Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee.cer
File:                     06adc51b-95f4-44e9-bf6d-3f9a3950feee.cer (raw, json)
Hash identifier:          H8kikQDe1lEErIUkCwgrZFNPHrSz2LzlCNxEVNK9HWk=
Subject key identifier:   D0:04:FE:E2:0B:C8:C6:C3:FE:2B:84:25:1C:FF:A8:B3:DA:58:60:D6
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843F48B31088E4D8DF95F630CC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/06adc51b-95f4-44e9-bf6d-3f9a3950feee.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 20 Nov 2023 22:29:53 +0000
Certificate not after:    Sun 22 Feb 2026 22:29:53 +0000
Subordinate resources:    AS: 40690
                          IP: 162.251.207.0/24
                          IP: 2602:fa25::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f4:8b:31:08:8e:4d:8d:f9:5f:63:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 20 22:29:53 2023 GMT
            Not After : Feb 22 22:29:53 2026 GMT
        Subject: CN=06adc51b-95f4-44e9-bf6d-3f9a3950feee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:28:65:20:8b:25:4f:70:74:b4:d5:08:15:
                    f2:51:41:e8:87:24:03:19:51:dd:f4:51:87:b2:d1:
                    92:31:44:19:5a:53:ce:29:f1:90:c0:91:19:2d:e1:
                    78:1f:27:95:95:66:27:c3:30:52:88:16:a8:ea:ca:
                    c9:ce:ef:99:06:8d:ba:c8:4a:16:97:41:ee:aa:a1:
                    8d:42:c8:6c:26:4f:23:a3:90:66:cb:82:56:f2:ee:
                    ef:8c:9f:aa:b6:1f:6b:ef:6f:d6:68:cd:38:ff:47:
                    c9:d0:6d:3f:0d:9e:23:3f:84:63:da:48:59:51:6a:
                    57:29:db:58:ff:1d:88:2e:a3:be:18:3d:17:e2:5a:
                    21:a3:de:6c:f9:7b:01:ca:3d:52:07:b8:38:af:92:
                    ac:ba:4f:45:ec:7f:67:69:6d:04:ef:da:2b:6c:d6:
                    0b:d4:7e:0e:cb:24:a5:78:0d:15:2f:c1:7a:aa:1e:
                    c5:ea:e8:94:c0:fe:6e:c8:d2:94:e1:f0:c5:1d:72:
                    d0:c7:a8:42:39:a1:76:76:41:d8:69:e9:3d:5d:c5:
                    56:ce:ae:e3:18:7c:f9:14:74:e3:a0:09:7f:89:fc:
                    bc:56:56:a9:b5:3a:dd:3a:cd:24:e0:b3:85:d6:94:
                    11:28:f9:ec:d6:a0:73:90:52:fa:0b:1a:8b:e5:e6:
                    09:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:04:FE:E2:0B:C8:C6:C3:FE:2B:84:25:1C:FF:A8:B3:DA:58:60:D6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/06adc51b-95f4-44e9-bf6d-3f9a3950feee.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.207.0/24
                IPv6:
                  2602:fa25::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40690

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:4f:fe:fe:af:96:7b:19:11:d1:df:59:f6:06:32:21:5f:bb:
         16:de:97:72:26:3f:35:af:9f:ac:c3:6e:b2:0e:26:69:7f:ed:
         e7:b3:a6:c3:43:2c:a4:24:cb:05:4a:b5:2c:96:44:43:b4:2b:
         41:79:77:70:c2:ba:84:3a:81:dd:e2:f0:07:b9:84:6d:69:62:
         f6:87:88:c3:66:86:39:d9:6c:bf:6e:16:51:9b:86:05:48:11:
         aa:41:6e:e5:0c:16:72:3a:25:a6:d8:bb:55:92:2d:a8:a9:47:
         33:b7:0c:51:1b:3d:5c:b3:01:80:f8:91:26:17:55:b2:53:cd:
         a0:5e:f5:f9:d4:06:0a:0f:41:f8:9c:77:c9:f3:86:3e:ea:49:
         91:cb:b1:ac:4c:82:7c:5d:ad:e8:03:40:e6:c0:e5:88:46:ad:
         14:df:9d:7d:55:d1:8c:71:40:87:66:d4:93:34:27:60:fe:ab:
         f1:6e:72:f2:f7:57:c3:ed:2a:4f:27:c3:e7:00:25:08:b4:dc:
         33:e8:86:e7:c6:2d:e9:ba:c4:3f:c8:18:e7:06:f8:7d:e6:14:
         01:83:dc:7c:b5:fd:f3:39:2f:2c:94:d9:1f:ec:1a:1b:46:cd:
         4f:d3:e4:5e:4b:c2:01:cb:54:73:39:42:70:c1:0e:fb:b5:50:
         78:e9:1b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----