Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6.cer
File:                     825ee845-e910-434b-9fb6-239bbc2774f6.cer (raw, json)
Hash identifier:          1J7KUbRNhJFkSHxS2q7UHJukeg22L5c4D4UvqIqerqk=
Subject key identifier:   1B:4E:F9:6F:A3:67:CD:DA:19:D7:FE:34:2A:24:AF:1F:5A:FE:6E:6C
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858454105D0AF2D198F1E57735900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/825ee845-e910-434b-9fb6-239bbc2774f6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 19 Mar 2024 00:45:20 +0000
Certificate not after:    Mon 22 Jun 2026 00:45:20 +0000
Subordinate resources:    IP: 140.192.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:41:05:d0:af:2d:19:8f:1e:57:73:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Mar 19 00:45:20 2024 GMT
            Not After : Jun 22 00:45:20 2026 GMT
        Subject: CN=825ee845-e910-434b-9fb6-239bbc2774f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:ad:45:a0:bd:9e:4d:f3:2a:89:10:fb:6f:
                    78:cf:36:cf:16:b8:26:1c:6a:9d:a0:72:9a:5a:46:
                    59:cf:ab:9d:b6:4a:a3:c2:3c:ce:3c:eb:f5:dc:0b:
                    7e:d4:8c:65:cc:86:f5:d7:37:13:b0:da:cb:e9:57:
                    db:6c:ee:e2:df:8c:cf:cc:35:b3:51:b8:82:f4:a0:
                    e3:6b:c0:46:d2:f7:e8:bc:42:7b:b7:31:a2:1f:8d:
                    3c:c2:b8:e2:92:3b:ed:61:48:a2:db:a3:d9:71:67:
                    1c:10:4d:29:37:a0:16:02:25:06:6a:f0:f1:7f:28:
                    e0:4c:b2:db:97:c1:44:75:26:83:df:62:1a:36:2b:
                    11:de:da:c3:ce:a7:53:1c:3f:9a:3e:d8:87:d6:e3:
                    ce:7c:48:6b:f3:bf:3d:56:5f:37:a0:2c:0c:71:e4:
                    ab:ca:8d:07:56:21:be:fd:5f:d2:2b:32:81:b0:0f:
                    4b:40:a0:69:96:2a:61:97:a8:03:72:eb:74:62:82:
                    7d:f3:6a:72:70:ef:58:b4:ff:93:0a:30:c3:d3:18:
                    5d:32:36:71:cb:f9:eb:03:7b:b9:12:7d:d3:79:da:
                    95:fb:0b:db:c6:eb:69:41:f4:b2:a5:b8:7c:85:d3:
                    0a:7f:39:34:be:93:a2:e1:9e:8c:b0:23:f1:fe:31:
                    17:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4E:F9:6F:A3:67:CD:DA:19:D7:FE:34:2A:24:AF:1F:5A:FE:6E:6C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/825ee845-e910-434b-9fb6-239bbc2774f6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.192.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:95:ff:03:0e:56:f7:b2:d5:4d:da:c8:7b:a3:97:20:1a:76:
         de:bd:02:e0:c4:2e:5c:06:51:70:89:4b:13:9e:1e:3a:7c:d2:
         72:fd:9e:dd:ab:3e:b3:84:bf:2e:da:62:cf:94:d2:fb:60:ed:
         d2:67:c1:17:cc:6a:44:eb:27:55:c0:26:6e:da:0f:1f:bb:a4:
         01:26:7e:23:6d:4f:4c:47:bd:e9:7c:31:c9:f9:9c:f4:05:d5:
         de:e2:c7:c5:74:5b:76:84:e6:1c:ac:f5:f9:24:b1:50:f7:ab:
         37:1b:da:40:4f:9a:86:e3:8a:5a:8c:81:34:f0:68:7c:ae:fd:
         d6:7f:e9:a9:b6:34:cc:a1:02:cf:1f:b0:43:ec:a1:3c:01:7a:
         f8:42:02:f3:0a:7f:69:7e:6d:54:d9:28:e2:20:83:40:05:37:
         d7:5e:32:a4:a1:aa:e2:9a:3d:a3:d3:30:98:99:83:e5:b5:e1:
         40:8c:65:1c:1e:0a:c7:42:5f:4f:81:fd:2d:20:2e:a4:0b:e8:
         36:8c:75:e7:89:32:7c:7d:ae:38:63:d6:08:50:b7:17:22:c0:
         f9:73:19:11:8d:38:95:43:99:2b:68:f3:a4:0c:7b:67:7c:80:
         e7:ff:6d:bf:f6:1b:6f:a8:65:2d:3e:05:c8:ad:cb:d1:c0:3f:
         05:9a:f3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----