Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08.cer
File:                     84808f12-9e5e-47d7-bdbe-79f0833fad08.cer (raw, json)
Hash identifier:          nUTK6ybVUNBFBbIjVmvj5w8MaO2i78ly5vcp8jyk7a4=
Subject key identifier:   D1:B0:B0:33:82:56:88:DD:56:7A:27:85:B1:9D:D0:4A:28:4D:11:76
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858467AD595098B0871FD5B8B2BC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08/84808f12-9e5e-47d7-bdbe-79f0833fad08.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 09 Jul 2024 10:31:58 +0000
Certificate not after:    Mon 12 Oct 2026 10:31:58 +0000
Subordinate resources:    IP: 2607:6980::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7a:d5:95:09:8b:08:71:fd:5b:8b:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul  9 10:31:58 2024 GMT
            Not After : Oct 12 10:31:58 2026 GMT
        Subject: CN=84808f12-9e5e-47d7-bdbe-79f0833fad08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:08:ba:7c:7b:c8:85:ea:c7:e1:98:1c:65:52:
                    94:87:a8:7e:91:72:c2:6c:89:42:2b:40:97:7b:ee:
                    42:e0:ae:41:0c:98:e7:1d:98:00:72:18:e3:85:76:
                    76:fa:20:bf:47:2a:eb:dc:e2:53:bc:65:0f:b9:f9:
                    a1:47:6c:06:3b:a5:d7:23:18:dc:29:fc:59:0c:6e:
                    eb:8e:a6:62:cc:e0:ef:55:f8:7b:24:bb:6a:9e:75:
                    54:80:92:f2:25:81:d8:ef:e5:80:05:31:af:e0:de:
                    1f:86:84:b6:12:01:78:4a:48:ea:f6:f1:ba:b6:d9:
                    32:42:91:c9:5a:a3:38:67:ce:4f:d9:b7:02:ef:b4:
                    05:4b:1c:93:ed:26:b4:34:f5:c4:3a:34:89:0b:14:
                    13:ca:72:8e:1c:3a:b0:86:33:76:78:53:b1:d1:0c:
                    b3:dd:35:5f:b1:fc:83:ed:d8:d7:1e:1f:dc:95:cd:
                    e8:d5:0e:0a:af:6d:79:ee:d9:6c:7c:de:e4:26:71:
                    6b:b7:af:b3:62:4f:cc:7e:86:e1:36:80:6a:5a:fb:
                    8c:15:bb:f9:b6:7a:30:33:5f:66:2c:93:49:97:5a:
                    0a:6a:02:50:aa:4a:cc:b0:f1:4d:ef:2b:75:2a:52:
                    35:e3:25:df:32:2d:68:e1:5d:3b:6d:6d:b4:52:9e:
                    3a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B0:B0:33:82:56:88:DD:56:7A:27:85:B1:9D:D0:4A:28:4D:11:76
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08/84808f12-9e5e-47d7-bdbe-79f0833fad08.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f6:3b:31:b1:c3:2d:69:a7:63:dd:e3:ea:11:f8:04:02:78:
         d6:65:9b:96:85:58:c4:46:ea:59:9f:20:c2:84:71:98:23:8a:
         93:c6:ad:d9:f3:a7:75:28:1b:de:41:cd:65:88:46:ef:b6:da:
         22:c5:73:a6:22:6e:84:03:01:dc:11:22:3c:4e:97:d2:29:b8:
         31:b6:0b:3e:d7:f9:0e:78:ae:00:de:7b:b2:54:8d:e7:c3:c4:
         69:62:98:96:76:ab:bc:53:90:e7:14:cd:56:7d:f3:01:f6:98:
         52:85:d4:88:bf:df:90:ec:05:67:66:fd:38:86:bd:20:f9:93:
         86:0f:7c:e9:eb:4e:ea:f1:bf:97:71:fc:d7:7e:fe:68:16:2b:
         cf:82:58:05:41:94:1b:29:6e:81:23:ea:91:73:f0:0d:46:77:
         d0:84:b3:71:ec:68:db:e6:9a:0e:8a:b5:09:ea:13:ad:b5:03:
         34:8d:72:cc:87:e5:41:2d:59:8f:9a:8a:5c:79:60:00:e2:83:
         9a:51:e4:65:53:26:f7:28:38:a2:f9:c1:5b:26:60:bf:d0:e1:
         1e:ad:ae:48:97:17:a2:c7:34:94:f9:19:1e:62:44:16:35:82:
         87:e8:29:cc:83:fd:87:81:a1:9a:28:9e:88:c9:81:ff:85:bf:
         d3:e2:e9:58
-----BEGIN CERTIFICATE-----
MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEZ61ZUJiwhx/VuLK8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDcwOTEwMzE1OFoXDTI2MTAxMjEwMzE1OFowLzEtMCsGA1UEAxMk
ODQ4MDhmMTItOWU1ZS00N2Q3LWJkYmUtNzlmMDgzM2ZhZDA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgi6fHvIherH4ZgcZVKUh6h+kXLCbIlCK0CX
e+5C4K5BDJjnHZgAchjjhXZ2+iC/Ryrr3OJTvGUPufmhR2wGO6XXIxjcKfxZDG7r
jqZizODvVfh7JLtqnnVUgJLyJYHY7+WABTGv4N4fhoS2EgF4Skjq9vG6ttkyQpHJ
WqM4Z85P2bcC77QFSxyT7Sa0NPXEOjSJCxQTynKOHDqwhjN2eFOx0Qyz3TVfsfyD
7djXHh/clc3o1Q4Kr2157tlsfN7kJnFrt6+zYk/MfobhNoBqWvuMFbv5tnowM19m
LJNJl1oKagJQqkrMsPFN7yt1KlI14yXfMi1o4V07bW20Up46+QIDAQABo4IEADCC
A/wwHQYDVR0OBBYEFNGwsDOCVojdVnonhbGd0EooTRF2MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84
NDgwOGYxMi05ZTVlLTQ3ZDctYmRiZS03OWYwODMzZmFkMDgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzg0ODA4ZjEyLTllNWUtNDdkNy1i
ZGJlLTc5ZjA4MzNmYWQwOC84NDgwOGYxMi05ZTVlLTQ3ZDctYmRiZS03OWYwODMz
ZmFkMDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAmB2mAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADn2OzGxwy1pp2Pd4+oR
+AQCeNZlm5aFWMRG6lmfIMKEcZgjipPGrdnzp3UoG95BzWWIRu+22iLFc6YiboQD
AdwRIjxOl9IpuDG2Cz7X+Q54rgDee7JUjefDxGlimJZ2q7xTkOcUzVZ98wH2mFKF
1Ii/35DsBWdm/TiGvSD5k4YPfOnrTurxv5dx/Nd+/mgWK8+CWAVBlBspboEj6pFz
8A1Gd9CEs3HsaNvmmg6KtQnqE621AzSNcsyH5UEtWY+ailx5YADig5pR5GVTJvco
OKL5wVsmYL/Q4R6trkiXF6LHNJT5GR5iRBY1gofoKcyD/YeBoZoonojJgf+Fv9Pi
6Vg=
-----END CERTIFICATE-----