Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eab06c6-217d-4d40-bf9c-9d1445ba8f3f.cer
File:                     0eab06c6-217d-4d40-bf9c-9d1445ba8f3f.cer (raw, json)
Hash identifier:          fCJkTcXEwWBCarcuGWvmrIUo8HmSUfZ/funhUwawlHc=
Subject key identifier:   5C:5B:BD:6A:74:85:2E:38:9F:5F:D9:36:69:AE:A9:19:78:44:51:79
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328576D51CC73C042CFC16ECD4DC17A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eab06c6-217d-4d40-bf9c-9d1445ba8f3f/0eab06c6-217d-4d40-bf9c-9d1445ba8f3f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eab06c6-217d-4d40-bf9c-9d1445ba8f3f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 26 Mar 2019 14:06:49 +0000
Certificate not after:    Mon 26 Mar 2029 14:06:49 +0000
Subordinate resources:    AS: 6465
                          IP: 204.10.72.0/22
                          IP: 2600:7f00::/28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:cd:4d:c1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Mar 26 14:06:49 2019 GMT
            Not After : Mar 26 14:06:49 2029 GMT
        Subject: CN=0eab06c6-217d-4d40-bf9c-9d1445ba8f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:12:d9:56:11:b5:31:32:e7:95:cd:fe:fa:80:
                    77:68:a4:c1:72:e4:19:9f:17:0d:69:7e:70:a6:5e:
                    ca:1b:b7:87:e5:c3:be:f1:6c:1b:65:57:45:cf:a6:
                    00:3c:07:e1:27:f0:a3:45:4d:34:e7:7b:fd:cc:e4:
                    0b:64:a3:80:7c:8e:dd:29:02:84:1f:31:a8:14:d9:
                    2a:c8:da:25:47:ed:30:38:90:44:3f:b1:ea:93:25:
                    c4:06:f1:e3:ed:44:7f:7a:5e:de:a2:ee:d9:c7:69:
                    48:58:8f:fc:8d:26:6d:d7:50:f8:59:75:45:44:c8:
                    5e:36:a0:0c:2a:d8:a5:09:51:76:a9:4e:a5:72:30:
                    3c:d3:51:ed:1a:94:38:5c:5a:9e:04:a2:12:cb:81:
                    91:54:cf:71:b0:dc:5b:51:4d:0d:90:71:2c:31:0b:
                    6e:fd:69:3f:86:27:f6:53:50:82:28:75:ac:84:1c:
                    c7:61:bd:b5:88:59:d4:7a:08:53:b9:d0:37:37:dc:
                    3c:5d:6b:f3:30:d5:49:c4:8f:76:d9:24:5a:6b:8d:
                    2f:85:4c:26:bf:8d:6d:be:1e:c5:3a:57:90:e4:7a:
                    93:dd:b9:9f:37:87:a0:70:64:6e:ec:b2:d0:c7:2f:
                    76:33:52:b3:7e:c0:9a:fe:97:62:98:e0:3f:0c:15:
                    30:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5B:BD:6A:74:85:2E:38:9F:5F:D9:36:69:AE:A9:19:78:44:51:79
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eab06c6-217d-4d40-bf9c-9d1445ba8f3f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eab06c6-217d-4d40-bf9c-9d1445ba8f3f/0eab06c6-217d-4d40-bf9c-9d1445ba8f3f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.72.0/22
                IPv6:
                  2600:7f00::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6465

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:6f:66:91:60:19:6f:2b:98:0a:e5:de:56:3b:24:81:c3:8e:
         82:85:dc:3a:e9:e9:ad:37:86:fd:d5:9e:01:81:27:60:0d:82:
         66:d4:74:25:a8:43:82:17:dd:c8:8d:8f:35:44:5a:ac:16:33:
         26:96:8c:4d:fd:90:58:5a:9f:96:3a:1a:82:1e:c1:8e:45:cf:
         7e:76:34:17:2a:7f:3b:9f:39:93:6b:e6:0e:af:73:cb:28:e0:
         c1:bf:79:7e:5a:3a:1e:70:ea:42:45:4b:26:ac:bc:16:17:e5:
         c7:bf:ba:4b:0b:33:28:e3:0c:62:f3:88:f5:2e:1d:ba:a0:ea:
         52:c4:ab:93:2b:36:9f:b6:a6:b3:42:3e:3a:18:90:20:fe:5a:
         f9:ee:e6:6e:92:2a:7a:4c:64:0e:79:09:ce:49:25:db:01:11:
         f9:e9:70:1a:80:c9:f3:ca:86:df:d5:c6:46:b4:91:98:32:87:
         dd:4a:21:e6:41:79:5f:9b:fa:35:e0:6d:6e:49:9d:53:46:7c:
         8a:e2:72:eb:a8:ff:37:33:46:46:ca:f6:37:f4:9a:da:2e:d0:
         de:19:53:f7:e7:38:b6:93:d4:0a:0c:8d:38:ca:29:84:f3:65:
         0d:11:f1:2d:64:d1:89:5c:55:7c:a9:74:9d:8c:bd:61:8e:2b:
         14:96:bd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----