Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.cer
File:                     d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.cer (raw, json)
Hash identifier:          NwRN5TnK+f4AZ46FLxaInRT3ljUk/JaPBuCV5pGGb0g=
Subject key identifier:   80:01:2E:93:9F:2C:7B:65:CE:1A:79:3B:CE:88:C5:4C:A1:92:9A:FB
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846425149E83E41FB714E6E1D40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 19 Jun 2024 04:40:09 +0000
Certificate not after:    Tue 22 Sep 2026 04:40:09 +0000
Subordinate resources:    IP: 199.175.42.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:42:51:49:e8:3e:41:fb:71:4e:6e:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 19 04:40:09 2024 GMT
            Not After : Sep 22 04:40:09 2026 GMT
        Subject: CN=d1323e63-bc87-48fa-aebd-d6c6f1b01ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:80:bc:81:f8:c9:cd:47:ad:5c:f8:08:37:93:
                    ac:b6:c5:6b:88:2d:b8:f2:58:a2:35:c1:05:d7:e3:
                    14:64:e1:6e:3b:bd:68:6c:4f:26:44:59:6d:a0:1f:
                    1f:4e:21:36:3d:a6:8d:a1:ec:40:80:0b:c8:37:c6:
                    c8:74:62:a9:54:57:61:54:09:d7:b1:a7:b2:b8:5e:
                    63:9b:0b:95:4d:9d:1d:34:2e:b7:df:02:1e:0d:77:
                    20:22:5b:74:4b:8e:9e:e2:22:6a:6c:5b:c8:67:ce:
                    24:b0:66:59:8e:cd:0c:99:4f:d5:34:9f:e9:c5:bf:
                    7c:6b:cc:c2:4c:eb:2c:36:af:70:b7:64:11:73:8d:
                    e6:80:2b:b0:d7:b7:cd:7e:5f:ca:a5:8e:e6:72:22:
                    28:c1:a0:1f:b0:46:37:ba:16:c2:56:c2:f6:ef:4e:
                    35:75:26:03:8f:ff:45:97:9c:37:fc:e4:ab:d2:db:
                    1f:1e:d8:3a:02:af:c8:73:5a:98:42:d3:32:ef:13:
                    9b:c2:d4:20:e6:43:08:8a:f2:f3:55:20:be:7a:63:
                    4a:9f:30:1f:e2:15:e8:a1:7e:5a:5b:c2:18:8e:df:
                    73:62:d4:f6:c4:5f:4f:d9:72:ce:e3:a5:ac:bb:44:
                    f7:6e:24:a0:83:ab:ed:c2:3f:14:eb:2f:06:e8:f9:
                    44:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:01:2E:93:9F:2C:7B:65:CE:1A:79:3B:CE:88:C5:4C:A1:92:9A:FB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.175.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:2c:6c:0d:57:c5:54:86:a5:6f:7d:3d:cd:1a:34:df:96:b7:
         92:17:f9:5d:15:93:01:59:a5:ef:33:73:92:d6:0c:98:c1:f0:
         74:4a:cc:eb:be:a4:fa:07:8a:ce:fb:0a:7a:10:54:33:83:db:
         6a:d4:d4:2b:6e:0b:72:08:a6:5a:73:00:9c:75:6a:2a:50:69:
         58:94:3d:d9:fb:bd:0a:3e:36:8e:51:39:a5:88:66:5d:4a:2d:
         2a:b4:71:6b:b9:1b:b9:23:c7:ae:41:af:86:bc:f8:fb:0e:c0:
         ac:6b:cd:43:de:01:d1:62:66:e3:83:55:5d:ec:1e:87:31:c8:
         5f:3f:b2:0b:cc:0c:c6:c4:5d:ad:c9:22:a1:c3:de:ff:48:10:
         4f:0a:af:f5:c2:a2:85:01:0a:11:36:5c:22:ff:87:a9:0d:32:
         1d:5d:86:93:02:7a:04:30:18:16:c4:44:c9:a8:23:4b:01:55:
         db:7f:4c:dc:89:6a:8f:94:f0:0e:f4:a3:11:70:a5:54:5a:81:
         c7:44:9d:ed:f3:ac:c9:a2:41:f2:6a:c0:85:af:82:45:4a:25:
         c1:50:53:29:b6:54:9a:87:73:38:53:34:5b:be:3a:bc:ae:9a:
         19:48:33:16:79:38:a4:fb:0a:eb:ad:34:e6:2e:03:00:0e:4b:
         92:26:5e:40
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEZCUUnoPkH7cU5uHUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDYxOTA0NDAwOVoXDTI2MDkyMjA0NDAwOVowLzEtMCsGA1UEAxMk
ZDEzMjNlNjMtYmM4Ny00OGZhLWFlYmQtZDZjNmYxYjAxZWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYC8gfjJzUetXPgIN5OstsVriC248liiNcEF
1+MUZOFuO71obE8mRFltoB8fTiE2PaaNoexAgAvIN8bIdGKpVFdhVAnXsaeyuF5j
mwuVTZ0dNC633wIeDXcgIlt0S46e4iJqbFvIZ84ksGZZjs0MmU/VNJ/pxb98a8zC
TOssNq9wt2QRc43mgCuw17fNfl/KpY7mciIowaAfsEY3uhbCVsL27041dSYDj/9F
l5w3/OSr0tsfHtg6Aq/Ic1qYQtMy7xObwtQg5kMIivLzVSC+emNKnzAf4hXooX5a
W8IYjt9zYtT2xF9P2XLO46Wsu0T3biSgg6vtwj8U6y8G6PlElQIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFIABLpOfLHtlzhp5O86IxUyhkpr7MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k
MTMyM2U2My1iYzg3LTQ4ZmEtYWViZC1kNmM2ZjFiMDFlZjUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2QxMzIzZTYzLWJjODctNDhmYS1h
ZWJkLWQ2YzZmMWIwMWVmNS9kMTMyM2U2My1iYzg3LTQ4ZmEtYWViZC1kNmM2ZjFi
MDFlZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADHryowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFixsDVfFVIalb309zRo0
35a3khf5XRWTAVml7zNzktYMmMHwdErM676k+geKzvsKehBUM4PbatTUK24Lcgim
WnMAnHVqKlBpWJQ92fu9Cj42jlE5pYhmXUotKrRxa7kbuSPHrkGvhrz4+w7ArGvN
Q94B0WJm44NVXewehzHIXz+yC8wMxsRdrckiocPe/0gQTwqv9cKihQEKETZcIv+H
qQ0yHV2GkwJ6BDAYFsREyagjSwFV239M3Ilqj5TwDvSjEXClVFqBx0Sd7fOsyaJB
8mrAha+CRUolwVBTKbZUmodzOFM0W746vK6aGUgzFnk4pPsK66005i4DAA5LkiZe
QA==
-----END CERTIFICATE-----