Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
File:                     65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer (raw, json)
Hash identifier:          y5rd2Mqw5coqRbUwasMx/dpk1C3Rfk6G/nnbBFPw7ic=
Subject key identifier:   AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858467E27F0074700CBF4A9A5BD40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 10 Jul 2024 15:05:20 +0000
Certificate not after:    Tue 13 Oct 2026 15:05:20 +0000
Subordinate resources:    IP: 141.225.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7e:27:f0:07:47:00:cb:f4:a9:a5:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 10 15:05:20 2024 GMT
            Not After : Oct 13 15:05:20 2026 GMT
        Subject: CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:66:56:2b:22:62:fc:b4:17:a9:68:e8:68:51:
                    e6:40:17:ff:85:c6:f8:1b:94:10:19:fd:4e:b7:03:
                    09:15:25:25:6b:75:aa:0e:a0:48:c3:0c:97:8e:1a:
                    e8:45:99:e5:02:0c:8a:17:2a:f0:54:97:bd:01:9f:
                    6f:f7:1b:7e:ee:85:48:3d:5a:41:a8:06:ee:06:3a:
                    bf:40:a6:85:25:69:08:b0:31:46:c2:c5:1f:47:8c:
                    eb:12:b6:36:fb:ce:be:31:9f:2a:c9:29:ed:92:02:
                    fc:5c:e1:08:dd:f8:64:8c:ce:11:1c:ea:52:18:b4:
                    51:ae:cf:e0:6d:6d:0f:54:e3:80:f4:20:0f:f0:22:
                    0a:2e:aa:da:f1:36:d8:7c:01:0c:d6:e1:f7:9b:b9:
                    ba:4f:b1:9b:39:21:cb:4f:91:88:52:6a:28:72:19:
                    f7:52:fe:df:49:d5:fe:c7:d9:e2:c3:d0:85:da:f8:
                    85:93:dd:33:fa:95:df:60:bf:80:d1:b9:2e:3b:20:
                    73:dd:5c:e6:3a:c2:23:6d:77:27:6c:de:a8:62:69:
                    21:56:d0:1d:57:57:5f:45:83:82:bf:31:16:7d:ca:
                    60:b9:a1:2e:c6:98:69:00:70:9c:e9:7a:25:9d:2a:
                    06:6e:bb:e7:48:f9:a4:98:77:33:12:ba:ac:86:3b:
                    db:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.225.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:5f:c2:ad:7c:e5:ad:1c:c4:0a:68:78:b6:c2:46:07:7e:4c:
         3d:77:39:5a:ae:ef:c7:14:23:67:7a:e7:44:95:18:03:36:f8:
         e8:24:48:c1:70:da:16:3b:69:42:6b:7e:45:ee:4a:67:35:59:
         61:3c:b0:58:a4:5e:30:1a:9b:18:72:65:5e:61:d1:7c:b2:d5:
         0e:1f:ec:11:a9:5a:64:a1:f0:f3:f4:48:56:a8:84:7f:76:a4:
         e6:0d:bf:00:a9:c5:57:dd:14:8d:7b:36:39:41:db:6b:45:1f:
         54:16:8f:b4:eb:42:ee:d9:14:21:9e:0f:7c:1d:bc:54:c5:a6:
         6f:7f:6f:86:b4:c9:dc:d0:d1:6e:7a:ee:06:c4:fa:73:a7:0d:
         33:0d:8d:54:95:bd:3a:c8:11:0c:59:86:2d:03:7a:e8:65:41:
         ed:5e:35:4f:8c:bc:20:1d:fa:0e:b8:08:e6:78:87:65:40:79:
         89:e5:ec:a9:28:6e:87:0d:20:e6:6f:56:cb:08:57:f8:fd:27:
         c8:50:4f:41:19:17:19:66:2a:ef:cf:9e:9d:b4:11:30:ab:58:
         27:dc:af:77:d9:a8:98:9d:7f:2a:24:8d:cd:6c:0a:2d:53:3c:
         30:da:3c:39:57:5a:9d:15:8f:50:84:7c:e5:66:f8:31:80:a7:
         cd:43:c0:10
-----BEGIN CERTIFICATE-----
MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEZ+J/AHRwDL9KmlvUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDcxMDE1MDUyMFoXDTI2MTAxMzE1MDUyMFowLzEtMCsGA1UEAxMk
NjVlZmRkNzktYTJjMi00ZmQ0LWFkMWEtNWQ1Mzg0MTM4NDEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2ZWKyJi/LQXqWjoaFHmQBf/hcb4G5QQGf1O
twMJFSUla3WqDqBIwwyXjhroRZnlAgyKFyrwVJe9AZ9v9xt+7oVIPVpBqAbuBjq/
QKaFJWkIsDFGwsUfR4zrErY2+86+MZ8qySntkgL8XOEI3fhkjM4RHOpSGLRRrs/g
bW0PVOOA9CAP8CIKLqra8TbYfAEM1uH3m7m6T7GbOSHLT5GIUmoochn3Uv7fSdX+
x9niw9CF2viFk90z+pXfYL+A0bkuOyBz3VzmOsIjbXcnbN6oYmkhVtAdV1dfRYOC
vzEWfcpguaEuxphpAHCc6XolnSoGbrvnSPmkmHczErqshjvbOwIDAQABo4ID/jCC
A/owHQYDVR0OBBYEFKwS5JhL8gc8qYw/iCEG3SZl/FymMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82
NWVmZGQ3OS1hMmMyLTRmZDQtYWQxYS01ZDUzODQxMzg0MTIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzY1ZWZkZDc5LWEyYzItNGZkNC1h
ZDFhLTVkNTM4NDEzODQxMi82NWVmZGQ3OS1hMmMyLTRmZDQtYWQxYS01ZDUzODQx
Mzg0MTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHgYIKwYBBQUH
AQcBAf8EDzANMAsEAgABMAUDAwCN4TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByX8KtfOWtHMQKaHi2wkYH
fkw9dzlaru/HFCNneudElRgDNvjoJEjBcNoWO2lCa35F7kpnNVlhPLBYpF4wGpsY
cmVeYdF8stUOH+wRqVpkofDz9EhWqIR/dqTmDb8AqcVX3RSNezY5QdtrRR9UFo+0
60Lu2RQhng98HbxUxaZvf2+GtMnc0NFueu4GxPpzpw0zDY1Ulb06yBEMWYYtA3ro
ZUHtXjVPjLwgHfoOuAjmeIdlQHmJ5eypKG6HDSDmb1bLCFf4/SfIUE9BGRcZZirv
z56dtBEwq1gn3K932aiYnX8qJI3NbAotUzww2jw5V1qdFY9QhHzlZvgxgKfNQ8AQ
-----END CERTIFICATE-----