Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43.cer
File:                     9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43.cer (raw, json)
Hash identifier:          H+/dStOBa+emEfvCOHmg/tWMu9U9sbrs9XClQk8e77c=
Subject key identifier:   C5:EB:45:97:22:9D:7D:70:AB:E3:E3:EE:E7:74:6F:3E:A6:4D:AF:D3
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285846C512EB3E679AD321D2EDD400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 05 Aug 2024 00:45:22 +0000
Certificate not after:    Sun 08 Nov 2026 01:45:22 +0000
Subordinate resources:    IP: 67.219.180.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c5:12:eb:3e:67:9a:d3:21:d2:ed:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Aug  5 00:45:22 2024 GMT
            Not After : Nov  8 01:45:22 2026 GMT
        Subject: CN=9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9f:fd:fe:81:5c:12:9f:99:ac:74:ef:82:5c:
                    4a:4a:15:6e:1f:44:a7:3d:42:46:9a:23:9b:48:ff:
                    89:fe:23:d4:6a:98:f8:60:04:13:93:e0:20:6c:89:
                    34:6d:df:08:e1:9b:ca:79:0c:5c:6e:3a:f2:73:a6:
                    d0:92:98:c6:74:6d:fc:fe:34:da:92:af:57:23:a3:
                    f5:6e:bf:2c:04:75:dc:d4:40:64:3c:ce:03:57:6d:
                    d4:20:bb:04:2f:cf:8d:62:ba:b6:df:c4:bf:89:26:
                    3f:01:ac:1f:64:a8:90:4a:5f:ca:6f:06:ce:68:bb:
                    a9:36:ea:21:77:93:f9:f9:c8:c7:9a:18:08:82:bb:
                    9e:c2:d9:eb:c7:5f:1c:15:11:5a:95:62:cd:4b:9b:
                    12:f9:a5:a0:bc:eb:02:65:8b:e6:b6:55:c1:05:cb:
                    99:b5:71:45:fa:ac:b9:2b:9b:97:4b:ad:e4:f3:b2:
                    64:95:a1:b2:f6:4c:55:8d:76:0c:82:41:bb:bc:85:
                    6a:ec:28:ce:e7:6f:8f:3e:dc:82:ff:a2:2a:af:ef:
                    bf:c8:82:3d:30:68:63:ba:74:98:76:85:a8:c8:23:
                    bd:0d:71:60:da:a9:3c:4a:40:f1:3b:cf:06:38:80:
                    6d:8d:b7:c0:d6:ea:6e:f5:8c:7e:b4:99:f6:33:fa:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EB:45:97:22:9D:7D:70:AB:E3:E3:EE:E7:74:6F:3E:A6:4D:AF:D3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:cf:59:bb:d9:aa:d8:08:f5:8b:27:52:8f:d1:11:32:30:fd:
         af:aa:2e:fb:d5:7b:79:20:b2:c2:72:f5:d6:45:36:aa:c5:54:
         db:aa:c4:b5:70:f4:72:52:55:5d:bc:4a:f2:cd:dd:39:c7:e8:
         b6:e1:dc:7e:3f:df:82:8b:48:a6:bc:6b:7a:e7:8c:31:a3:79:
         30:0b:c2:60:4d:35:bd:62:b7:97:f5:6f:fd:5f:6d:91:06:43:
         f7:af:9c:4f:4a:cf:f8:aa:2d:9f:d4:06:1b:c8:7a:74:82:fc:
         4e:69:8c:48:5d:23:b4:e3:04:11:24:f0:06:49:04:02:ae:a1:
         71:4c:9a:ec:bb:31:be:5b:29:7b:b7:c8:42:67:f2:66:0f:f9:
         c1:fc:4f:32:0e:53:f6:e1:8a:3f:16:69:c8:64:86:ae:a7:e6:
         e0:04:f7:7a:6b:21:d7:f2:24:45:5a:fd:5e:fe:a7:c2:a0:f1:
         db:59:7a:88:13:d4:df:db:78:2d:09:30:99:a5:5a:76:f8:3f:
         70:6b:88:ed:42:b1:15:7f:58:ee:56:89:85:ee:d1:b2:f3:c7:
         f1:c2:a1:a2:40:41:b9:40:db:09:99:34:eb:9f:11:a1:21:60:
         4e:e1:a8:15:bf:59:d1:95:23:bd:03:8a:b9:77:fa:88:d0:d5:
         48:c1:47:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----