Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb.cer
File:                     a2accc41-8d57-4ddb-9f27-d50fabfdaeeb.cer (raw, json)
Hash identifier:          mQOUXvJXDEy87sogIT6r2aqdIfIg9sJfPA9nAfXHWgk=
Subject key identifier:   E4:58:71:45:ED:A0:07:E2:0B:58:86:3D:15:71:B2:F4:92:F8:AB:8B
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845CEC6948B9AC212FC978D9580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 08 May 2024 19:22:43 +0000
Certificate not after:    Tue 11 Aug 2026 19:22:43 +0000
Subordinate resources:    IP: 199.26.104.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:c6:94:8b:9a:c2:12:fc:97:8d:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May  8 19:22:43 2024 GMT
            Not After : Aug 11 19:22:43 2026 GMT
        Subject: CN=a2accc41-8d57-4ddb-9f27-d50fabfdaeeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:48:5e:fa:da:51:87:3b:d4:6f:dc:93:b9:6e:
                    b3:d1:39:4e:57:c0:13:ac:90:2d:7b:10:7a:66:c0:
                    ab:a0:6f:c1:73:79:93:fc:7a:bd:9d:13:f4:6c:d3:
                    2c:01:bc:82:b9:7f:fa:46:17:62:5c:8c:e7:6d:19:
                    7a:fe:d2:d5:c2:0e:b0:92:9c:b4:51:f4:7e:35:24:
                    62:35:18:15:5a:62:31:5e:4f:41:b4:28:b4:2b:84:
                    ac:1d:d7:8e:26:00:60:97:e8:9f:8f:7c:41:37:bc:
                    81:62:bd:c4:94:f8:b7:a3:7d:4f:c6:0c:9b:85:1a:
                    e1:52:38:4a:c1:35:89:69:c7:5b:bd:44:32:28:01:
                    de:79:0e:f0:0e:d0:1b:7f:be:b3:5a:2e:82:e6:f6:
                    09:e7:17:4d:cc:81:d3:b3:6f:0e:36:51:a0:7e:d0:
                    1b:9b:b4:24:02:12:5a:95:1c:2a:8f:e4:3d:d2:e1:
                    0c:fd:74:b6:90:e6:db:c5:81:24:6b:cc:5f:d2:2d:
                    f5:a6:61:e4:69:e0:49:d1:3d:38:c2:62:7f:1f:5a:
                    6d:34:77:ea:e2:d2:72:21:0b:b8:8e:c3:33:a9:ab:
                    cf:69:cd:81:03:19:51:1d:6f:d6:a8:b1:ff:f3:0f:
                    d4:01:7a:43:29:65:b0:09:a1:2c:d3:03:f7:7f:09:
                    b9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:58:71:45:ED:A0:07:E2:0B:58:86:3D:15:71:B2:F4:92:F8:AB:8B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.26.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:2a:a6:f7:df:af:dd:39:62:bf:c9:bf:2a:54:ce:ae:df:f8:
         4e:8c:28:1c:3d:3a:e9:95:a7:32:1c:cd:0f:60:cb:66:82:20:
         1b:60:c1:9a:61:9f:fb:12:e7:9c:06:cc:8f:36:cb:9a:da:57:
         9b:8a:86:7b:06:57:e0:3f:0f:68:5b:f4:24:f4:ba:c5:ce:48:
         b4:88:bd:45:78:2c:1d:f3:a8:4d:da:36:fc:ef:8c:d9:e7:44:
         2e:6b:d4:9f:50:2c:5d:a8:ed:d5:fa:ba:0f:e0:5a:c3:52:d9:
         a6:3b:06:d4:f4:ea:61:2a:b7:f8:01:5c:25:83:90:29:cb:3e:
         22:78:61:e5:96:34:64:af:79:90:10:d5:b4:a2:c0:ab:e3:4c:
         7b:00:0f:26:19:5d:16:5c:3d:ec:d0:8f:0b:3d:ce:a5:af:9b:
         77:ee:1a:d1:4d:89:03:b0:6f:d2:e3:61:33:fc:91:e0:f0:75:
         34:25:e7:17:95:45:f3:d3:f9:06:f9:bf:79:a3:26:68:aa:55:
         d6:9b:b8:3e:d8:b0:3f:ed:12:c6:98:bd:b1:fc:51:be:e5:0f:
         9b:4e:42:95:fa:6d:52:67:18:d7:e8:0b:03:92:d2:83:7d:28:
         99:17:38:fe:23:0d:35:9e:dc:5a:15:60:20:6f:1a:7f:03:b7:
         b6:ce:a5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----