Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer
File:                     3bfea78e-552c-46d0-a7b4-60f999223238.cer (raw, json)
Hash identifier:          dxw9DamyqVNyuleuh+k6fWRVWWRuKPn4FARQ03CFcug=
Subject key identifier:   D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845DC7E93AA28ADEBCC1819BC00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 13 May 2024 17:18:57 +0000
Certificate not after:    Sun 16 Aug 2026 17:18:57 +0000
Subordinate resources:    IP: 165.140.148.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dc:7e:93:aa:28:ad:eb:cc:18:19:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 13 17:18:57 2024 GMT
            Not After : Aug 16 17:18:57 2026 GMT
        Subject: CN=3bfea78e-552c-46d0-a7b4-60f999223238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e8:95:f1:7d:0a:33:7d:10:82:d3:c2:cd:0c:
                    01:f1:97:3f:68:e3:9a:19:ef:f2:a0:fd:50:0e:61:
                    b0:2f:83:c5:49:fe:14:01:93:dc:cd:19:ad:5c:b2:
                    3a:52:6a:13:28:a0:77:cf:6b:9f:30:c1:c3:f6:b2:
                    b5:99:22:d8:37:33:34:30:50:b9:51:ba:2d:35:bc:
                    bf:a4:63:bc:f1:60:99:1c:c8:27:e8:9f:77:4c:f3:
                    a3:ea:3a:d3:32:9d:0a:ee:36:56:55:f5:07:2e:a3:
                    41:e7:49:82:52:04:57:b8:e3:61:c4:34:6d:84:ae:
                    6e:4d:d9:60:2f:b4:2c:cc:65:42:3f:80:4f:cb:c9:
                    fd:8e:06:99:98:20:3a:dd:ba:d9:32:58:5c:0c:58:
                    1f:48:8f:b9:df:37:99:46:61:79:67:37:35:df:b5:
                    c7:e3:93:80:57:e5:e9:10:2e:82:d1:6c:bc:a2:3a:
                    7f:6d:ce:4f:9d:35:e8:37:fc:2b:d4:27:29:e8:63:
                    d0:ae:6f:69:8b:fc:a8:1f:d8:d5:e6:5d:4a:3c:6d:
                    1b:16:56:8b:fa:04:9d:40:ca:af:e0:b9:8b:2b:31:
                    4c:24:dc:40:d6:3c:85:06:f1:c8:14:81:38:a6:be:
                    51:fb:5d:7c:74:95:a9:df:90:07:24:70:c7:44:72:
                    46:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:34:43:fb:2e:8d:63:19:e0:02:03:9d:ce:83:1a:7c:54:e8:
         d6:bf:ab:1c:0c:ad:fc:39:7b:44:96:48:b6:33:2e:63:6d:94:
         c5:18:a5:42:47:a5:b8:df:4c:68:e2:0a:75:2a:6e:a1:17:31:
         7d:63:07:f3:75:34:86:94:0e:be:5f:5c:4a:7c:d4:d8:42:30:
         4a:2a:ee:06:ee:6e:5e:20:e5:16:77:9b:46:12:63:2e:23:33:
         f0:3c:c4:ce:3b:6e:dc:da:e8:d4:b2:81:38:90:18:b3:e6:d4:
         e1:e9:cc:b9:f2:f3:98:7b:4d:db:5a:9f:6e:a1:ab:a4:64:67:
         c2:8a:67:b7:ca:af:2f:c5:48:11:1a:bd:9e:ea:b5:58:72:06:
         08:65:41:f9:45:2b:0f:0e:7c:b4:b8:02:0a:b5:f6:6a:0e:c1:
         71:f2:c2:e2:88:85:18:7a:bc:e1:fe:9d:34:dd:ee:b5:ae:73:
         d8:34:4e:8f:32:ff:a1:d0:30:17:08:1b:75:0f:14:fb:6f:b2:
         bf:72:98:40:4e:d4:e0:10:4c:28:ff:d3:70:cd:03:2b:ba:71:
         d2:2d:98:ab:65:40:5e:27:84:68:82:53:d6:55:4f:7f:9d:e9:
         28:23:00:ec:60:a7:ca:8d:0e:a8:d0:73:0b:18:4f:fc:5b:e1:
         de:ac:26:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----