Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer
File:                     08e3f98b-676d-49af-91dd-964a1e63df3b.cer (raw, json)
Hash identifier:          JCYKmdC/W7WQBLeDDE7R/OtsLjhAThso8ukB/KQGzdg=
Subject key identifier:   FB:EC:CD:B3:66:98:39:A6:94:58:CD:4D:D2:2B:01:99:FE:8A:B1:0F
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847010ED30E2D092928BB5CADC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 26 Aug 2024 12:25:38 +0000
Certificate not after:    Sun 29 Nov 2026 13:25:38 +0000
Subordinate resources:    IP: 2602:faa7::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:0e:d3:0e:2d:09:29:28:bb:5c:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 26 12:25:38 2024 GMT
            Not After : Nov 29 13:25:38 2026 GMT
        Subject: CN=08e3f98b-676d-49af-91dd-964a1e63df3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7a:a0:27:96:57:2c:04:9e:ba:51:fa:23:f7:
                    14:c1:49:61:14:81:d9:0f:cb:77:23:89:5f:72:80:
                    3d:e6:1a:3f:2e:80:75:c3:e8:ee:35:0a:f6:b3:7a:
                    07:01:76:b7:40:ef:dc:d3:41:38:64:9c:87:93:5e:
                    02:d4:e4:bf:06:11:95:2b:62:40:ef:f3:e5:ba:d8:
                    d5:f8:fc:43:c4:0b:27:86:96:30:dd:ac:3d:89:0a:
                    02:91:da:ba:a8:3a:db:94:00:9c:1f:eb:bb:3f:66:
                    b4:85:81:a5:1b:e7:1e:30:94:f8:9e:2b:f3:2a:05:
                    1a:d6:f7:80:54:97:97:20:1d:ea:f9:6c:2a:29:8e:
                    62:7f:29:9a:09:62:c9:4b:8b:35:7a:42:c7:5b:7e:
                    ff:92:19:bb:73:5d:92:0d:16:f4:1d:35:17:6b:04:
                    dc:06:d6:3f:1a:10:e7:d4:cd:91:68:da:87:20:84:
                    41:d0:3b:07:56:1c:d8:7e:65:f0:9c:58:5e:79:d4:
                    0f:0d:87:83:2f:30:df:5d:24:36:1e:45:05:c9:29:
                    06:e9:d1:bd:d8:52:ce:bc:22:64:0b:d1:d4:a7:de:
                    22:6a:a6:15:76:c6:c3:2c:4a:ad:f4:ba:7d:42:82:
                    7d:7a:da:01:58:a9:10:a8:83:36:4d:57:56:c6:2d:
                    d0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EC:CD:B3:66:98:39:A6:94:58:CD:4D:D2:2B:01:99:FE:8A:B1:0F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:8c:33:5b:59:3c:44:eb:24:1d:38:2a:92:61:1c:7c:ff:dc:
         d5:b3:28:09:7a:c8:17:1a:9b:07:c4:29:3b:7c:a0:69:07:64:
         63:55:ba:fa:86:38:54:bd:bd:7b:9d:2d:38:c7:e6:18:ca:81:
         2f:eb:df:ec:1d:e0:6f:61:9b:52:2a:e4:38:e8:4b:8a:80:d0:
         02:13:67:16:33:18:4b:1c:87:16:93:94:10:2d:4b:fb:88:ff:
         9b:c1:13:21:f0:b5:85:75:05:00:95:81:15:32:a7:85:3c:ce:
         43:82:a4:08:15:79:a9:e8:d7:3d:a6:a7:d1:be:bb:09:f2:27:
         88:e0:5f:c5:db:49:11:7f:95:ec:9d:49:1b:90:65:94:74:df:
         63:d9:07:d4:f3:b5:30:3b:5d:80:c4:2a:26:fa:a9:57:97:ba:
         65:08:76:44:7e:73:86:7b:f9:0e:ad:41:fb:23:c9:3e:84:1f:
         1b:d5:73:7c:ee:d9:67:cd:f3:c6:5d:f7:bf:38:97:5e:ad:b3:
         90:74:df:01:db:f8:3d:4b:c9:d8:e8:ac:7a:51:8e:94:d6:bb:
         3d:dc:ee:ed:c0:f8:a1:49:7a:de:bd:ed:f0:85:72:9d:80:f1:
         72:e6:ac:88:10:f4:7b:5d:14:1a:2d:e7:48:6b:5a:7b:9e:e0:
         76:72:c4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----