Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer
File:                     2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer (raw, json)
Hash identifier:          AD9nkn/4g1zQyP++Wn4YOlsFkIAhLSNmepCuSlM02X4=
Subject key identifier:   9C:27:42:85:58:D4:D6:AA:7D:F7:C5:8B:92:6C:36:9D:A4:85:7F:94
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285841E483528B6D4A1F231C2D85A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Thu 24 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 33194
                          IP: 2620:10:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:52:8b:6d:4a:1f:23:1c:2d:85:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 24 19:06:39 2025 GMT
        Subject: CN=2fb495fa-b5b2-4d47-aab0-bb476ca61963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7c:91:90:bb:86:db:95:43:78:ad:c8:36:e9:
                    69:a1:e2:e0:a0:dc:df:b7:2f:bc:e6:33:f1:14:0f:
                    b6:0e:46:0e:79:31:90:e2:b4:94:4d:e6:df:07:87:
                    66:05:ad:4d:32:24:24:f9:8c:ad:c1:75:d8:d5:de:
                    c2:cd:37:25:4b:7c:c1:bc:8f:e9:88:5a:15:eb:da:
                    df:01:0d:e6:56:5f:7e:9f:95:fa:e1:fe:09:9b:cd:
                    af:67:8a:fb:1c:45:d8:30:97:a5:af:f9:1a:46:1f:
                    93:61:fa:fd:16:d5:e8:3a:f1:af:f4:42:a3:04:86:
                    f3:17:40:fa:f8:05:18:f3:47:ad:55:f3:6c:b5:83:
                    63:a8:ee:c0:78:e7:7d:af:54:d5:5d:9e:2b:74:60:
                    b2:bc:3e:c4:f4:0c:f4:33:f0:fe:ea:3b:53:88:0b:
                    9e:c1:1d:7e:10:d0:4d:7e:96:e0:02:8e:3e:12:df:
                    66:d6:b3:f5:0d:e9:82:5f:4d:bf:b1:9b:2d:ff:28:
                    23:d7:16:b4:1e:3a:e4:ff:dc:33:8a:fa:4d:2c:c6:
                    b3:3b:4c:bc:7d:6c:b5:87:47:83:f3:3e:a2:af:1c:
                    eb:00:7e:d3:2e:90:7c:91:cf:9e:e5:a4:d4:94:38:
                    36:79:8e:53:4e:55:8c:c2:48:ba:7c:a4:ae:04:84:
                    b6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:27:42:85:58:D4:D6:AA:7D:F7:C5:8B:92:6C:36:9D:A4:85:7F:94
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33194

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d2:4a:c5:4a:c4:d7:7f:c4:4a:fc:e4:4e:54:cc:66:42:01:
         ef:ac:90:a4:2f:c8:5d:c9:c9:4a:c3:62:56:88:7b:aa:ea:aa:
         06:bb:c7:72:1a:f1:4a:de:2c:02:fa:09:e8:2c:6c:ec:54:b0:
         c0:cf:76:9e:a1:94:e9:b9:db:b5:ef:d2:57:de:32:e7:d0:9a:
         05:ee:aa:25:af:bd:7b:13:54:e5:ad:86:41:88:d8:3a:98:1e:
         c0:6f:ca:e3:8f:35:22:bc:53:37:75:de:7d:e6:96:0a:e2:37:
         70:72:90:08:85:10:b2:5e:ce:df:19:7f:1a:dc:dc:86:c3:b2:
         0a:6d:e4:4f:38:38:c7:bf:bc:52:66:6a:84:85:56:d3:41:05:
         61:21:06:4e:93:bd:ed:fe:d9:c7:36:09:89:02:83:f8:0e:f2:
         fc:20:16:23:a7:19:dc:f9:b1:c9:ad:1c:58:91:53:5c:1a:87:
         45:48:f4:31:5a:61:7e:ca:5f:ff:4b:b9:ae:b4:dc:9b:ee:29:
         8a:92:41:cb:2b:d3:dd:66:ec:5d:38:c8:f3:72:9c:f1:f5:17:
         8b:b8:72:75:8f:4d:0c:73:47:7d:d3:db:2b:4c:62:ae:9e:e1:
         aa:37:73:51:af:31:71:7c:0f:92:55:d1:30:ca:74:44:02:3a:
         6d:26:da:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:05:14 2024 by rpki-client on console-fra.rpki-client.org