Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59.cer
File:                     2bd61746-13db-450a-8df3-636a3fa01e59.cer (raw, json)
Hash identifier:          rXqC7nzYKYAHrdrRfCJm/4CMcChvc6oEcI1qLR4c88U=
Subject key identifier:   C9:CF:68:36:AA:83:15:BC:79:97:80:C4:38:E9:C1:FF:00:62:F1:E3
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858448E77D0C859D6096B38264080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/2bd61746-13db-450a-8df3-636a3fa01e59.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 Jan 2024 01:45:20 +0000
Certificate not after:    Sun 19 Apr 2026 00:45:20 +0000
Subordinate resources:    AS: 393719
                          IP: 2605:4340::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:8e:77:d0:c8:59:d6:09:6b:38:26:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan 15 01:45:20 2024 GMT
            Not After : Apr 19 00:45:20 2026 GMT
        Subject: CN=2bd61746-13db-450a-8df3-636a3fa01e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:46:49:ee:2a:a9:e2:bf:d2:a2:07:b4:ec:91:
                    bb:ca:41:cc:ea:d5:5e:7a:d1:09:c7:79:26:86:ab:
                    4c:7f:f9:bf:dd:f9:56:0a:08:d9:df:61:b3:6c:3f:
                    dd:0e:43:4b:81:0f:5a:00:db:7e:fa:8b:e6:8e:fe:
                    40:2a:03:71:11:90:7d:0f:f1:04:77:17:8f:c8:b2:
                    0c:66:76:56:c0:e8:ab:3c:2d:e8:91:a3:16:0a:a2:
                    a1:c6:fe:aa:fb:9e:3a:ee:34:6a:e5:68:a8:0d:47:
                    b9:18:12:b0:85:6d:6f:b6:ee:e5:91:7e:ec:8e:db:
                    a3:25:d1:f7:99:cf:fd:d4:fc:4d:2a:d1:b3:bf:e5:
                    49:16:92:ca:c6:96:38:fa:da:c1:42:d4:60:32:56:
                    2a:ac:f2:33:c0:23:6a:54:ce:e1:31:c4:13:f6:16:
                    67:8e:e4:0e:e1:3c:eb:ae:c7:5b:70:42:61:d1:8f:
                    f1:19:4e:9e:ce:af:8f:8e:cc:7e:65:49:90:80:69:
                    35:fd:4a:04:1b:ba:8a:59:3c:7d:b3:5e:78:85:98:
                    20:10:9b:82:ac:81:1f:85:18:f5:9e:47:e4:d8:22:
                    2c:1d:fc:27:11:71:d6:2a:40:d7:99:cb:dc:67:c5:
                    a2:2e:bc:96:f7:04:1d:85:7b:44:a3:6c:ee:f4:74:
                    e1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CF:68:36:AA:83:15:BC:79:97:80:C4:38:E9:C1:FF:00:62:F1:E3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/2bd61746-13db-450a-8df3-636a3fa01e59.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393719

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:46:7d:75:4b:c9:9b:64:85:7d:aa:89:38:05:b9:be:f2:1f:
         df:91:14:64:0c:40:cf:34:b4:3e:21:15:57:70:bd:a0:9b:9e:
         e2:c8:cd:61:69:45:d5:48:66:10:81:da:c0:54:a1:41:31:0a:
         95:97:9e:cc:2d:07:44:52:e2:99:f3:80:4a:5e:c5:a5:1a:70:
         41:57:b0:56:7d:11:8e:8d:d1:01:12:fb:4d:48:bf:35:c0:25:
         96:ff:d6:ba:d0:59:6e:a7:9b:5f:01:8c:87:19:9f:b2:09:ef:
         3d:88:9c:72:29:73:b0:cc:19:7b:8b:1d:1e:99:f9:9d:84:81:
         95:5e:58:aa:99:84:37:99:ce:fe:c4:b9:35:2c:95:73:1c:4d:
         dc:c4:73:2f:f5:0b:48:67:49:31:7c:04:13:47:d8:08:ea:4a:
         0f:85:76:21:c1:59:9b:58:c6:c2:2d:63:1e:85:a3:0d:f1:f6:
         6c:ea:8a:f3:f3:47:9e:24:1c:44:5b:3a:d0:88:a0:c2:8e:72:
         dd:fe:d9:11:93:75:c8:1e:e3:e9:5b:6d:a3:0c:02:71:4b:9c:
         92:83:bc:f6:47:20:33:2f:04:78:25:60:f7:7f:58:5e:f3:8e:
         32:ca:b0:30:32:c6:45:9c:4e:66:df:f0:9a:59:18:c7:74:7d:
         94:f4:0a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----