Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec.cer
File:                     567ba016-7d2d-4729-a696-45a28ff7f6ec.cer (raw, json)
Hash identifier:          kxqhC9/Xaxt+VASXQ+o8Dl3kwbferg+2I344sI51f7Y=
Subject key identifier:   D6:6E:19:18:0A:CA:D3:59:B1:E7:67:53:04:B4:DE:32:DA:8A:07:07
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584730CA9A10DB0C478C2A5CBA40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/567ba016-7d2d-4729-a696-45a28ff7f6ec.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 12 Sep 2024 14:46:58 +0000
Certificate not after:    Wed 16 Dec 2026 15:46:58 +0000
Subordinate resources:    IP: 2607:97c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:ca:9a:10:db:0c:47:8c:2a:5c:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 12 14:46:58 2024 GMT
            Not After : Dec 16 15:46:58 2026 GMT
        Subject: CN=567ba016-7d2d-4729-a696-45a28ff7f6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c1:b1:e7:69:63:f2:e6:e8:68:2c:77:97:7d:
                    fc:b2:5f:58:8c:5e:1e:b0:9e:85:57:d9:aa:40:ce:
                    ff:ec:23:bb:25:07:2d:3f:0e:74:b2:ed:07:3d:3b:
                    02:b2:f7:eb:60:84:d8:84:1c:ab:28:f1:20:3f:d5:
                    87:3c:d6:a1:60:08:5c:0a:f9:65:28:5e:a0:87:18:
                    65:19:b0:7c:45:01:f0:ed:67:de:ff:31:97:3a:6c:
                    ca:35:72:0b:dc:be:72:52:09:03:f5:c3:45:8e:77:
                    61:6a:12:65:46:a3:cf:c9:bc:3b:7a:1f:a3:4e:7a:
                    fe:74:7f:99:c6:f2:6d:46:cc:cf:c9:0d:d5:52:d4:
                    53:04:38:c4:33:80:38:e3:af:10:60:0b:fc:f4:a7:
                    70:e0:f2:dd:c1:57:e0:aa:1e:ea:a9:89:9f:1a:03:
                    d4:66:6c:8e:2c:0f:16:a6:f6:5e:3c:f3:85:94:8c:
                    e1:0a:0d:4f:14:58:09:ae:fe:5a:d4:08:65:5b:16:
                    76:6b:d7:84:22:91:96:ff:25:24:40:fc:6e:20:d1:
                    2d:78:23:3b:5a:52:7d:1d:70:8a:24:77:31:e2:3a:
                    34:34:9f:91:08:f8:b3:e5:bc:22:b8:4c:b7:66:d3:
                    62:ae:08:0e:25:a6:d6:04:d3:34:e5:13:cc:07:e0:
                    e1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6E:19:18:0A:CA:D3:59:B1:E7:67:53:04:B4:DE:32:DA:8A:07:07
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/567ba016-7d2d-4729-a696-45a28ff7f6ec.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:97c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b2:d7:29:28:e2:f4:f9:53:ec:b9:84:5b:97:3b:bd:ba:a2:
         af:04:10:fa:90:cc:66:0f:4a:21:6b:93:c8:80:31:e7:0e:95:
         95:a7:3a:18:d7:c6:7d:96:b5:d3:be:90:18:da:37:73:10:5b:
         c6:48:80:46:4c:52:df:f1:fd:68:3a:ca:a1:19:0f:7e:3f:45:
         5d:86:41:47:8b:e3:27:f2:db:1f:67:9b:a8:89:d9:dd:c0:d4:
         ed:0a:a8:a3:57:e0:3f:0f:32:48:27:b2:86:a4:91:d3:b2:6c:
         4f:b6:3e:7a:1e:48:cc:2b:3d:cf:b6:50:1c:c6:f5:c0:c1:62:
         63:73:e4:02:72:6b:a9:b6:ed:ad:35:4b:db:62:d2:6c:1a:53:
         8b:97:d9:b4:56:16:fd:44:a3:f8:b3:dd:f9:2b:5a:f5:ef:29:
         10:49:7d:ca:75:61:8f:03:6b:a5:b7:f5:ce:d3:49:b3:4c:05:
         e3:d6:0e:bf:c7:1b:11:01:9d:75:2f:7a:7c:ce:30:7d:db:45:
         68:b5:96:6b:ff:2c:1d:77:fd:f4:53:f1:3d:c5:61:0e:33:ff:
         99:fc:5d:bc:2a:e1:b6:92:96:19:37:82:ad:01:ee:87:90:dd:
         0b:8c:89:ec:37:2d:6f:61:28:50:b3:88:05:fe:c4:88:0a:49:
         2d:1d:8a:dc
-----BEGIN CERTIFICATE-----
MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEcwypoQ2wxHjCpcukAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MDkxMjE0NDY1OFoXDTI2MTIxNjE1NDY1OFowLzEtMCsGA1UEAxMk
NTY3YmEwMTYtN2QyZC00NzI5LWE2OTYtNDVhMjhmZjdmNmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcGx52lj8uboaCx3l338sl9YjF4esJ6FV9mq
QM7/7CO7JQctPw50su0HPTsCsvfrYITYhByrKPEgP9WHPNahYAhcCvllKF6ghxhl
GbB8RQHw7Wfe/zGXOmzKNXIL3L5yUgkD9cNFjndhahJlRqPPybw7eh+jTnr+dH+Z
xvJtRszPyQ3VUtRTBDjEM4A4468QYAv89Kdw4PLdwVfgqh7qqYmfGgPUZmyOLA8W
pvZePPOFlIzhCg1PFFgJrv5a1AhlWxZ2a9eEIpGW/yUkQPxuINEteCM7WlJ9HXCK
JHcx4jo0NJ+RCPiz5bwiuEy3ZtNirggOJabWBNM05RPMB+DhIwIDAQABo4IEADCC
A/wwHQYDVR0OBBYEFNZuGRgKytNZsednUwS03jLaigcHMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81
NjdiYTAxNi03ZDJkLTQ3MjktYTY5Ni00NWEyOGZmN2Y2ZWMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzU2N2JhMDE2LTdkMmQtNDcyOS1h
Njk2LTQ1YTI4ZmY3ZjZlYy81NjdiYTAxNi03ZDJkLTQ3MjktYTY5Ni00NWEyOGZm
N2Y2ZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAmB5fAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIey1yko4vT5U+y5hFuX
O726oq8EEPqQzGYPSiFrk8iAMecOlZWnOhjXxn2WtdO+kBjaN3MQW8ZIgEZMUt/x
/Wg6yqEZD34/RV2GQUeL4yfy2x9nm6iJ2d3A1O0KqKNX4D8PMkgnsoakkdOybE+2
PnoeSMwrPc+2UBzG9cDBYmNz5AJya6m27a01S9ti0mwaU4uX2bRWFv1Eo/iz3fkr
WvXvKRBJfcp1YY8Da6W39c7TSbNMBePWDr/HGxEBnXUvenzOMH3bRWi1lmv/LB13
/fRT8T3FYQ4z/5n8Xbwq4baSlhk3gq0B7oeQ3QuMiew3LW9hKFCziAX+xIgKSS0d
itw=
-----END CERTIFICATE-----