Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer
File:                     036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer (raw, json)
Hash identifier:          B4gWuTr2GjqDtZ91plBaAcrb9MCdEPCt5B9EDRO7d7E=
Subject key identifier:   4F:10:4C:3F:94:5F:DB:EB:A3:61:DB:19:DB:7E:DA:ED:96:69:91:E9
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584448003225652DF921D3870580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 20 Dec 2023 19:57:44 +0000
Certificate not after:    Tue 24 Mar 2026 18:57:44 +0000
Subordinate resources:    AS: 400387
                          IP: 64.25.8.0/21
                          IP: 2607:6340::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:48:00:32:25:65:2d:f9:21:d3:87:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec 20 19:57:44 2023 GMT
            Not After : Mar 24 18:57:44 2026 GMT
        Subject: CN=036b2dbb-e7db-4b60-b1d9-949d2edba6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:40:b5:08:ed:79:95:4d:d2:03:87:6f:26:f7:
                    1a:00:cb:fb:19:ce:f3:ca:6c:a9:43:cc:11:b0:35:
                    23:28:28:cb:d4:fb:aa:0f:26:de:d8:75:39:af:19:
                    4e:00:46:24:1f:5b:42:2c:10:07:c0:7f:2c:76:cf:
                    58:05:1d:6d:85:7a:a9:ec:50:f7:d6:be:5e:63:d1:
                    4c:48:e8:a5:af:96:30:e2:52:43:4d:ce:63:5d:e0:
                    1c:e1:d7:77:01:7d:27:00:b0:e5:e5:1d:1f:fd:91:
                    52:e0:8d:85:a1:0a:02:e5:6e:49:aa:fe:c9:d2:70:
                    84:d5:4e:c5:94:2d:9c:04:31:4b:6e:11:92:c3:d9:
                    62:10:cd:56:bc:76:c7:25:71:2d:d5:86:4d:c3:9e:
                    d6:95:d8:da:a6:94:a9:9a:18:d5:c8:a3:90:7a:f7:
                    9c:ea:49:62:a9:70:8f:1f:1a:56:c5:76:f7:23:25:
                    b7:b4:18:7c:5f:a4:3b:37:24:11:ac:c4:03:f3:be:
                    c8:71:ad:a7:ef:71:71:fb:18:5e:b6:fa:84:f2:58:
                    1f:70:c1:05:d0:e0:30:59:0d:4e:6b:cf:04:fb:1f:
                    0d:6d:41:12:10:21:df:63:1d:e3:cd:ca:f3:a6:bd:
                    e6:5f:96:c2:60:e5:f4:94:21:b4:fc:e9:74:11:c1:
                    c5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:10:4C:3F:94:5F:DB:EB:A3:61:DB:19:DB:7E:DA:ED:96:69:91:E9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.25.8.0/21
                IPv6:
                  2607:6340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400387

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:10:84:40:34:e7:b7:37:c3:1c:e2:55:5f:ea:c1:9e:7a:0c:
         6f:cf:a5:86:71:1d:b6:76:0d:ec:ad:88:92:15:ed:d6:5e:97:
         54:79:6c:1e:1e:27:17:1b:23:f5:f8:1d:34:3a:b7:e2:f2:00:
         5f:3e:f2:eb:08:cf:d8:e7:a4:56:25:68:89:fa:9c:1f:7e:ab:
         98:19:43:30:79:69:e7:31:78:8f:18:e1:1a:33:1f:5a:84:82:
         73:ae:42:40:f3:00:c3:11:63:64:30:d9:9c:19:6f:d4:60:6c:
         a7:cc:1c:3a:5b:0a:86:d2:6a:61:2f:c6:ab:15:61:4d:dd:a0:
         32:9e:f2:d5:be:7b:03:a4:9d:53:55:15:a7:e0:29:be:d1:37:
         52:f2:d7:97:44:ff:d7:81:b2:b0:e3:60:67:63:b2:27:bb:dc:
         6d:7d:ad:f8:2e:44:99:9d:0a:0a:fa:d6:b0:62:68:ad:23:c0:
         f5:64:5e:84:cf:51:f0:1d:a2:e3:d7:ac:74:30:c5:98:c8:99:
         9a:ca:74:0f:71:93:cf:c9:fa:f9:04:35:49:15:03:eb:6f:27:
         8e:7c:e6:9b:42:d5:24:06:c9:22:48:cb:61:4c:c5:b9:fe:ca:
         05:9e:05:61:7a:9a:e8:95:c4:27:ba:1c:5e:66:c2:cc:ce:10:
         87:76:c8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----