Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.cer
File:                     1019a62c-c6e6-45a6-a0e7-472a84b5ba68.cer (raw, json)
Hash identifier:          MFlgZ0wlyIrCoISk8B9y1WQCnUYI5xYOINA2j9lpcJ0=
Subject key identifier:   CE:02:0E:11:62:45:2E:57:D6:13:BA:B6:EE:85:52:C2:30:31:BE:81
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858441DE3E889233939B43DB79546
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 05 Dec 2023 17:56:47 +0000
Certificate not after:    Mon 09 Mar 2026 16:56:47 +0000
Subordinate resources:    AS: 399979

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:1d:e3:e8:89:23:39:39:b4:3d:b7:95:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec  5 17:56:47 2023 GMT
            Not After : Mar  9 16:56:47 2026 GMT
        Subject: CN=1019a62c-c6e6-45a6-a0e7-472a84b5ba68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:07:ed:3a:f1:e0:5e:2a:4d:68:54:65:f9:7e:
                    05:e3:aa:d5:29:ae:a6:0a:e4:16:b3:e3:b1:e9:f7:
                    05:ad:94:99:e2:1e:5b:bc:d2:7a:d0:86:56:01:76:
                    42:8d:c7:4a:40:8b:a4:65:97:b8:82:c2:57:3c:b7:
                    b6:2a:71:fa:b6:a6:6e:5c:f1:7a:fc:cd:69:4e:5c:
                    c3:ab:60:21:27:ec:e8:8c:32:24:1f:50:00:3b:da:
                    5a:fe:00:99:b2:78:10:88:51:7d:44:ee:38:88:9f:
                    00:98:d8:0a:4f:fa:f3:87:18:1e:6b:2d:de:37:6f:
                    72:c8:9a:1c:69:12:93:20:32:de:4f:35:fe:a8:d4:
                    2a:ab:23:81:21:d0:c5:f1:5d:e1:1e:1b:31:de:69:
                    05:c9:44:54:06:2a:88:d1:01:21:45:71:2b:b6:61:
                    7f:b0:06:a3:1a:e0:82:c6:61:3c:9f:96:26:e0:cd:
                    56:f9:88:39:26:c0:7e:df:2a:49:31:c5:97:d4:b0:
                    8c:25:0d:68:20:4a:1c:bc:30:20:3f:76:f5:5b:59:
                    15:3a:23:94:a0:31:0f:83:a9:11:9d:c6:59:4c:76:
                    a8:22:4d:2c:eb:6d:0b:03:28:42:8c:f5:50:eb:16:
                    6b:d9:8a:af:e2:60:60:ec:7e:ea:a0:f2:4a:20:22:
                    a7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:02:0E:11:62:45:2E:57:D6:13:BA:B6:EE:85:52:C2:30:31:BE:81
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399979

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:17:78:08:d6:92:90:80:b7:de:78:18:78:23:0d:6c:ee:da:
         fd:9e:63:b2:34:65:ac:d9:92:d8:19:ac:60:ae:1a:3b:04:46:
         33:ae:ee:82:c0:f6:e9:ee:f6:f9:3a:14:59:fc:c3:0f:d3:0a:
         ba:cf:7f:9c:5a:34:b8:84:23:e8:58:5c:82:c2:c6:78:cb:83:
         26:23:a9:b6:64:0a:33:a9:00:b4:46:1b:71:ac:13:a6:61:09:
         df:ac:1e:28:06:3a:0a:3b:01:0e:3d:dc:83:de:9d:3d:36:c0:
         81:2b:98:8c:47:7d:85:7b:c3:09:8c:ca:1a:f2:4a:f8:53:71:
         18:de:0f:c6:0a:32:8c:ef:4f:ed:9e:83:86:5b:71:68:ff:be:
         18:00:d8:54:61:f9:23:c5:3a:55:35:fd:c5:ee:ca:b0:be:02:
         5d:0c:31:30:9d:00:75:09:80:e8:1e:91:d1:df:dd:b7:c2:b8:
         22:07:85:b9:c8:4c:0e:04:6b:d7:82:3c:1f:63:ba:fd:b5:b1:
         1d:e9:c2:5b:3d:21:18:5c:0c:f1:ba:8b:dc:35:5a:24:df:71:
         d9:33:ae:8b:fb:18:32:c5:3d:aa:27:84:80:2c:db:40:3c:0d:
         32:f9:c8:60:21:7c:23:4a:13:a0:eb:66:5f:a8:04:a7:a3:dc:
         1f:3c:a8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----