Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374.cer
File:                     0c21d90e-4e01-463d-b595-f0bc4e7fa374.cer (raw, json)
Hash identifier:          y1gAjx5VA5zswVmpvTJ1wVxuaAjsSKejjWGUteInd7c=
Subject key identifier:   39:05:AB:E8:15:3B:14:E6:99:54:C4:2F:2C:A3:C3:44:75:79:F1:A0
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584695115C146C0245DF83CF9180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374/0c21d90e-4e01-463d-b595-f0bc4e7fa374.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 Jul 2024 20:03:26 +0000
Certificate not after:    Wed 21 Oct 2026 20:03:26 +0000
Subordinate resources:    IP: 2604:5f00::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:95:11:5c:14:6c:02:45:df:83:cf:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 18 20:03:26 2024 GMT
            Not After : Oct 21 20:03:26 2026 GMT
        Subject: CN=0c21d90e-4e01-463d-b595-f0bc4e7fa374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:29:5a:ab:7c:bc:42:ae:c3:36:b0:02:4f:d7:
                    ed:96:98:27:00:c6:45:51:b5:2e:73:1d:0f:92:3f:
                    71:55:6c:74:f3:02:51:82:bf:5b:a4:a5:3d:29:5e:
                    39:cf:f2:80:cd:d9:eb:0e:48:90:12:70:e1:d2:38:
                    73:14:09:19:d1:14:2e:86:89:e5:f5:0a:2e:e7:c6:
                    0c:59:b5:3f:26:ce:d9:13:da:51:0c:52:ab:21:0e:
                    ba:d4:18:75:8c:c1:d3:1f:bb:38:98:f6:16:5d:29:
                    bd:a2:8d:cc:b6:e2:79:44:e9:48:59:e6:9d:de:a3:
                    b1:60:1d:4d:51:37:80:90:55:08:a0:7c:5e:7e:65:
                    53:da:7d:0c:1b:9a:5e:a6:0d:63:9e:1c:85:57:bc:
                    fd:3e:8b:e9:e3:52:8a:58:4c:8f:28:94:f0:71:39:
                    45:b9:4e:03:ae:e5:2b:e7:dd:3f:58:5c:39:98:c3:
                    3f:23:60:b2:71:fd:ab:3c:5e:4e:14:0a:50:82:57:
                    62:7a:01:77:8c:2f:c4:31:16:02:94:0a:b9:ef:78:
                    50:54:36:89:b9:77:ca:c6:51:d8:6f:f9:c1:b5:ee:
                    5d:0d:33:bd:76:38:7b:93:7b:dd:52:73:20:61:fb:
                    da:e7:b5:69:87:b1:df:e1:77:14:fa:cd:46:1d:c2:
                    2e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:05:AB:E8:15:3B:14:E6:99:54:C4:2F:2C:A3:C3:44:75:79:F1:A0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374/0c21d90e-4e01-463d-b595-f0bc4e7fa374.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:42:d4:66:97:80:5f:8d:4b:15:d0:84:b3:e7:ca:46:66:f2:
         c3:ea:de:35:aa:41:09:b6:2f:a7:6a:d1:52:66:1d:d2:21:87:
         3e:5f:9a:e2:4a:68:d9:13:d0:4b:d1:5a:75:a9:22:13:50:72:
         f8:b9:fc:25:c6:c8:d8:32:8b:a4:70:b8:ae:ab:ef:25:f8:bd:
         0a:8f:55:b8:bd:28:a8:7a:ee:c8:3c:0c:18:f6:75:db:37:a6:
         a3:bd:7c:68:35:0c:9e:a9:e1:07:71:e3:61:b1:20:c9:a5:69:
         35:a9:18:99:6b:5f:3d:e1:b6:db:6d:64:31:fd:90:72:e5:79:
         8f:bd:ca:8d:76:76:65:79:4c:49:4f:3d:c3:ba:01:6a:1e:9c:
         6e:c1:51:fc:80:5c:fe:a5:ce:4e:31:92:9f:61:3a:a7:5a:c4:
         12:4c:9f:70:d5:fc:2c:e5:3a:2a:3c:d8:4b:d6:67:ac:25:c2:
         bf:37:24:0f:37:79:d3:2c:85:38:f1:86:4d:04:c1:cf:3d:ee:
         bd:da:81:c0:2a:e7:ce:ca:7a:5b:a2:72:e7:ab:8a:11:b4:f3:
         9e:64:17:c2:78:b2:62:8e:2d:cd:1f:6b:71:7c:c8:1d:29:2f:
         d7:dc:6f:cc:87:52:67:8a:84:82:9e:ff:36:e5:0c:36:e1:ae:
         3e:7a:5d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----