Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
File:                     9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer (raw, json)
Hash identifier:          ZmABENsSGzQn00NFech2sB4FFJbMgWeO/ft//kP03aA=
Subject key identifier:   44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845E425A4195DC2AEA7773DAC20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 16 May 2024 11:06:13 +0000
Certificate not after:    Sun 16 Aug 2026 21:55:55 +0000
Subordinate resources:    AS: 399542
                          IP: 2602:f8ef::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:25:a4:19:5d:c2:ae:a7:77:3d:ac:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 16 11:06:13 2024 GMT
            Not After : Aug 16 21:55:55 2026 GMT
        Subject: CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c6:5e:a4:ed:a6:f0:c2:f2:b3:a2:3c:bb:70:
                    07:e3:dd:09:4f:f8:ea:3e:e8:4a:55:3b:63:ea:af:
                    53:26:02:55:7d:d0:9d:54:6e:10:42:22:85:c4:a7:
                    ab:98:91:1a:1c:f9:16:c2:54:02:0f:c8:e9:2f:c9:
                    5e:4d:4b:e5:dd:9b:89:34:7b:eb:5d:39:55:14:e4:
                    50:66:46:f9:d1:97:44:83:b7:34:85:aa:ae:cf:b6:
                    fb:06:3d:ce:3d:14:da:b5:0e:d0:d5:40:4e:be:69:
                    99:77:5a:b3:1e:4d:21:ca:25:b5:6a:82:e8:4f:3c:
                    c0:96:ae:9f:23:5c:4f:49:3c:57:e1:39:45:aa:34:
                    74:b1:d3:32:7f:90:25:9f:8c:21:ec:8d:d8:4d:e0:
                    00:ae:36:c8:a2:22:a4:41:9d:b7:1b:a2:66:27:99:
                    e1:30:8f:da:7f:06:25:3e:46:31:d9:35:18:c9:f6:
                    52:f8:b0:b2:a0:56:5e:73:c2:10:e2:44:90:2a:dc:
                    d4:4f:81:95:67:86:41:f0:25:dc:cd:4f:c8:e9:74:
                    e1:03:ec:e2:81:70:eb:03:b9:cf:9e:57:8d:4c:fd:
                    34:92:36:fe:c2:a4:b8:e9:44:34:ae:8c:42:14:53:
                    20:8b:af:a0:9a:4d:af:f2:42:cf:96:7f:30:db:f2:
                    7e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ef::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399542

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e6:e5:a3:37:98:3d:d6:f9:0e:c7:66:59:6d:fa:d0:d8:ea:
         54:55:68:0d:50:93:4b:b1:7c:53:ba:e1:e7:22:02:dd:6b:eb:
         70:32:fd:69:ae:86:e7:94:f0:7f:6f:e8:92:b6:a2:78:ab:ab:
         38:1a:70:f3:a6:c1:70:0a:01:d3:7d:23:63:a2:50:8c:d6:36:
         57:08:b2:12:64:a5:0c:4f:f2:80:53:be:b7:c3:44:60:fb:f9:
         09:e8:70:df:01:5d:1d:14:2a:c6:ba:4e:3a:b0:ff:f9:e7:d6:
         07:6a:f8:54:6f:92:56:59:72:9d:3f:5d:42:85:c5:84:cb:97:
         82:58:b9:03:f6:9e:e0:0c:6d:85:d7:c6:0e:72:11:53:fe:d0:
         46:0b:62:97:ae:2c:bd:94:65:ab:f0:38:72:8f:ed:62:04:24:
         6b:c2:0d:c3:1f:36:c2:3e:a1:42:1a:52:a9:d0:30:e4:53:e1:
         b5:f6:ab:52:f5:d0:9d:2a:77:d3:24:61:32:41:f4:31:a4:c5:
         78:cd:f1:4a:e2:6a:d3:ab:45:6e:55:2d:97:46:d3:01:2c:ff:
         86:61:2f:10:2e:f3:43:10:50:2d:81:b1:30:fb:2e:fe:b4:73:
         d4:3d:bb:88:7d:db:73:e3:e9:86:a0:65:51:66:de:b8:26:49:
         ee:af:c7:00
-----BEGIN CERTIFICATE-----
MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEXkJaQZXcKup3c9rCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDUxNjExMDYxM1oXDTI2MDgxNjIxNTU1NVowLzEtMCsGA1UEAxMk
OWRlMmUwYzItMjcwNy00MmM5LWIyNmQtNTlmZTdkMGIzNDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcZepO2m8MLys6I8u3AH490JT/jqPuhKVTtj
6q9TJgJVfdCdVG4QQiKFxKermJEaHPkWwlQCD8jpL8leTUvl3ZuJNHvrXTlVFORQ
Zkb50ZdEg7c0haquz7b7Bj3OPRTatQ7Q1UBOvmmZd1qzHk0hyiW1aoLoTzzAlq6f
I1xPSTxX4TlFqjR0sdMyf5Aln4wh7I3YTeAArjbIoiKkQZ23G6JmJ5nhMI/afwYl
PkYx2TUYyfZS+LCyoFZec8IQ4kSQKtzUT4GVZ4ZB8CXczU/I6XThA+zigXDrA7nP
nleNTP00kjb+wqS46UQ0roxCFFMgi6+gmk2v8kLPln8w2/J+CwIDAQABo4IEHTCC
BBkwHQYDVR0OBBYEFEQkCYPW/uUXXWC9rNyzJ+XMxb8hMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85
ZGUyZTBjMi0yNzA3LTQyYzktYjI2ZC01OWZlN2QwYjM0MmYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzlkZTJlMGMyLTI3MDctNDJjOS1i
MjZkLTU5ZmU3ZDBiMzQyZi85ZGUyZTBjMi0yNzA3LTQyYzktYjI2ZC01OWZlN2Qw
YjM0MmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAmAvjvADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMGGLYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAWublozeYPdb5DsdmWW360NjqVFVoDVCTS7F8U7rh5yIC
3WvrcDL9aa6G55Twf2/okraieKurOBpw86bBcAoB030jY6JQjNY2VwiyEmSlDE/y
gFO+t8NEYPv5Cehw3wFdHRQqxrpOOrD/+efWB2r4VG+SVllynT9dQoXFhMuXgli5
A/ae4AxthdfGDnIRU/7QRgtil64svZRlq/A4co/tYgQka8INwx82wj6hQhpSqdAw
5FPhtfarUvXQnSp30yRhMkH0MaTFeM3xSuJq06tFblUtl0bTASz/hmEvEC7zQxBQ
LYGxMPsu/rRz1D27iH3bc+PphqBlUWbeuCZJ7q/HAA==
-----END CERTIFICATE-----