Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07.cer
File:                     76025b2c-a5d0-4f94-a97d-21d8b8245b07.cer (raw, json)
Hash identifier:          /cN378KU7rcWBXii6lYCZ3dvBPx9ImoFnHJMELBfChM=
Subject key identifier:   F3:CB:67:A8:94:C6:F6:22:66:49:6C:57:9E:A1:99:C2:8C:50:CC:03
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858466E87B1C79369A5E6A80BEE20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07/76025b2c-a5d0-4f94-a97d-21d8b8245b07.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 05 Jul 2024 00:45:20 +0000
Certificate not after:    Thu 08 Oct 2026 00:45:20 +0000
Subordinate resources:    IP: 136.22.6.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:6e:87:b1:c7:93:69:a5:e6:a8:0b:ee:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jul  5 00:45:20 2024 GMT
            Not After : Oct  8 00:45:20 2026 GMT
        Subject: CN=76025b2c-a5d0-4f94-a97d-21d8b8245b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:98:d4:61:48:09:ee:a5:2d:62:43:90:4f:e8:
                    65:c3:8e:65:66:dc:d3:f6:f8:29:6f:b4:52:97:ca:
                    d4:27:59:d0:00:f6:59:f2:64:bf:c4:a2:af:8d:c0:
                    a2:43:8a:e3:5c:b8:6b:42:4e:77:c1:45:17:4b:7c:
                    83:1d:d5:bc:19:c8:13:bb:7e:ef:59:68:51:d1:bc:
                    9b:01:bc:07:64:53:3b:44:22:ef:c6:62:b1:eb:32:
                    d2:c5:4d:fb:8e:3f:5b:35:9f:d7:9e:51:60:f8:70:
                    b3:e3:17:ff:ea:70:f4:49:ad:0a:e9:5d:ce:a4:a6:
                    d9:0f:7d:15:85:1c:7a:ee:38:32:c7:f3:25:b8:ec:
                    09:d3:55:45:9e:32:da:08:47:8c:dc:77:01:cd:b8:
                    33:31:26:bc:f7:fc:ff:02:80:f4:d2:28:43:ac:6f:
                    c5:ef:73:13:8a:e0:0d:c9:75:fb:ca:bf:b8:c1:a6:
                    bd:9b:86:f7:70:ab:03:83:2c:67:4c:6b:f2:16:3d:
                    86:79:d5:57:5b:51:95:e6:38:52:48:7a:02:4d:d8:
                    b8:08:e8:f5:58:00:eb:dd:a1:c7:33:64:a0:2f:94:
                    05:c5:d3:45:08:cf:89:84:ec:92:3f:66:fb:b4:71:
                    cf:30:84:c6:61:e0:11:74:3f:82:c3:ac:4e:72:30:
                    57:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CB:67:A8:94:C6:F6:22:66:49:6C:57:9E:A1:99:C2:8C:50:CC:03
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07/76025b2c-a5d0-4f94-a97d-21d8b8245b07.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:0b:d6:57:a6:cf:55:72:63:58:6b:b1:88:53:be:9d:ac:2c:
         56:ae:7c:78:d6:ad:8d:d8:96:5d:00:4c:8c:20:bc:bd:26:f3:
         88:ff:89:01:8e:ed:28:70:a5:fa:21:ac:34:4d:0a:b0:76:d7:
         e2:ca:80:3e:38:92:ce:a4:05:3b:03:bf:0f:28:90:3a:49:c5:
         71:57:4c:1e:92:f9:6a:7b:58:7a:ce:91:cc:a8:8c:df:4b:38:
         03:11:47:57:b9:ce:07:2e:72:8d:8b:84:87:d5:76:52:40:a0:
         16:21:8c:b5:54:77:b6:c5:e2:2b:08:72:0a:b3:42:bf:48:3b:
         47:51:e0:b7:06:6d:6b:be:ae:30:00:3c:14:dc:5f:58:1b:9a:
         00:a1:b5:3c:ed:77:4b:31:86:c3:c7:4a:1f:eb:ba:93:d9:63:
         41:b0:8c:5e:1e:18:31:09:d3:45:34:95:cc:18:b5:d0:dc:07:
         01:e8:36:a7:ed:e5:ff:ea:5b:44:66:d2:24:40:fd:d4:1e:7a:
         ea:32:b3:5b:b4:8b:7f:bc:54:d7:83:b7:18:ea:b6:6e:25:29:
         00:5a:be:52:cb:cd:bb:a4:b3:c7:dd:76:c2:cc:e1:52:f0:c4:
         38:02:de:f5:c0:cf:46:df:45:77:f8:e9:e1:69:a6:57:58:14:
         da:07:1c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----