Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f.cer
File:                     cc16c3db-6181-4312-8911-054e81ccea5f.cer (raw, json)
Hash identifier:          KMdltorkcUjYfSt9x3NRLaWLgTdKdt88QolGoFBrfak=
Subject key identifier:   D8:71:54:FE:5A:59:38:81:AB:1B:4C:37:A0:FD:21:97:3C:E9:2D:48
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285843924F35326C77069EB03F18C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 16 Oct 2023 17:59:49 +0000
Certificate not after:    Sun 18 Jan 2026 18:59:49 +0000
Subordinate resources:    IP: 2620:101::/46
                          IP: 2620:10d:1000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:92:4f:35:32:6c:77:06:9e:b0:3f:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 16 17:59:49 2023 GMT
            Not After : Jan 18 18:59:49 2026 GMT
        Subject: CN=cc16c3db-6181-4312-8911-054e81ccea5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f0:2a:d9:64:1e:fc:91:3b:4c:f2:10:ea:69:
                    49:f9:2b:41:d3:eb:21:98:48:fc:18:50:a3:31:28:
                    b1:22:5e:6e:57:23:79:35:82:96:d6:0c:74:da:e6:
                    dd:38:75:f5:a1:b0:d5:3d:6e:d9:32:5a:05:34:c0:
                    cc:ef:72:c0:25:1c:72:54:33:cb:97:0a:28:22:42:
                    e7:60:5f:a8:9d:14:c9:6c:97:6d:7e:4c:bc:ee:e3:
                    28:14:6f:f0:97:3c:b5:40:0f:57:cb:b5:da:76:90:
                    75:26:ee:f1:10:44:ed:a2:b3:a9:55:1a:b3:cb:95:
                    f0:a5:a1:c8:6f:32:8b:6a:8e:78:da:dd:63:28:e8:
                    f6:22:5a:5b:ca:d9:83:2e:01:b2:12:e6:d7:eb:a4:
                    61:94:af:0a:65:f6:dc:47:f7:06:f7:42:16:85:39:
                    33:66:18:35:8b:3f:6d:49:d0:24:f2:0d:ac:aa:78:
                    71:78:16:f4:f2:e7:78:61:f4:ec:dd:f4:8e:5b:97:
                    48:87:28:82:5a:a0:af:b6:40:e4:c2:23:33:70:76:
                    02:d3:7e:09:36:a3:24:74:1f:1f:5a:ca:5d:29:c9:
                    ee:58:65:ab:0d:6e:a4:e3:ab:7c:27:e5:14:2a:f0:
                    49:72:03:dd:29:62:84:87:b8:12:b6:aa:da:ef:93:
                    63:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:71:54:FE:5A:59:38:81:AB:1B:4C:37:A0:FD:21:97:3C:E9:2D:48
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:101::/46
                  2620:10d:1000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:1e:d4:e9:28:bf:f0:ac:69:3b:8f:1e:a3:42:31:fa:e8:d0:
         ca:e9:98:36:ac:62:4e:5c:b6:94:fc:7b:fb:df:36:a7:14:69:
         1d:e0:59:f6:98:53:cb:61:38:e5:7e:dd:d8:47:56:ce:86:67:
         36:a2:4b:f5:19:d0:6b:2d:3f:bb:15:55:9b:7a:18:69:1f:a4:
         6e:af:f0:b1:02:b7:cd:85:28:fb:a3:14:56:0c:be:de:42:4b:
         e4:01:9f:26:b2:1f:95:ed:47:f6:30:d8:e9:e1:74:63:95:f0:
         41:39:87:c8:9c:8a:dd:55:20:a3:73:32:5f:73:c8:2c:aa:16:
         b3:50:5f:39:63:68:1e:d3:9b:9a:38:25:0a:a6:0b:fc:ea:fc:
         16:a3:a8:6b:cd:37:1d:b3:b4:f3:b5:43:46:72:c3:3d:9d:a1:
         f4:69:2b:55:7e:82:18:7c:81:43:eb:ea:e8:81:20:83:16:93:
         31:3a:10:ba:7d:07:cb:fa:e7:05:bf:b0:38:6e:30:06:df:bb:
         60:04:20:16:b0:2b:70:cd:19:68:b6:14:be:9f:71:0c:df:ae:
         56:6d:86:6e:26:a7:42:be:dc:a0:d5:33:26:e3:68:1b:0b:e5:
         d3:5a:9a:90:c1:91:b7:f1:b3:bb:c4:5b:d8:b3:0d:24:ae:bf:
         1a:fc:b1:69
-----BEGIN CERTIFICATE-----
MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEOSTzUybHcGnrA/GMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTIzMTAxNjE3NTk0OVoXDTI2MDExODE4NTk0OVowLzEtMCsGA1UEAxMk
Y2MxNmMzZGItNjE4MS00MzEyLTg5MTEtMDU0ZTgxY2NlYTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvAq2WQe/JE7TPIQ6mlJ+StB0+shmEj8GFCj
MSixIl5uVyN5NYKW1gx02ubdOHX1obDVPW7ZMloFNMDM73LAJRxyVDPLlwooIkLn
YF+onRTJbJdtfky87uMoFG/wlzy1QA9Xy7XadpB1Ju7xEETtorOpVRqzy5XwpaHI
bzKLao542t1jKOj2IlpbytmDLgGyEubX66RhlK8KZfbcR/cG90IWhTkzZhg1iz9t
SdAk8g2sqnhxeBb08ud4YfTs3fSOW5dIhyiCWqCvtkDkwiMzcHYC034JNqMkdB8f
WspdKcnuWGWrDW6k46t8J+UUKvBJcgPdKWKEh7gStqra75NjdQIDAQABo4IECzCC
BAcwHQYDVR0OBBYEFNhxVP5aWTiBqxtMN6D9IZc86S1IMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j
YzE2YzNkYi02MTgxLTQzMTItODkxMS0wNTRlODFjY2VhNWYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2NjMTZjM2RiLTYxODEtNDMxMi04
OTExLTA1NGU4MWNjZWE1Zi9jYzE2YzNkYi02MTgxLTQzMTItODkxMS0wNTRlODFj
Y2VhNWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwKwYIKwYBBQUH
AQcBAf8EHDAaMBgEAgACMBIDBwImIAEBAAADBwQmIAENEAAwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACR7U
6Si/8KxpO48eo0Ix+ujQyumYNqxiTly2lPx7+982pxRpHeBZ9phTy2E45X7d2EdW
zoZnNqJL9RnQay0/uxVVm3oYaR+kbq/wsQK3zYUo+6MUVgy+3kJL5AGfJrIfle1H
9jDY6eF0Y5XwQTmHyJyK3VUgo3MyX3PILKoWs1BfOWNoHtObmjglCqYL/Or8FqOo
a803HbO087VDRnLDPZ2h9GkrVX6CGHyBQ+vq6IEggxaTMToQun0Hy/rnBb+wOG4w
Bt+7YAQgFrArcM0ZaLYUvp9xDN+uVm2GbianQr7coNUzJuNoGwvl01qakMGRt/Gz
u8Rb2LMNJK6/GvyxaQ==
-----END CERTIFICATE-----