Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ad45a836-43f7-42f2-954b-fbbfc0b6e52b.cer
File:                     ad45a836-43f7-42f2-954b-fbbfc0b6e52b.cer (raw, json)
Hash identifier:          T1nIGpsymRgHK48qCINVaXrcvTS5h4ZJqtevRH9GD9Q=
Subject key identifier:   D2:27:75:15:36:B4:F9:1A:08:BA:02:B8:02:E3:D1:5C:F5:03:B7:68
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858443AB74284866D7C329FCFE680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ad45a836-43f7-42f2-954b-fbbfc0b6e52b/ad45a836-43f7-42f2-954b-fbbfc0b6e52b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ad45a836-43f7-42f2-954b-fbbfc0b6e52b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 16 Dec 2023 01:45:16 +0000
Certificate not after:    Fri 20 Mar 2026 00:45:16 +0000
Subordinate resources:    AS: 30617
                          IP: 2607:3740::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:3a:b7:42:84:86:6d:7c:32:9f:cf:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Dec 16 01:45:16 2023 GMT
            Not After : Mar 20 00:45:16 2026 GMT
        Subject: CN=ad45a836-43f7-42f2-954b-fbbfc0b6e52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:14:4a:86:8a:c2:8a:14:d5:92:36:2c:49:
                    19:28:a3:10:43:9c:92:0c:fd:7a:c1:bd:bb:3e:08:
                    b2:80:bb:ae:c3:be:8b:f9:1e:9b:5e:aa:25:3d:76:
                    78:39:5e:e0:0a:be:72:2e:1a:49:51:00:2b:05:d0:
                    b1:4b:88:18:8e:1a:2e:1d:c5:de:c9:b2:af:20:e0:
                    7f:9e:63:6a:23:53:15:a2:ba:76:6d:86:14:8e:85:
                    07:0e:0c:c5:20:9b:e3:65:ae:47:ee:2e:18:6e:5c:
                    ba:bb:f7:17:3f:6e:b0:39:b0:62:92:9d:15:0e:5f:
                    ec:0f:41:7a:58:2f:13:c0:99:5e:a9:6c:5e:18:ae:
                    74:f9:22:21:77:72:2e:fb:20:7c:de:ef:82:79:d1:
                    bc:b8:b6:cf:01:d7:6f:e4:d1:36:74:9a:69:6b:03:
                    e1:81:53:bf:0f:af:82:25:0d:00:54:ea:5f:96:18:
                    5b:65:d5:ec:2d:77:25:eb:6c:9a:65:5d:9e:af:a3:
                    e0:41:a9:b3:50:90:52:4d:c1:12:15:91:ab:0b:4a:
                    7f:56:46:34:7d:3b:1a:55:0b:fb:c8:1d:63:24:ac:
                    e1:06:bd:a7:77:81:d9:01:b8:80:24:4c:9a:d3:d7:
                    cc:e7:a0:e2:f6:0d:7a:fc:5e:53:30:43:8d:92:1b:
                    47:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:27:75:15:36:B4:F9:1A:08:BA:02:B8:02:E3:D1:5C:F5:03:B7:68
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ad45a836-43f7-42f2-954b-fbbfc0b6e52b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ad45a836-43f7-42f2-954b-fbbfc0b6e52b/ad45a836-43f7-42f2-954b-fbbfc0b6e52b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30617

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b1:f4:b3:f3:23:5f:2e:63:04:43:55:e1:ee:03:95:e2:e8:
         2a:0b:84:44:5f:9b:6b:f9:b3:57:27:b5:df:b3:3a:cb:61:c5:
         e6:79:68:29:fc:00:10:03:bd:ba:7a:84:3e:9d:e4:ae:21:86:
         24:aa:84:ab:03:58:c7:86:06:72:e3:45:12:57:40:0f:7d:b9:
         61:4c:a8:3e:08:fe:0b:e9:3d:f9:01:71:c5:ff:fe:8c:eb:1f:
         cf:97:79:0e:f3:c2:15:26:a3:24:e5:c0:8a:26:fe:f9:81:cd:
         1c:fe:3f:5a:02:20:8d:a8:ac:e2:99:ac:3b:b2:dd:61:5b:3e:
         cd:4d:24:b9:fe:db:a5:a4:3c:f4:ea:6c:2f:76:dc:6c:bc:da:
         c9:16:05:d6:54:cb:1e:56:07:f4:d8:97:29:ba:64:14:87:86:
         ce:fa:4b:46:09:d4:0e:97:63:9f:4e:d2:f2:71:1b:3d:49:f5:
         34:c3:76:a4:ad:68:f6:e4:2b:8c:6c:06:35:c9:cc:87:47:7a:
         aa:15:86:77:f2:a1:08:1b:16:21:f1:00:d0:c9:41:e5:bb:cc:
         7b:9a:26:78:61:6e:d9:bf:50:99:b3:04:d6:42:59:86:f1:d3:
         50:20:f2:94:52:9e:59:96:d9:d6:1d:15:d5:8f:7b:4b:bc:b6:
         c3:74:e9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----