Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca.cer
File:                     98ba8361-2ba5-4f99-8d20-428c3755f1ca.cer (raw, json)
Hash identifier:          rD3QCJKeRC8rqMYAITq6SKqxUlMPqR2hjEfSLT1+sp8=
Subject key identifier:   33:D1:19:34:A5:EC:21:4F:88:CD:4C:02:55:98:5E:76:A5:1E:92:5C
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858482C9D8CE18A7378402F683430
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/98ba8361-2ba5-4f99-8d20-428c3755f1ca.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 11 Dec 2024 19:39:54 +0000
Certificate not after:    Tue 16 Mar 2027 18:39:54 +0000
Subordinate resources:    IP: 208.64.160.0/22
                          IP: 2602:fccc::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:9d:8c:e1:8a:73:78:40:2f:68:34:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Dec 11 19:39:54 2024 GMT
            Not After : Mar 16 18:39:54 2027 GMT
        Subject: CN=98ba8361-2ba5-4f99-8d20-428c3755f1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:f1:d9:d6:a7:af:05:0d:76:1c:44:2f:d5:
                    07:b2:bf:e3:01:6b:f4:48:2d:87:1b:a2:bd:00:be:
                    93:2e:9c:eb:8e:62:14:57:63:5f:f7:89:28:8f:de:
                    5e:3b:45:0d:00:8c:e5:9d:6e:a0:d0:4b:87:a0:5e:
                    75:e7:ff:6c:2d:72:14:46:0a:b0:ef:f7:2c:97:91:
                    ca:89:25:3b:4c:13:4f:f7:a9:c2:98:dd:b1:e5:94:
                    b4:33:2c:bd:ed:bd:4d:99:77:8c:a7:63:44:65:21:
                    9e:16:e2:bd:7b:73:68:66:6b:de:f9:6b:8d:61:a9:
                    2f:e4:56:ca:27:31:9a:1d:cd:41:b9:7d:75:83:31:
                    93:98:2c:21:78:80:34:18:56:1c:be:9b:8d:a4:04:
                    36:e4:b6:55:f3:23:91:66:1d:33:d8:71:c2:35:91:
                    7c:70:d4:b4:d6:65:e9:bc:ff:46:40:8b:b6:1f:53:
                    7d:ce:06:8c:1c:e6:0f:2c:8d:70:8c:68:07:ab:85:
                    e0:b5:98:02:5d:82:90:77:ca:a1:71:af:3f:f1:83:
                    83:f2:e2:fc:0e:6b:39:7a:17:ef:c0:61:1c:b1:41:
                    82:21:d2:92:b9:0b:e5:fa:e1:74:00:31:aa:86:b5:
                    2e:0e:ee:08:b2:9e:20:71:32:26:f0:91:63:b4:7d:
                    2f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D1:19:34:A5:EC:21:4F:88:CD:4C:02:55:98:5E:76:A5:1E:92:5C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/98ba8361-2ba5-4f99-8d20-428c3755f1ca.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.160.0/22
                IPv6:
                  2602:fccc::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2a:18:d4:30:c1:0a:79:58:06:39:b5:56:13:a6:16:14:95:
         80:88:ab:a4:d0:bc:68:bf:b6:e7:9b:e4:df:65:62:f4:1b:2b:
         81:0d:89:99:7a:ad:5c:a8:70:06:f4:4d:6f:f4:42:76:e8:eb:
         d0:31:ed:9c:5e:9d:df:f1:96:28:49:7d:8d:d1:ec:49:ec:da:
         36:6d:06:86:a3:b6:b8:2c:f6:9d:c8:0d:2f:19:14:82:d9:4e:
         f4:91:41:37:42:74:30:10:b1:d0:f8:5d:ef:31:ef:07:26:e5:
         f0:41:9b:b8:03:96:be:f4:9b:e9:b7:d3:31:98:11:d4:68:e7:
         f3:90:3c:be:4f:70:fc:bf:16:71:1a:26:d5:2b:e1:53:7c:13:
         c0:ec:f2:0a:c6:38:9f:bf:09:28:79:d0:84:81:23:1f:c6:79:
         dd:21:80:1c:cd:3b:a3:9a:54:ef:0f:81:7b:7e:39:fd:8f:c9:
         dc:e6:65:08:0c:bd:83:ea:ca:a5:c8:ed:0d:f4:38:1d:4c:2c:
         e2:a2:4c:4b:46:d6:6f:29:b7:f0:fc:92:1e:99:be:a6:a8:dc:
         bc:b4:1e:40:6b:90:b0:8d:ce:c7:38:a0:88:06:97:2e:1f:f6:
         52:8f:57:29:b5:b5:9f:b3:b5:22:ac:75:c2:80:da:72:86:d3:
         4d:81:61:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----