA:2D:86:7F:C4:88:88:08:44:45:FC:2C:32:2A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:74:94:7c:90:50:7c:6d:11:f6:9b:a3:54:06:15:be:8b:a8:
         b4:27:31:70:fa:94:a0:53:6c:1a:7f:a2:bc:a0:21:fe:83:ac:
         74:a7:1a:41:d9:20:95:d1:57:98:49:5d:a0:5e:f8:63:9d:e6:
         fc:d7:2c:a1:28:4c:29:eb:5a:90:36:bf:1e:1f:f6:6d:98:3f:
         c7:b3:ad:b2:d9:f8:66:a0:96:ec:73:e0:78:48:61:fb:a2:39:
         ac:92:03:b0:db:8a:0b:96:1a:53:3b:63:97:f6:6c:b7:dd:a3:
         29:7b:8c:29:36:21:dd:bd:90:11:8a:c6:dd:f3:9e:8a:93:8c:
         96:b1:d9:0f:1d:73:74:34:c0:5d:fd:0b:ad:88:77:ad:1c:3d:
         50:80:a8:67:4f:6a:02:57:6a:00:99:58:4e:40:07:da:e3:47:
         85:21:d9:db:05:6a:07:66:cb:df:fb:a3:6e:4d:e4:71:28:48:
         c9:f4:10:3b:6c:a5:66:70:8d:4c:46:cf:8a:58:f2:f3:8d:4a:
         75:46:53:df:47:f9:64:36:1c:8d:eb:05:79:98:44:1a:cf:e4:
         ff:6d:ea:31:31:f9:51:1c:56:a3:3c:19:f3:e0:f7:10:28:eb:
         f6:87:4c:03:f1:5c:7f:ca:48:a1:99:cc:3b:f7:f5:79:fd:20:
         8c:24:83:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----