Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1.cer
File:                     00561825-d26a-4ad1-954b-7ae435a3f4a1.cer (raw, json)
Hash identifier:          doN0cgUrFJGzUwFrogV27fotEIxYdN9+ZvvnkYDmJX8=
Subject key identifier:   B0:0D:9C:45:A3:C3:AC:C4:5B:88:EB:6E:EF:E7:EA:71:C4:1A:CE:FB
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858469010BB0B3589D32BD88F8580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/00561825-d26a-4ad1-954b-7ae435a3f4a1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 Jul 2024 01:03:07 +0000
Certificate not after:    Tue 20 Oct 2026 01:03:07 +0000
Subordinate resources:    IP: 134.174.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:90:10:bb:0b:35:89:d3:2b:d8:8f:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 17 01:03:07 2024 GMT
            Not After : Oct 20 01:03:07 2026 GMT
        Subject: CN=00561825-d26a-4ad1-954b-7ae435a3f4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3e:02:2a:99:e3:0e:a0:2e:da:bd:d8:21:28:
                    e3:01:b6:bb:eb:72:64:a1:8e:c8:3b:cd:92:b6:c5:
                    64:12:28:50:fe:c8:b2:92:79:69:63:2a:bc:2e:94:
                    ee:dd:42:06:51:02:f6:c3:10:f2:3e:3f:0f:12:e4:
                    29:7e:3d:c1:7c:54:31:ef:9f:ed:36:22:a7:8b:3f:
                    09:64:2a:27:f2:a3:20:65:e9:e9:fb:25:1c:01:1f:
                    ab:c2:57:0f:0b:2a:e5:4e:76:32:44:e9:43:bb:00:
                    76:c7:a9:8d:17:cf:ff:05:f0:e2:b7:a8:8d:f3:02:
                    56:2e:c4:a4:72:98:79:86:88:06:41:4a:40:32:24:
                    dc:16:52:f7:0f:52:45:e2:b5:d8:24:2b:79:da:2a:
                    71:c6:2e:a9:37:3d:4c:0a:11:72:59:9a:b4:e4:32:
                    c8:8a:09:20:59:80:74:55:af:f3:34:10:1a:ce:28:
                    35:3b:60:e9:59:8c:34:a6:fd:b1:59:bd:6e:60:79:
                    fe:b2:2d:a0:51:f3:80:23:7b:6c:32:cc:05:cd:4d:
                    7b:8d:cd:63:17:3e:f8:c4:1d:24:21:60:8d:5d:97:
                    60:77:5e:7f:cc:ed:c3:c4:1c:8f:e5:16:2a:d0:2c:
                    df:b5:74:a8:eb:e8:bc:92:de:be:2e:62:dd:c9:69:
                    ea:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0D:9C:45:A3:C3:AC:C4:5B:88:EB:6E:EF:E7:EA:71:C4:1A:CE:FB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/00561825-d26a-4ad1-954b-7ae435a3f4a1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.174.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:59:7c:0e:c7:45:76:d2:55:41:d6:4f:b2:70:0b:f3:d1:6a:
         8b:ab:99:9d:fc:c8:c5:c8:ac:06:98:b0:42:31:11:bf:54:2d:
         cd:fc:92:92:8e:fe:6d:ab:84:b9:52:a9:c4:e2:7c:79:66:63:
         52:13:bf:84:0d:38:31:79:a1:58:4d:8f:d9:33:ff:c4:43:84:
         1f:8a:c2:92:a0:a7:93:73:00:c5:b8:e8:a4:e4:2a:b3:1e:5b:
         16:2b:3a:11:dc:15:01:40:48:87:c6:43:0a:0c:89:eb:66:d7:
         22:92:27:8d:58:b2:2b:cd:07:56:66:f7:6a:ce:58:83:61:57:
         1a:bd:93:26:56:69:39:49:dd:cc:65:98:de:ba:60:c3:36:1f:
         4c:12:8b:c6:80:90:dd:c3:f9:d6:de:c0:21:05:18:aa:c7:35:
         f8:12:25:df:4a:2b:34:3b:78:5e:ab:e5:74:83:64:57:b5:71:
         11:d7:64:00:10:12:5d:fb:9f:ea:b0:35:dd:93:e8:49:b4:0b:
         71:6c:a3:c3:21:ab:d6:d9:cb:70:02:35:b6:91:ba:76:0a:e5:
         43:9a:51:f9:b1:cd:b3:c9:39:83:e3:e9:2f:7b:fc:46:65:20:
         fb:aa:78:74:5e:11:7a:56:aa:2c:96:71:8b:8d:b1:39:4f:77:
         b6:a5:c1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----