Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
File:                     c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer (raw, json)
Hash identifier:          vxPSrA4TOqak5gATVBIugyOAop+WrPInZcAXYtQ4DsE=
Subject key identifier:   1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority key identifier: 45:9A:B2:6F:09:F2:67:EA:36:DF:CB:26:C0:BA:62:26:67:1C:4B:B1
Certificate issuer:       /CN=0a3db4ff-9cd8-4d02-a027-6fa90494a3a1
Certificate serial:       010D0C9F432858474F74EFC7D34F333342FE6800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
Manifest:                 rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
caRepository:             rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/
Notify URL:               https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/notification.xml
Certificate not before:   Mon 23 Sep 2024 14:24:24 +0000
Certificate not after:    Sun 27 Dec 2026 15:24:24 +0000
Subordinate resources:    IP: 2606:f40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:74:ef:c7:d3:4f:33:33:42:fe:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a3db4ff-9cd8-4d02-a027-6fa90494a3a1
        Validity
            Not Before: Sep 23 14:24:24 2024 GMT
            Not After : Dec 27 15:24:24 2026 GMT
        Subject: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:36:c0:f5:87:50:c5:b3:6d:e2:35:af:cf:98:
                    2e:36:1b:34:0e:6d:1e:15:52:bd:75:dd:db:d3:64:
                    14:f5:81:38:d8:d4:bb:8b:8e:98:7f:bf:ea:a3:cb:
                    ee:f5:5f:7f:c2:ab:c0:63:0d:ff:8b:85:dd:b1:6d:
                    2e:4f:5f:07:90:56:2d:0c:f8:39:a1:e1:fa:8c:59:
                    6a:4d:da:c1:67:2f:25:3b:33:af:fc:9c:05:41:82:
                    10:02:d6:c1:21:b2:b1:23:f5:df:50:c6:ab:1b:54:
                    5c:1c:df:52:8f:60:13:21:c4:a1:8a:21:5d:9e:12:
                    29:d7:dc:9a:7c:eb:24:a7:96:d0:86:70:7c:ec:37:
                    eb:f6:e5:9e:e8:06:ce:55:98:7c:5f:71:88:3f:a9:
                    0b:53:57:f0:71:ef:7b:29:b0:90:1b:82:11:5a:8e:
                    04:ca:de:66:90:b5:b1:a0:32:27:2d:03:7c:78:46:
                    3d:82:de:15:f7:ab:01:3d:1b:5c:8c:a7:c7:1f:62:
                    d2:3a:d5:4f:c1:08:1b:6e:38:16:9d:d0:c8:b2:48:
                    74:89:02:91:3f:e2:c0:8f:22:69:7f:ed:27:04:3f:
                    71:51:78:a5:7c:4d:bf:fc:6d:5f:5b:cf:36:42:9f:
                    0e:93:31:28:8a:ff:35:af:56:b1:74:dc:5a:5c:b3:
                    84:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/
                RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl

            X509v3 Authority Key Identifier:
                keyid:45:9A:B2:6F:09:F2:67:EA:36:DF:CB:26:C0:BA:62:26:67:1C:4B:B1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:85:7c:41:54:35:9d:bf:c3:ab:a1:b4:fe:21:92:9a:08:0d:
         17:d2:5c:3c:b3:bf:07:d8:f5:e7:3f:34:87:94:f4:a5:ca:4c:
         2e:d2:fb:28:41:2d:4f:f2:71:05:7e:c9:d3:13:a4:1c:c9:f5:
         9e:b4:23:7b:9a:11:69:4c:38:ca:46:bb:02:99:9a:85:09:61:
         b5:f6:d0:1f:ba:62:a3:bd:b6:41:30:92:17:d9:d1:d4:45:a7:
         6b:d3:7e:3e:fd:63:b1:e0:e6:35:28:76:96:13:f5:b6:60:d0:
         54:7f:b3:f1:c4:1b:6c:1e:ba:b2:51:19:bb:71:ce:b1:dd:00:
         08:39:9b:71:67:43:47:4c:6d:81:de:5f:33:13:48:7e:15:46:
         ab:b1:4a:23:04:a7:69:c7:c9:d3:99:ce:13:34:37:7a:8b:65:
         bd:d3:5d:87:0c:00:87:64:de:36:42:8d:ec:dd:0b:71:cf:24:
         eb:eb:4d:4a:14:e3:05:16:9d:d0:e6:63:7c:d2:83:4a:f1:b8:
         ce:c7:87:1b:08:24:51:94:60:ff:88:7d:db:62:6a:cc:5e:dc:
         7a:dc:82:5d:34:ef:bd:42:ce:cf:86:c1:85:c6:9e:48:3b:87:
         8e:aa:3b:e1:16:0b:10:b4:04:52:dc:5b:c2:39:12:03:40:8a:
         64:19:9f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:23 2024 by rpki-client on console-ams.rpki-client.org