Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
File:                     c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer (raw, json)
Hash identifier:          kU97KqHqiaq+D3UBKYl8GsgohlvkZkkDT6/7vwrg7ps=
Subject key identifier:   1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority key identifier: 45:9A:B2:6F:09:F2:67:EA:36:DF:CB:26:C0:BA:62:26:67:1C:4B:B1
Certificate issuer:       /CN=0a3db4ff-9cd8-4d02-a027-6fa90494a3a1
Certificate serial:       010D0C9F4328583FEDB660D988641BED84477400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
Manifest:                 rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
caRepository:             rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/
Notify URL:               https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/notification.xml
Certificate not before:   Wed 16 Nov 2022 16:38:30 +0000
Certificate not after:    Tue 18 Feb 2025 16:38:30 +0000
Subordinate resources:    IP: 2606:f40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ed:b6:60:d9:88:64:1b:ed:84:47:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a3db4ff-9cd8-4d02-a027-6fa90494a3a1
        Validity
            Not Before: Nov 16 16:38:30 2022 GMT
            Not After : Feb 18 16:38:30 2025 GMT
        Subject: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:36:c0:f5:87:50:c5:b3:6d:e2:35:af:cf:98:
                    2e:36:1b:34:0e:6d:1e:15:52:bd:75:dd:db:d3:64:
                    14:f5:81:38:d8:d4:bb:8b:8e:98:7f:bf:ea:a3:cb:
                    ee:f5:5f:7f:c2:ab:c0:63:0d:ff:8b:85:dd:b1:6d:
                    2e:4f:5f:07:90:56:2d:0c:f8:39:a1:e1:fa:8c:59:
                    6a:4d:da:c1:67:2f:25:3b:33:af:fc:9c:05:41:82:
                    10:02:d6:c1:21:b2:b1:23:f5:df:50:c6:ab:1b:54:
                    5c:1c:df:52:8f:60:13:21:c4:a1:8a:21:5d:9e:12:
                    29:d7:dc:9a:7c:eb:24:a7:96:d0:86:70:7c:ec:37:
                    eb:f6:e5:9e:e8:06:ce:55:98:7c:5f:71:88:3f:a9:
                    0b:53:57:f0:71:ef:7b:29:b0:90:1b:82:11:5a:8e:
                    04:ca:de:66:90:b5:b1:a0:32:27:2d:03:7c:78:46:
                    3d:82:de:15:f7:ab:01:3d:1b:5c:8c:a7:c7:1f:62:
                    d2:3a:d5:4f:c1:08:1b:6e:38:16:9d:d0:c8:b2:48:
                    74:89:02:91:3f:e2:c0:8f:22:69:7f:ed:27:04:3f:
                    71:51:78:a5:7c:4d:bf:fc:6d:5f:5b:cf:36:42:9f:
                    0e:93:31:28:8a:ff:35:af:56:b1:74:dc:5a:5c:b3:
                    84:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/
                RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl

            X509v3 Authority Key Identifier:
                keyid:45:9A:B2:6F:09:F2:67:EA:36:DF:CB:26:C0:BA:62:26:67:1C:4B:B1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:18:01:9b:17:13:00:0d:0d:0b:01:00:8b:1e:8b:39:b1:30:
         6a:30:c6:01:ed:38:00:dc:88:45:31:5d:f3:b9:16:36:8c:36:
         4c:f3:46:04:b8:e5:8a:18:ef:c8:c0:ee:9d:83:41:41:fc:38:
         35:62:dd:42:3e:f7:f6:82:ac:de:0d:c8:23:4d:b9:70:ba:ff:
         55:0d:f8:9d:08:a0:d2:59:84:20:e4:95:7e:d6:79:f0:56:2d:
         1a:ca:90:91:66:eb:89:e3:a5:c3:b7:70:b2:35:8e:1b:88:7b:
         b4:63:c3:47:99:3f:dd:b8:3f:2e:b2:59:84:73:64:4a:ea:4e:
         9f:93:e0:54:4e:21:6d:b7:8a:9c:56:98:8b:3c:c2:5b:c0:3b:
         a8:a3:b5:70:68:55:63:8e:d6:d6:ae:5f:9f:76:04:22:c9:c7:
         af:34:dc:0d:1f:b6:32:dc:6c:16:bc:53:d9:65:38:b2:da:24:
         d2:e9:13:72:1a:eb:00:87:49:b5:8f:5a:b5:58:28:eb:e5:2a:
         0e:4a:3f:e1:4b:e6:f3:c4:b8:e9:79:ec:a5:46:f5:ff:f8:4c:
         af:b2:34:ac:08:f7:f9:13:79:d0:14:e2:b0:7e:2a:81:3c:3b:
         63:0d:66:bf:b6:de:45:77:7f:87:6b:98:7e:af:f4:cd:00:e6:
         67:84:fe:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:15:45 2024 by rpki-client on console-ams.rpki-client.org