Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d.cer
File:                     4310aaf8-5883-47e5-8319-e5c9da9cc46d.cer (raw, json)
Hash identifier:          TasPbUpX8HcipjsmMaoNnucWoZXd4EuZQALtMVnl7Uo=
Subject key identifier:   54:67:BA:37:10:76:C4:13:63:48:89:A9:6E:11:EA:82:F2:73:00:BE
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858467889E158CAA1A6E69EC62C10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d/4310aaf8-5883-47e5-8319-e5c9da9cc46d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 08 Jul 2024 14:47:50 +0000
Certificate not after:    Sun 11 Oct 2026 14:47:50 +0000
Subordinate resources:    IP: 64.49.36.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:78:89:e1:58:ca:a1:a6:e6:9e:c6:2c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul  8 14:47:50 2024 GMT
            Not After : Oct 11 14:47:50 2026 GMT
        Subject: CN=4310aaf8-5883-47e5-8319-e5c9da9cc46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:ae:7c:b8:10:a5:04:30:36:19:bb:0f:52:
                    43:6d:fc:cd:07:34:04:8d:82:0b:ec:1b:06:90:15:
                    23:ab:52:bf:05:29:cd:7c:9f:0b:eb:b8:65:0f:e1:
                    b5:b2:32:26:33:fa:31:b2:0a:72:52:50:fb:8e:8d:
                    9f:74:01:15:a6:64:84:85:1a:08:c4:6e:63:6c:b6:
                    fa:c8:4e:45:0b:a7:a5:ea:15:a8:17:c3:38:c8:70:
                    e7:4d:b2:ce:db:6f:30:62:ed:e2:12:7c:3c:0e:90:
                    38:fd:fc:ae:8d:af:99:93:f5:a4:53:65:ef:7e:da:
                    a8:79:de:ed:42:49:6e:17:3e:4d:42:2e:2d:40:53:
                    a7:4b:6f:7a:98:59:cb:2f:d2:dc:3f:e4:8d:e7:8f:
                    99:43:aa:f1:ec:33:dc:44:c9:5d:da:c4:c0:88:1e:
                    30:e9:36:04:66:a7:dd:3f:68:8a:be:85:56:f8:69:
                    97:9c:2a:3b:20:fd:20:38:c2:83:be:e8:19:0f:cb:
                    4b:c2:ad:5c:88:91:23:b9:3d:60:8a:4e:6e:56:1b:
                    10:98:51:d1:2f:f4:d1:e9:2a:73:97:0a:fe:3e:72:
                    9b:ec:7c:4c:eb:aa:80:95:15:87:bc:9c:bb:10:5e:
                    9b:59:2d:f0:fb:33:36:67:38:2b:d0:3c:24:8c:23:
                    d2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:67:BA:37:10:76:C4:13:63:48:89:A9:6E:11:EA:82:F2:73:00:BE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d/4310aaf8-5883-47e5-8319-e5c9da9cc46d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d7:80:ab:07:eb:27:8e:b5:06:8b:66:72:9d:e6:3f:52:03:
         e4:0d:25:eb:c2:11:40:51:42:e3:2e:2f:77:37:88:de:de:8e:
         3e:44:3f:17:45:e5:b4:60:78:65:8d:2c:2f:30:35:24:bc:02:
         ff:21:7b:f5:7b:c5:0c:b6:87:91:e0:1e:be:00:55:83:c6:af:
         00:24:b0:60:4d:0f:33:3e:1a:c0:e3:71:f2:aa:62:cf:6a:ac:
         76:27:33:9c:11:6d:74:bb:4c:d3:2f:6d:94:df:a2:e6:c4:ac:
         f7:b5:6f:ba:09:62:3d:c5:f2:a9:5c:e4:41:73:b0:e5:88:12:
         f9:e7:54:71:a3:b3:fa:fa:b6:22:e3:5f:22:5c:0c:32:56:08:
         bb:da:54:2d:6d:d4:5c:ff:e7:48:2f:3e:01:e0:65:88:eb:2d:
         c1:c4:d9:5f:7b:5a:e2:e4:82:9c:a9:4a:71:23:69:a5:ff:35:
         1b:90:57:8a:d4:4c:3d:4f:79:3d:37:50:4a:98:da:12:d6:d4:
         6c:6c:61:fa:34:a8:5e:a9:b3:5a:bc:6f:5c:a8:8a:6a:f3:f7:
         fa:1f:d0:c8:5b:26:d9:06:98:09:d2:40:cd:b4:f9:aa:ac:c2:
         31:3f:1a:4f:a7:33:33:95:58:c9:12:8e:df:cc:73:b7:70:fe:
         89:19:56:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----