Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea.cer
File:                     69036fae-75b3-45ce-a305-23f9913eccea.cer (raw, json)
Hash identifier:          6jxrDhfLU/JYU1VBU04eaCTqpFKe3C0tMBi5jrPPtak=
Subject key identifier:   CB:D6:6E:5B:1D:2E:A6:E2:65:A3:7D:C4:71:44:3F:D7:05:48:C0:01
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584682127C65761DEEDCA3BF0A40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/69036fae-75b3-45ce-a305-23f9913eccea.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 12 Jul 2024 00:45:20 +0000
Certificate not after:    Thu 15 Oct 2026 00:45:20 +0000
Subordinate resources:    IP: 199.16.172.0/22
                          IP: 2602:fdd7::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:82:12:7c:65:76:1d:ee:dc:a3:bf:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jul 12 00:45:20 2024 GMT
            Not After : Oct 15 00:45:20 2026 GMT
        Subject: CN=69036fae-75b3-45ce-a305-23f9913eccea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:2e:e5:1f:2f:9c:38:c6:98:3f:62:4f:67:
                    9b:38:57:5e:c6:0d:2d:d4:95:cf:ce:71:b5:96:aa:
                    6c:d4:b7:09:cf:38:29:99:93:9b:13:0b:4b:3a:27:
                    0f:d6:52:2b:01:87:b2:74:70:4a:27:29:eb:04:a4:
                    9e:5a:a6:bc:af:1c:d7:e6:7a:0a:12:f6:cd:a9:11:
                    7f:12:7c:32:06:2c:ba:b7:b1:fa:75:3d:ca:73:92:
                    ad:71:03:fd:8b:7a:83:1b:9a:4e:f2:91:4b:88:19:
                    16:40:14:9e:de:a9:54:3b:d7:c4:89:dd:0e:eb:0e:
                    25:f8:7d:b7:5d:86:cd:aa:90:e9:53:af:56:6b:8c:
                    5f:59:30:0d:0d:7b:ad:87:21:18:bc:31:cd:9d:cd:
                    c6:81:c3:7b:78:ca:78:5c:e1:3a:3b:d8:25:ab:a6:
                    2e:a0:21:e2:43:2d:a8:7f:be:cf:99:8f:6d:26:00:
                    0f:6d:46:29:cb:76:92:4f:15:60:9c:53:c5:93:76:
                    44:12:1d:21:47:a8:39:71:05:f3:e3:4c:e1:da:11:
                    6d:3f:b4:f8:fd:4e:e5:88:2c:f7:dd:d9:c3:04:04:
                    f2:d9:66:14:28:09:c7:cc:f7:ac:25:ce:3a:f5:9c:
                    5c:e3:28:64:36:79:e6:89:45:de:ff:a2:54:3b:a4:
                    0c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D6:6E:5B:1D:2E:A6:E2:65:A3:7D:C4:71:44:3F:D7:05:48:C0:01
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/69036fae-75b3-45ce-a305-23f9913eccea.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.16.172.0/22
                IPv6:
                  2602:fdd7::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:4a:61:be:0d:cf:a4:ba:84:42:4d:e1:74:17:16:e4:75:4f:
         a3:a6:90:8d:18:d6:36:4f:5c:70:85:e1:79:59:b6:5a:e8:5c:
         82:f0:c3:9b:a9:a7:d4:a7:d2:bc:cf:0d:3f:2a:64:c7:13:a2:
         fe:76:b8:27:3b:57:e6:d5:87:00:e1:47:b0:e4:07:5e:6b:db:
         54:e3:6d:3b:26:74:77:d4:8f:2a:27:95:c8:e1:35:c7:5c:4c:
         8b:22:34:c6:94:4a:1c:43:e2:bd:d0:7b:d9:20:11:bc:10:eb:
         b2:2f:48:d4:a7:2a:0d:1f:ab:8a:11:ae:14:81:10:d2:67:7e:
         c9:78:e4:63:b0:60:e9:da:f2:89:77:fd:a5:9b:dc:35:57:52:
         dd:34:f6:a2:fc:63:37:9d:d2:fa:2e:22:d5:00:e8:5e:11:e4:
         b5:88:33:0f:d7:c5:e9:99:2b:48:c3:09:63:09:fb:72:db:de:
         ac:15:26:45:e5:ef:bc:70:10:0b:38:e1:d2:07:99:ec:ac:34:
         59:6f:73:b9:4e:cb:4c:85:78:9e:1b:e2:6b:21:28:7b:44:34:
         ec:c6:2c:fa:62:3b:7b:da:ae:17:5d:98:e6:ab:56:04:8f:e4:
         79:2f:96:f5:83:6a:79:a0:99:cd:9a:77:9f:4d:7a:66:30:4e:
         6e:db:a1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----