Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c443aaa2-f5bd-4c19-9faa-74719a27410a.cer
File:                     c443aaa2-f5bd-4c19-9faa-74719a27410a.cer (raw, json)
Hash identifier:          Xdp9g+PvxCFuxATZfD66syX2ld486GnAmiaTEUqGXxU=
Subject key identifier:   0A:FC:2B:C7:1E:CC:5A:BC:D8:A6:67:03:FD:08:82:F3:D2:3A:16:F6
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846CF88F14A589357EEDDCC6820
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c443aaa2-f5bd-4c19-9faa-74719a27410a/c443aaa2-f5bd-4c19-9faa-74719a27410a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c443aaa2-f5bd-4c19-9faa-74719a27410a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 08 Aug 2024 18:41:16 +0000
Certificate not after:    Wed 11 Nov 2026 19:41:16 +0000
Subordinate resources:    IP: 192.133.26.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:cf:88:f1:4a:58:93:57:ee:dd:cc:68:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Aug  8 18:41:16 2024 GMT
            Not After : Nov 11 19:41:16 2026 GMT
        Subject: CN=c443aaa2-f5bd-4c19-9faa-74719a27410a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:69:3e:d9:38:f7:ed:50:4a:da:32:5c:c8:41:
                    31:19:2f:f3:77:c2:a9:b8:7b:77:d9:c9:5e:3f:be:
                    3b:3c:1c:f1:44:46:bf:e1:66:df:4e:c6:5f:6a:2d:
                    da:ca:7d:2d:cf:ac:26:38:a7:80:4b:6c:e4:d0:5c:
                    fa:9c:8b:51:bf:8d:a6:66:2e:99:a8:bd:7a:ec:91:
                    c8:2e:89:64:ac:01:17:ad:fd:71:05:50:9c:ce:78:
                    33:48:c3:c4:73:08:64:c2:46:e5:55:09:bd:d7:6f:
                    95:ac:b7:fe:f8:37:9b:28:cd:14:6a:93:7e:18:eb:
                    90:60:23:06:e4:96:fa:55:72:2d:e3:28:5b:3a:9e:
                    8c:53:0e:07:d3:ec:b3:df:52:3b:c6:fe:82:e6:10:
                    2b:0a:06:8c:ce:4e:4b:64:36:03:b3:72:c1:7e:0e:
                    f9:fc:18:d6:84:2f:a5:e5:18:e2:cf:d1:0c:d4:4d:
                    31:ec:a1:80:93:ae:1f:c5:69:e8:c0:8f:3b:ea:e0:
                    03:75:c8:ea:5d:b9:36:40:c4:fc:aa:34:64:b4:4a:
                    90:43:62:90:65:b0:7e:f1:74:86:ef:46:f4:b3:6c:
                    a6:b5:14:87:af:6e:be:d2:26:66:11:7d:92:5f:ae:
                    6f:5f:71:41:24:bb:9a:9b:d2:96:d7:13:8a:7a:0d:
                    12:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FC:2B:C7:1E:CC:5A:BC:D8:A6:67:03:FD:08:82:F3:D2:3A:16:F6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c443aaa2-f5bd-4c19-9faa-74719a27410a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c443aaa2-f5bd-4c19-9faa-74719a27410a/c443aaa2-f5bd-4c19-9faa-74719a27410a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.133.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ee:b1:fc:24:46:60:60:c7:2d:2e:fa:a8:80:fb:a8:fe:3c:
         d4:95:17:3b:9e:2a:f9:bb:fc:e7:43:67:c3:a0:a9:0a:ba:e8:
         66:82:71:28:9b:e5:fc:d5:47:9f:0e:b7:45:44:df:7a:14:00:
         16:07:91:97:2b:54:17:86:81:7d:6e:ee:8b:e7:72:c9:27:40:
         5a:9e:2c:2b:ab:01:a9:56:44:28:58:92:4e:a3:b4:5c:9c:6e:
         bb:72:18:dd:b7:c4:a3:51:92:7c:93:eb:3d:e1:6c:07:a5:5f:
         85:a1:6a:2a:b8:1e:33:86:18:c2:66:e7:a3:58:16:56:22:e9:
         7e:5c:7f:99:8d:6e:cd:44:2e:56:10:7c:9a:8b:80:e0:01:61:
         06:bf:8b:74:02:ef:4c:da:1a:41:87:0a:97:ab:ad:f3:e9:30:
         72:f7:1c:ad:6f:18:fe:da:c9:26:cc:6b:f4:a3:ba:e9:e3:a6:
         08:6c:e5:ea:1c:8a:15:27:c6:66:0a:ff:6e:73:ee:26:36:9c:
         d5:ba:27:a6:b2:7d:0a:29:07:85:24:89:f1:b3:93:20:3d:af:
         65:59:4f:14:52:1f:fe:2e:eb:26:6c:8a:82:f5:84:c8:2d:8e:
         08:03:78:94:57:cb:4c:39:3e:64:77:df:27:15:7b:8b:2f:c6:
         ac:6d:9c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----