Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.cer
File:                     d414bd1e-af01-4ff2-92ae-ece02a34cdb9.cer (raw, json)
Hash identifier:          rMu2aY7400oH+BZq3qHLrh910sGbiTwH7XBivkEh4XM=
Subject key identifier:   16:0E:3F:D9:3C:76:D6:B7:2E:B4:AF:CB:5F:C8:99:38:12:AC:7A:09
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845C8D1876C78128108DF06A040
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 06 May 2024 16:09:55 +0000
Certificate not after:    Sun 09 Aug 2026 16:09:55 +0000
Subordinate resources:    AS: 26141
                          IP: 2607:a2c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:d1:87:6c:78:12:81:08:df:06:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May  6 16:09:55 2024 GMT
            Not After : Aug  9 16:09:55 2026 GMT
        Subject: CN=d414bd1e-af01-4ff2-92ae-ece02a34cdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:64:6e:1f:7d:9d:e9:8f:91:be:22:58:ec:8d:
                    ef:dd:20:81:aa:78:55:55:8a:91:a7:63:8a:37:67:
                    5d:a3:bf:c1:f5:01:5f:c4:d5:99:7b:e6:fb:28:d3:
                    99:5a:8e:04:60:65:1e:1f:9d:98:06:34:50:2c:25:
                    3c:8b:15:74:5f:67:30:68:f2:4a:96:e2:83:64:a7:
                    7a:2a:49:7a:82:ac:6f:93:92:0a:eb:8c:76:49:f5:
                    e9:f0:f5:bc:99:22:8a:14:b6:83:3f:03:c6:4b:56:
                    36:73:1b:ef:dd:be:4b:6d:e7:cb:76:7d:71:1f:3a:
                    86:a8:02:fe:ed:63:b2:89:06:a3:d6:f1:9f:70:28:
                    1b:3d:73:a6:d1:04:bb:21:7e:e6:65:3a:4d:91:6a:
                    df:a1:eb:e8:9a:ff:3f:9e:46:a0:85:2e:33:2c:fd:
                    c4:3e:64:a2:dd:48:e7:be:fd:d1:9b:c1:b2:33:10:
                    50:02:9d:b3:25:44:ac:d5:ca:fb:9a:11:a1:ac:a0:
                    da:fb:69:11:f0:5b:ac:84:4a:14:d6:34:59:02:e9:
                    27:9e:98:c5:91:5c:0d:72:7a:92:24:a7:9a:ce:ee:
                    e3:3a:fd:60:d6:d4:be:cd:ff:0e:14:5e:ff:c9:fa:
                    34:ca:e1:96:d6:a7:7c:a6:80:91:bc:d5:c1:c8:b2:
                    3c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0E:3F:D9:3C:76:D6:B7:2E:B4:AF:CB:5F:C8:99:38:12:AC:7A:09
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a2c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26141

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:7e:5f:b6:13:8b:72:56:f2:0b:bf:7d:35:48:50:72:1e:f9:
         14:39:34:97:ae:49:80:c1:c1:e9:ce:06:c0:ac:d1:80:19:4a:
         b9:16:9a:1a:00:f9:a3:b9:32:a8:66:f1:e5:37:2b:67:3a:e0:
         61:a6:2d:6a:b2:0e:c9:92:ce:04:f0:51:86:61:e8:2c:e2:e3:
         7b:ca:57:4f:69:5c:81:de:48:f4:b4:e3:d7:19:95:96:96:38:
         b3:e3:f2:fc:5e:27:03:77:e8:cb:44:ad:8e:6e:54:ea:ec:50:
         ff:1a:d5:13:9f:12:e3:24:5f:71:8c:47:5e:a7:d0:c1:45:fb:
         35:75:6e:22:4a:7a:e7:c0:3f:a1:ff:77:7b:10:fe:36:02:f0:
         c8:a3:28:0f:ee:be:33:35:16:3c:5e:35:38:9c:89:0d:6c:ce:
         b3:b7:ee:92:81:18:1d:dc:9f:3c:13:6a:8d:13:37:19:c6:02:
         12:ca:ae:b6:61:ed:11:e1:64:c1:83:2c:ba:20:e7:9a:41:ac:
         89:81:0d:ef:ef:70:08:e6:22:cc:e3:94:b1:15:a3:3c:95:cb:
         5c:3f:1a:92:1d:e3:96:69:0f:a6:63:86:8b:fb:1c:8a:fe:45:
         7b:71:87:b9:3e:4b:16:dd:89:b6:b8:5f:c8:6c:02:e7:cc:77:
         84:9f:66:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----