Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76.cer
File:                     a9c54416-94b3-40be-9615-08b5725cec76.cer (raw, json)
Hash identifier:          vHTXPcpIU3ZlzL+8Xlz7xNaOhMdrzjEwLrdXGQXXNXA=
Subject key identifier:   6A:97:B7:3F:11:6D:FC:7F:0F:7A:9A:A8:2E:89:A9:8E:B1:7C:03:2A
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845ACF8852C1EDF09C8A0B34780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76/a9c54416-94b3-40be-9615-08b5725cec76.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 26 Apr 2024 16:45:51 +0000
Certificate not after:    Thu 30 Jul 2026 16:45:51 +0000
Subordinate resources:    IP: 2602:f90a::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:f8:85:2c:1e:df:09:c8:a0:b3:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Apr 26 16:45:51 2024 GMT
            Not After : Jul 30 16:45:51 2026 GMT
        Subject: CN=a9c54416-94b3-40be-9615-08b5725cec76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:93:6b:29:b2:3f:c1:b5:0d:19:2b:ae:55:
                    34:12:c4:2e:74:09:32:1c:88:52:43:0b:09:82:e0:
                    52:8b:70:7a:8a:57:94:0c:7d:41:32:57:a8:bf:c5:
                    f8:fc:74:c5:12:01:02:95:28:97:9e:97:85:0c:33:
                    70:ee:0b:1f:af:13:2a:e5:9a:2d:e1:55:40:b2:e8:
                    6c:2e:37:5b:53:26:38:b1:13:a5:00:3a:02:be:3e:
                    2c:3b:98:f5:31:55:e5:71:bf:22:58:2e:2a:00:bb:
                    2f:91:99:f8:a8:c8:ee:5e:2a:65:75:e6:48:6f:23:
                    ca:b0:85:f8:05:b2:22:e9:b0:ee:cc:83:6e:91:0e:
                    72:8e:3c:91:2d:b7:08:60:15:bf:03:04:69:67:28:
                    b6:05:4d:33:01:47:36:45:4e:7b:d7:c1:50:7c:ad:
                    6b:b4:c8:2f:61:50:1b:67:88:bf:10:fc:20:4f:e9:
                    1c:48:80:28:f3:83:8b:8a:98:37:a5:b0:42:83:8d:
                    4c:5b:e5:64:8a:ac:7f:ef:35:42:09:90:79:2d:f4:
                    df:a8:f2:d3:63:43:fa:c7:d3:00:a3:32:84:b7:77:
                    70:7f:9f:92:3f:1a:8e:5e:d3:5d:0e:33:79:fe:19:
                    e5:e4:7f:bd:d4:90:0c:10:f0:b6:b2:93:9a:86:60:
                    eb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:97:B7:3F:11:6D:FC:7F:0F:7A:9A:A8:2E:89:A9:8E:B1:7C:03:2A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76/a9c54416-94b3-40be-9615-08b5725cec76.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f90a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:54:96:c5:2b:d6:04:d3:a9:04:a3:5d:60:e8:fa:a4:95:10:
         da:b5:29:88:50:71:44:c5:da:76:93:64:d1:e7:e9:fd:e4:37:
         8e:64:11:d5:6e:1d:78:96:63:1c:9c:e4:d6:2b:cd:13:ec:47:
         75:d4:ae:a7:ad:fe:39:28:fd:4b:1d:13:5e:41:53:b0:e7:2e:
         05:9a:84:ee:d5:36:25:e6:ab:a8:8a:7c:bd:40:29:69:38:17:
         00:df:91:bb:4f:5b:e4:df:b8:32:a9:6f:ad:9f:a2:b9:ab:73:
         c6:b1:08:47:94:1f:26:c0:36:2d:9f:13:71:2e:3b:78:3e:7d:
         49:c1:98:6a:05:06:ec:5e:e6:0d:6e:d3:6d:84:b2:44:ea:94:
         3f:4b:3e:3c:28:3e:4d:31:9a:a6:fe:57:5c:8c:7e:65:90:2f:
         74:aa:df:22:06:30:f4:e7:e3:78:3c:80:c4:13:bc:60:8c:a2:
         ad:9c:6c:21:91:97:7c:4d:96:61:60:a0:e7:f7:ee:8f:07:28:
         b6:d9:55:0b:c9:f9:34:73:a8:8d:26:cc:aa:b5:87:da:e5:49:
         b5:c1:4b:8d:7f:32:ff:85:fd:18:c5:3e:dd:36:8c:15:82:95:
         28:cc:6d:98:e6:05:20:69:4b:eb:a0:35:6c:3f:ce:ca:ad:d7:
         dc:fd:54:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----