Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.cer
File:                     7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.cer (raw, json)
Hash identifier:          y7R83f233RYOAT1bNxxQJPxKP/mnu+vchxy4AHjYB10=
Subject key identifier:   CC:9D:71:42:C5:AF:62:84:18:95:EE:25:BE:54:C8:60:AC:B0:ED:D4
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285847ED11CB61E12F6CB3F96BB400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 19 Nov 2024 01:22:23 +0000
Certificate not after:    Mon 22 Feb 2027 01:22:23 +0000
Subordinate resources:    IP: 140.235.116.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:11:cb:61:e1:2f:6c:b3:f9:6b:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Nov 19 01:22:23 2024 GMT
            Not After : Feb 22 01:22:23 2027 GMT
        Subject: CN=7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9a:8e:b8:05:13:21:03:13:f0:01:5b:80:ad:
                    2f:dc:17:8b:9e:27:01:f5:fc:32:66:65:b9:4c:70:
                    a4:49:73:7e:49:83:05:3d:25:ae:fa:6b:b7:47:24:
                    cb:89:eb:fa:12:a6:ee:f3:cb:69:1a:c2:7b:fc:43:
                    c9:f1:0f:d3:e6:3e:bf:43:7a:aa:7b:da:5f:0c:31:
                    d8:51:fa:80:89:99:ab:fb:68:c5:df:e1:de:64:74:
                    39:4f:54:d7:b5:9a:f0:f4:dc:c2:7d:9e:17:5c:2a:
                    b8:77:0e:73:92:40:6a:13:8f:1b:45:21:12:82:36:
                    f7:ad:3f:75:e2:50:ab:d5:f4:48:ad:3b:6d:da:c4:
                    69:fc:ac:9d:26:71:7c:37:a6:91:b6:22:75:fb:99:
                    ae:9a:02:37:53:94:3a:b6:96:99:f2:f2:2f:af:0b:
                    b0:bd:c9:54:bf:fc:71:87:c1:e2:3c:55:94:ec:79:
                    5c:37:8b:a3:8e:80:24:94:a9:5b:6c:36:b8:cb:0c:
                    da:bc:95:54:29:35:6a:a4:63:ab:5e:fd:b3:a1:b5:
                    ed:a4:9a:ee:26:f7:dc:31:63:4b:a7:1d:49:4e:36:
                    5b:d4:35:a3:56:f3:0e:dd:0e:f3:cd:33:99:87:54:
                    61:05:a4:a8:ba:23:d1:99:94:e4:1b:95:a5:b7:aa:
                    8c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9D:71:42:C5:AF:62:84:18:95:EE:25:BE:54:C8:60:AC:B0:ED:D4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:91:ad:40:d1:d8:eb:19:11:86:08:1c:37:36:75:ae:98:86:
         bf:78:71:ae:38:5e:7a:34:83:d8:7a:f7:01:6f:87:f3:b2:4c:
         48:d4:0b:01:28:8f:71:ba:05:8c:92:1b:bb:cb:e6:20:1d:cf:
         1f:ee:78:28:cb:56:db:22:5e:01:ed:3a:2e:fb:d5:db:57:99:
         41:b7:6a:d5:cb:47:61:39:7e:59:47:bd:1c:39:cb:65:fc:6e:
         89:59:fa:6c:31:16:02:1b:00:fd:1c:6d:d4:ff:f6:f8:46:23:
         50:16:87:83:35:f5:89:25:37:95:27:72:a4:f3:58:11:68:96:
         63:1a:2a:fa:1a:6f:c9:47:76:51:3a:84:0a:c6:52:d5:4e:67:
         e4:78:7e:26:e2:3c:63:5e:2d:89:d7:4b:88:14:4d:d1:75:ba:
         73:74:48:e2:9c:b2:22:35:3e:4d:46:2d:c4:22:9a:42:3b:eb:
         3f:a1:61:fb:3f:5a:b5:2b:1e:ca:90:d6:9c:4d:fa:03:b9:09:
         3c:72:d8:f2:ef:18:4a:8a:38:67:7c:93:f0:4b:40:c4:66:11:
         e0:f3:4b:43:47:73:fd:e7:6f:ba:ea:81:1c:56:a4:a2:2b:95:
         37:be:1a:89:80:ae:86:94:78:d0:31:6e:df:cb:3a:99:41:cc:
         de:fd:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----