Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
File:                     c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer (raw, json)
Hash identifier:          2kAyJgUdD5VaaF7cFwKqEjxjC5zmCh1CU2zcf1qYnU0=
Subject key identifier:   7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846EE3639AA3CDCC199BBED1000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 19 Aug 2024 18:24:39 +0000
Certificate not after:    Sun 22 Nov 2026 19:24:39 +0000
Subordinate resources:    IP: 2607:1c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ee:36:39:aa:3c:dc:c1:99:bb:ed:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 19 18:24:39 2024 GMT
            Not After : Nov 22 19:24:39 2026 GMT
        Subject: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f3:00:7e:d7:71:e2:1c:d3:fe:ae:a7:90:98:
                    08:43:f9:71:8b:8e:72:9b:9f:b4:8e:40:5f:e2:05:
                    69:e1:de:c5:16:d9:ba:3c:ab:26:a9:a0:2a:4b:a1:
                    62:f9:4b:29:8f:60:e0:bb:0b:96:2e:37:d4:85:73:
                    8f:03:0c:d1:8b:21:99:22:53:ce:20:9d:d8:08:39:
                    cd:e2:59:2f:96:57:d5:89:fc:a2:24:fe:64:1a:6b:
                    66:38:19:35:8d:10:00:62:da:ac:5c:ca:4a:48:fe:
                    80:21:f5:23:93:f1:c6:f1:bf:85:59:b2:00:d3:1c:
                    0a:3b:dd:b7:86:e2:31:25:f6:e3:29:ed:af:5d:65:
                    1b:b0:de:bd:59:a7:95:47:6f:1e:cb:73:17:61:63:
                    2b:a0:79:1a:21:b1:e3:8c:15:0a:d9:95:a4:ab:f9:
                    a4:14:47:5c:e5:92:8f:f5:0d:9b:ab:79:b5:d5:84:
                    ab:b5:95:ba:af:cc:d8:2d:39:91:9d:69:60:48:91:
                    50:79:c7:e8:81:92:4d:b0:2d:f1:b6:50:11:59:28:
                    39:56:aa:25:10:9a:12:29:e3:37:d3:72:bb:38:5a:
                    e9:ac:a1:5d:46:f9:f6:f0:eb:25:6e:d1:49:d4:45:
                    9b:2a:5b:cf:0f:0d:8a:85:67:0d:21:d6:19:69:1a:
                    23:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:8f:63:d1:a9:32:00:19:e5:75:1f:c3:80:9e:6f:d3:36:ea:
         7e:87:41:75:71:24:61:26:43:95:0d:91:37:e3:4e:c5:1e:fd:
         cf:15:53:ca:a3:15:bb:99:b4:ed:ab:5a:e3:ad:8d:ca:3e:66:
         ba:99:8c:1e:bf:a1:6f:91:2f:b7:65:5e:89:ce:22:02:7a:a2:
         fb:9c:7f:63:43:1b:d0:01:52:9d:89:87:75:91:11:23:ad:0c:
         b1:97:37:cb:bd:e7:3e:68:df:63:bd:56:45:a3:2b:8e:9a:0d:
         42:46:6c:ee:a8:44:37:d1:70:bd:81:c3:ab:90:d5:f2:0b:7c:
         c5:87:df:52:46:76:4f:6b:af:3c:3c:20:48:2d:c0:64:95:94:
         7c:7d:a1:63:43:dc:8c:46:6a:95:2a:62:c5:f6:d1:26:04:d6:
         5f:b9:83:89:66:be:f4:14:51:53:9a:45:3e:a5:f9:a2:83:e1:
         7a:64:3f:4f:9e:2a:3a:00:30:05:b2:7c:6d:4e:ca:2f:98:55:
         c4:96:ac:7e:1a:9b:88:be:f4:6a:d3:d9:3e:b8:3b:e1:01:f4:
         be:eb:2a:50:9d:2c:19:70:b9:8f:a5:79:ac:82:5b:63:fb:80:
         5f:70:42:21:44:4a:73:d5:b6:14:7f:5c:6c:5a:bd:5e:89:47:
         da:28:9f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----