Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/63f9107d-82f9-4bfc-bf63-a5f24577f246.cer
File:                     63f9107d-82f9-4bfc-bf63-a5f24577f246.cer (raw, json)
Hash identifier:          bcP0OS3hmt58dxKUtpM5uJmBf5VqxsJnhMO7oj3DxVw=
Subject key identifier:   CB:6C:C6:0F:04:5A:93:73:B4:62:61:51:18:25:7F:1B:E1:B8:FE:BF
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858469FEB495C69D63DA2C536A480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/63f9107d-82f9-4bfc-bf63-a5f24577f246/63f9107d-82f9-4bfc-bf63-a5f24577f246.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/63f9107d-82f9-4bfc-bf63-a5f24577f246/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 22 Jul 2024 17:20:37 +0000
Certificate not after:    Sun 25 Oct 2026 17:20:37 +0000
Subordinate resources:    AS: 11021
                          IP: 2602:f9c0::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:9f:eb:49:5c:69:d6:3d:a2:c5:36:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 22 17:20:37 2024 GMT
            Not After : Oct 25 17:20:37 2026 GMT
        Subject: CN=63f9107d-82f9-4bfc-bf63-a5f24577f246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:09:13:13:78:b7:b0:91:d0:0f:19:b4:e5:d4:
                    6c:81:dc:d8:a6:49:b3:05:ee:59:e4:1f:52:c9:3a:
                    70:d6:a9:e0:2c:ac:d8:0b:64:49:fe:cf:db:32:64:
                    fe:5b:ee:e3:eb:71:0b:b6:2a:53:23:f8:6c:8c:6a:
                    3d:85:bd:b9:f9:fc:4b:fd:2c:98:3e:7d:89:4e:4e:
                    b1:8f:26:cd:fd:61:30:16:56:7b:8d:ff:9a:59:d3:
                    cd:48:52:67:2b:47:a7:5c:8f:58:74:4e:f4:62:9b:
                    5d:d3:1a:53:f7:ce:6c:20:24:6f:cf:13:95:93:c5:
                    f5:dd:05:30:45:a4:88:05:a2:70:fb:43:41:f4:b3:
                    de:6d:68:cd:24:5c:4a:19:02:df:55:47:1f:18:92:
                    8a:98:eb:62:c4:dc:83:cd:a9:ba:03:cc:b5:8a:98:
                    a1:1d:70:04:b2:a6:dc:be:fc:ce:8b:2f:a8:95:2c:
                    83:91:82:46:12:1d:94:0b:84:c0:26:bb:24:28:97:
                    42:86:ff:82:d7:32:33:be:89:3e:ec:df:a2:d1:56:
                    1d:4b:a0:a7:9c:17:18:27:2e:20:d5:53:13:2a:45:
                    41:55:5a:a8:b4:82:9b:d6:e7:c4:bb:18:6a:cd:30:
                    ec:ce:36:d0:fd:64:b9:a1:87:60:fb:0c:b1:52:f2:
                    52:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6C:C6:0F:04:5A:93:73:B4:62:61:51:18:25:7F:1B:E1:B8:FE:BF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/63f9107d-82f9-4bfc-bf63-a5f24577f246/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/63f9107d-82f9-4bfc-bf63-a5f24577f246/63f9107d-82f9-4bfc-bf63-a5f24577f246.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9c0::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11021

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:16:e5:3b:c5:73:d9:7b:11:b7:b1:a5:e6:3f:b9:eb:59:b7:
         f4:10:d8:97:d4:24:89:13:01:60:94:41:c7:ed:a2:33:95:a9:
         44:34:a6:31:34:60:eb:99:46:22:a0:d7:50:e9:65:27:05:de:
         30:a9:ce:ff:6a:53:e6:90:9e:e2:0a:c8:fd:7d:78:c0:8f:2b:
         d1:05:55:f5:31:b2:6b:08:c7:c1:81:1b:1b:18:ff:6f:74:67:
         22:1b:bd:ee:7d:b4:bf:44:a5:8c:dc:8a:78:f4:b4:cd:46:80:
         1c:55:0e:30:e2:98:bc:b3:7d:39:e9:05:81:62:94:8b:0d:7e:
         53:d7:fa:e2:6c:58:68:22:7e:fa:01:b4:bd:ce:d8:28:65:54:
         fb:1a:2d:a7:f2:4c:23:ce:3e:80:57:7f:7e:0c:5f:25:83:0c:
         36:de:44:15:2c:a0:bc:19:f0:9e:ed:d7:f0:bc:40:9f:49:c9:
         64:6d:0c:7a:0a:25:66:cd:80:5d:2f:85:48:fe:21:f3:33:6d:
         e2:c2:75:b4:1d:8a:4b:24:a1:9b:22:33:d8:53:85:b0:4e:96:
         90:ee:32:fa:46:49:ba:7a:4d:76:eb:5e:5d:8f:ad:a8:6e:6e:
         7d:c7:97:02:94:e7:5a:20:b9:03:81:26:31:24:91:c4:19:4b:
         91:b1:d3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----