Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf.cer
File:                     c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf.cer (raw, json)
Hash identifier:          BK3C1b3A4ydzB0lxQOncB1I2avc69id8A8cDOmE3Cvo=
Subject key identifier:   44:40:1E:82:DE:11:D9:4E:9F:9E:0A:D7:F7:27:05:0F:E5:F4:7B:27
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285842CE87405CDC38B93053754AD0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 07 Aug 2023 14:54:18 +0000
Certificate not after:    Fri 12 Sep 2025 00:45:16 +0000
Subordinate resources:    IP: 2602:80d:3000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ce:87:40:5c:dc:38:b9:30:53:75:4a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Aug  7 14:54:18 2023 GMT
            Not After : Sep 12 00:45:16 2025 GMT
        Subject: CN=c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6c:29:64:cf:65:67:1e:90:02:fb:d6:04:13:
                    f5:68:4c:36:e4:8b:1d:e8:d2:24:1f:39:bb:68:db:
                    87:4c:b6:78:be:0d:d3:db:82:ce:27:93:0a:01:1d:
                    85:92:64:75:90:14:6e:52:e5:b7:3e:7e:36:bb:8b:
                    17:69:3a:16:45:7a:df:ea:a0:bf:11:74:6b:69:0c:
                    ff:6b:bf:b5:c8:3f:b5:a2:60:49:10:36:86:73:0c:
                    4a:3d:2c:96:e6:fb:73:ea:8d:ed:b3:6c:48:06:df:
                    de:21:4a:0a:51:5b:04:31:3f:cb:db:d8:e2:8a:1b:
                    7e:0b:ba:ce:e9:ef:23:c2:43:77:55:9b:80:f0:e1:
                    a4:e6:69:62:0b:16:0c:22:53:db:6d:1c:4a:64:cd:
                    80:82:e9:ad:9a:19:db:d2:91:6c:ef:65:94:34:52:
                    e5:9f:5b:58:6a:32:86:9c:13:5f:32:66:ef:9c:91:
                    ef:b7:5f:3e:9c:5b:30:d5:f9:6d:2a:9d:9c:23:b6:
                    38:3a:0d:38:6f:21:e0:fa:4b:34:39:c8:5f:16:32:
                    48:9d:77:12:1f:3b:58:99:2c:76:0a:92:52:6b:bf:
                    b9:2f:ec:74:1b:dd:e8:c9:5e:5e:e7:61:5c:f3:93:
                    c3:37:da:b1:b8:1e:c8:34:00:b0:9e:61:ca:67:87:
                    af:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:40:1E:82:DE:11:D9:4E:9F:9E:0A:D7:F7:27:05:0F:E5:F4:7B:27
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80d:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:be:ab:12:71:bf:33:2b:ce:e2:69:12:44:14:98:b9:16:be:
         9f:62:2d:e8:f8:69:36:5a:ab:3c:97:e4:12:86:e3:40:5a:b9:
         31:cd:a4:ff:86:c1:05:62:1c:5f:ae:6a:71:b1:04:8f:a2:75:
         41:78:54:89:03:e2:c0:88:37:e1:72:8d:cf:46:a9:5b:e0:95:
         1b:8f:be:31:33:52:1e:4a:fc:a2:b2:49:d3:61:0c:83:bd:33:
         8d:3c:b3:ce:74:06:af:1c:6a:0e:20:f2:23:69:34:e3:05:ba:
         f3:89:02:c8:89:0f:66:20:97:e3:36:ef:4b:2e:27:86:7e:62:
         b3:dd:3e:80:9e:17:be:32:00:8a:7f:12:4e:d5:41:1e:ba:4b:
         45:13:34:28:8c:72:f2:db:aa:e7:7a:4b:35:53:d3:82:d5:f8:
         24:74:dd:ac:9c:2b:f9:a5:db:30:99:91:55:04:86:73:09:57:
         db:91:92:93:97:30:4e:7a:33:41:db:4c:ae:83:48:68:09:a7:
         00:78:c4:6c:da:dd:68:42:c2:84:5a:10:c8:51:10:67:39:f2:
         4a:28:56:3c:3a:c4:f0:0d:ab:48:5c:85:57:4a:01:3f:3a:4d:
         56:c1:e8:62:07:79:dd:f5:e5:5a:8d:5b:47:5b:56:20:f4:14:
         a0:c9:6d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----