Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea.cer
File:                     72d490f0-44a0-40e3-afc2-d9f43534d7ea.cer (raw, json)
Hash identifier:          mJqCtg39GeiSfa6+Lxap0BwG9F5HsYq3oH7+YaQ/GeE=
Subject key identifier:   24:EC:87:BB:05:C1:7A:60:5F:26:0A:AC:B7:AB:B8:DC:92:89:51:A4
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847F1DB0AAF76FFD194D4DE59F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 20 Nov 2024 18:31:06 +0000
Certificate not after:    Tue 23 Feb 2027 18:31:06 +0000
Subordinate resources:    IP: 163.6.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:db:0a:af:76:ff:d1:94:d4:de:59:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 20 18:31:06 2024 GMT
            Not After : Feb 23 18:31:06 2027 GMT
        Subject: CN=72d490f0-44a0-40e3-afc2-d9f43534d7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:25:02:03:6e:68:b1:2d:e9:2c:45:1e:c9:1c:
                    14:46:8e:7b:19:47:e2:6d:d6:50:05:3d:8b:f5:86:
                    93:4a:a6:56:26:f2:b5:a8:72:a8:48:b3:50:a7:01:
                    b5:2b:e9:3d:ab:92:47:bb:12:98:d3:2b:4f:97:4c:
                    48:1b:77:6a:38:40:96:90:96:ce:8e:a8:01:74:da:
                    cc:ca:c9:8a:22:81:d0:50:2b:a0:98:b7:ca:9b:29:
                    3f:a6:3d:af:43:20:90:f8:b8:34:7a:33:db:05:26:
                    cc:76:8b:82:ee:e5:b6:35:60:65:be:8a:91:87:45:
                    3a:5c:b3:17:48:47:d6:c3:31:26:16:a2:a8:8d:f6:
                    2f:2e:39:8e:e6:83:7e:c7:aa:22:79:b8:37:a4:92:
                    38:bb:0f:a1:a1:62:8d:c9:e7:77:07:df:c9:91:74:
                    94:8f:41:95:c1:71:80:0b:d3:c5:49:e6:13:1a:80:
                    e8:e5:9f:ad:5f:02:5b:bd:b1:6d:7f:79:f4:0d:7a:
                    6c:4d:9f:d1:39:23:b2:88:84:7a:0d:08:c5:59:89:
                    13:34:e2:08:b0:30:78:bd:92:03:4a:0f:ba:ee:04:
                    4e:7f:6f:ab:de:b8:55:67:5b:08:09:61:1d:1d:4e:
                    ec:a4:46:1b:61:4e:ee:28:d0:5b:15:b0:20:1c:34:
                    2d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EC:87:BB:05:C1:7A:60:5F:26:0A:AC:B7:AB:B8:DC:92:89:51:A4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.6.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ac:af:a6:3a:63:fb:15:e7:3a:16:61:76:ec:8e:0d:62:72:
         a6:80:99:89:57:45:d9:b9:7e:b4:62:61:d0:e5:2c:00:70:a8:
         89:75:fe:bd:1b:40:b3:d9:84:0e:7c:f9:f5:c4:42:7f:9d:29:
         65:37:80:d7:d3:b5:a3:38:8a:3c:e3:c2:00:2e:69:3b:a6:bb:
         dc:19:63:f2:a1:8e:d4:4a:36:ae:ae:a8:65:b8:70:aa:33:54:
         14:ee:21:c4:89:d2:00:a2:89:19:4d:71:85:1a:df:62:5d:28:
         ec:24:e4:53:4f:c3:71:4d:33:e7:c8:dc:d5:5d:9e:0c:d0:8c:
         5d:63:0f:a4:44:f7:71:44:6c:65:0c:03:5e:b9:92:50:b7:1f:
         77:4e:dd:4d:0f:63:fd:ed:cf:81:9a:a2:59:18:db:ba:67:6e:
         a6:59:d8:ab:22:d2:75:2a:68:3d:57:dc:eb:ef:80:8d:d6:2b:
         35:3f:aa:bf:25:9b:d2:63:e6:a1:4e:f0:38:30:f4:dc:75:b3:
         ab:4c:63:54:30:b5:2e:bb:c0:f4:26:85:ab:08:8e:f1:7f:d9:
         35:0f:e0:6d:af:74:be:9b:3d:06:e9:de:2a:ad:91:3e:11:8c:
         3a:ad:4c:08:1d:bb:46:c1:35:08:8a:f6:7e:50:5a:61:3e:75:
         b6:18:d4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----