Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0df68c98-3079-4c70-b541-3876a7d543db.cer
File:                     0df68c98-3079-4c70-b541-3876a7d543db.cer (raw, json)
Hash identifier:          22Ih5r0Wnx1JdUiMpAOKG9gbCEsR4cjUUB3xnbZjKqI=
Subject key identifier:   32:B3:E0:6E:B3:71:60:77:E7:D4:B4:D7:7C:E5:7B:92:A3:43:8D:48
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285844AD2D594845F941E70FAF9420
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0df68c98-3079-4c70-b541-3876a7d543db/0df68c98-3079-4c70-b541-3876a7d543db.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0df68c98-3079-4c70-b541-3876a7d543db/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 26 Jan 2024 01:45:21 +0000
Certificate not after:    Thu 30 Apr 2026 00:45:21 +0000
Subordinate resources:    AS: 395111
                          IP: 2602:ff3c::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ad:2d:59:48:45:f9:41:e7:0f:af:94:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan 26 01:45:21 2024 GMT
            Not After : Apr 30 00:45:21 2026 GMT
        Subject: CN=0df68c98-3079-4c70-b541-3876a7d543db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:03:58:f8:e2:d8:7d:d5:7e:a3:38:70:33:ff:
                    e6:47:63:07:8f:1b:b5:4a:49:71:a5:85:26:00:3a:
                    9d:dd:6b:5e:46:11:87:65:84:2c:07:8b:5a:6c:e0:
                    95:9f:76:46:f6:71:7b:17:2e:19:5e:57:1b:40:18:
                    b4:fa:7d:0b:b1:0f:16:6f:57:36:fb:c5:24:c6:cd:
                    43:00:b4:79:df:ca:78:88:8f:5b:3a:c2:7d:a3:c2:
                    90:fc:35:ee:87:cb:18:d9:16:a7:b4:bc:dc:f3:f4:
                    a7:2f:d0:2f:f9:84:09:12:da:2f:62:c9:09:4e:fd:
                    35:9e:fd:e5:71:0c:9f:a2:31:1e:5d:81:79:b0:c6:
                    55:cb:9f:5d:e7:41:09:ae:9e:39:0d:25:df:64:e4:
                    a2:1b:1a:3b:21:0f:91:0c:e4:16:21:6d:07:bc:96:
                    04:bd:6a:d3:e6:7f:16:60:cc:da:f2:1a:74:4a:31:
                    cb:51:82:45:7b:ac:79:ef:b2:8d:b9:46:72:f9:3b:
                    b9:87:d8:d8:17:42:1f:12:6d:17:af:54:5e:76:6f:
                    ec:a8:ac:f9:62:f8:07:81:a4:d2:62:80:b3:c3:54:
                    60:9a:99:a1:34:79:ea:ee:61:b3:24:eb:25:0c:7b:
                    04:37:66:e0:2f:7a:32:37:11:85:92:2e:b8:96:89:
                    f1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B3:E0:6E:B3:71:60:77:E7:D4:B4:D7:7C:E5:7B:92:A3:43:8D:48
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0df68c98-3079-4c70-b541-3876a7d543db/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0df68c98-3079-4c70-b541-3876a7d543db/0df68c98-3079-4c70-b541-3876a7d543db.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff3c::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395111

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d8:0b:1f:30:df:6b:25:a9:fe:b3:16:44:b0:b4:4f:d5:71:
         1e:96:6a:11:46:e1:64:61:b0:a9:a5:2a:89:b7:c6:5d:5a:0a:
         96:a6:4a:62:36:79:b7:ef:4f:66:ee:a0:62:e3:c7:4c:86:86:
         be:a4:99:c5:ff:78:af:73:93:5f:07:29:62:ab:f7:d2:36:71:
         93:32:4e:ad:f5:c7:e0:22:6c:cd:23:26:3c:8a:6a:ee:51:c9:
         47:a7:49:da:05:f7:8c:20:d5:52:23:84:7f:79:c7:22:ce:05:
         ef:ab:7d:ac:1f:8d:da:e0:a1:c4:c4:d3:c9:50:86:ad:9c:da:
         2d:a0:c4:eb:1d:87:5e:18:0c:96:0f:ae:04:43:aa:02:0b:2e:
         e4:9e:10:61:e5:ac:5a:de:c3:42:19:2b:3f:1a:56:ab:14:36:
         be:3e:d6:2b:a8:ab:57:50:b6:c8:05:ee:52:31:30:44:0d:ac:
         df:c2:6a:6d:49:52:e9:a9:3c:36:95:80:d7:80:4a:03:fd:40:
         9f:3a:b1:c8:88:9e:df:25:0a:d7:a8:e7:38:43:ed:fb:c8:2b:
         ef:29:f2:2f:9b:b6:b7:41:c0:57:1f:f4:c1:64:a7:1f:ff:01:
         a8:2c:1b:6f:4b:2a:f8:0a:87:66:37:c1:af:c5:a2:fd:fe:7f:
         0f:7c:f0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----