Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d.cer
File:                     13855365-4e81-429f-91f9-55913aa1d92d.cer (raw, json)
Hash identifier:          KiM+xo5uKfSTSK5gju08ZNv9RtM/ujdIKOHirz0u0Gc=
Subject key identifier:   FE:0D:B2:D1:10:3C:8A:74:73:E6:0F:54:BC:B7:D9:54:51:21:09:A3
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584387247065D7CC34953E52ACE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d/13855365-4e81-429f-91f9-55913aa1d92d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 12 Oct 2023 17:59:45 +0000
Certificate not after:    Wed 14 Jan 2026 18:59:45 +0000
Subordinate resources:    IP: 192.75.90.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:87:24:70:65:d7:cc:34:95:3e:52:ac:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 12 17:59:45 2023 GMT
            Not After : Jan 14 18:59:45 2026 GMT
        Subject: CN=13855365-4e81-429f-91f9-55913aa1d92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:52:72:6d:b5:8d:23:03:23:e2:15:df:ad:
                    4b:a7:ac:b1:18:67:d2:be:0f:ab:30:2f:80:f4:1d:
                    ea:77:ac:68:36:30:22:4a:84:cc:01:90:a0:f4:3d:
                    27:9e:36:11:e3:57:9c:cf:e0:28:8e:6a:3c:cc:8f:
                    1e:b6:c8:2a:39:bd:b5:cf:87:c1:20:f0:13:ee:c7:
                    93:de:8c:19:98:dc:77:51:3f:eb:43:de:57:a6:a7:
                    08:32:86:ba:bf:8e:59:a9:0b:de:2d:ad:bc:4e:97:
                    68:57:2e:a3:cb:e7:14:f8:95:4c:aa:35:3c:97:f9:
                    13:db:e9:a5:f7:c6:40:fa:5e:57:bd:84:35:54:5e:
                    b6:e4:b9:6d:5e:af:64:bd:95:08:b7:06:15:8e:f4:
                    80:a1:a4:2c:07:79:fa:c6:d4:81:ca:ec:f7:5f:1a:
                    7b:9d:59:35:10:bc:c9:d4:02:ed:8c:17:61:d9:e6:
                    c5:f0:71:44:04:94:08:35:19:4e:3c:c8:df:83:85:
                    5b:de:24:cc:45:82:f9:07:d8:a3:38:90:00:48:4a:
                    9e:c4:8a:23:e0:9e:58:d5:8c:67:11:06:53:9f:3f:
                    92:65:b4:8d:ef:73:c9:c5:1e:b2:74:82:e2:dd:a4:
                    69:7f:19:de:3c:51:55:bc:4e:cd:c2:49:0f:e0:fd:
                    ab:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0D:B2:D1:10:3C:8A:74:73:E6:0F:54:BC:B7:D9:54:51:21:09:A3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d/13855365-4e81-429f-91f9-55913aa1d92d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:be:05:f4:81:8f:89:c6:0d:b1:e4:91:94:d7:bb:0d:5f:0b:
         65:3f:55:c8:7d:7e:43:1b:3e:56:96:d0:c0:e5:71:51:bd:0d:
         f6:cc:36:8b:97:76:64:ae:43:fe:42:c3:b4:81:fb:d1:96:7c:
         44:fb:ff:b6:7e:99:6c:4d:ec:32:c1:26:72:7e:d4:43:42:1b:
         5b:f3:42:a4:20:ac:94:84:33:dd:26:24:05:38:d6:25:7a:b5:
         9d:23:c7:75:86:d3:32:fa:44:ea:35:71:db:03:f6:9e:cc:bc:
         65:8f:72:7d:92:6a:56:a1:65:e8:9d:25:fd:f4:52:b1:ff:85:
         c4:0a:4f:2c:12:cb:3a:36:05:de:4e:16:10:96:f3:39:b1:4d:
         61:0e:cc:18:13:c5:79:9a:1f:c5:bf:dc:57:dc:1e:5c:28:fd:
         a8:9c:fb:59:57:c4:2d:d0:67:6b:e4:92:e2:91:df:bf:34:85:
         5d:64:51:f5:91:73:9e:fa:68:72:79:f3:4b:ed:36:18:f1:cb:
         3f:e6:5d:19:7e:fc:74:b3:92:a9:dd:82:01:25:74:49:c7:b0:
         49:17:80:90:dd:d4:08:a3:c0:9f:f6:43:cd:cf:15:c0:b5:b0:
         79:95:84:c7:46:ab:82:76:68:8f:5a:00:d9:81:dd:8f:9d:78:
         35:07:88:51
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEOHJHBl18w0lT5SrOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTAxMjE3NTk0NVoXDTI2MDExNDE4NTk0NVowLzEtMCsGA1UEAxMk
MTM4NTUzNjUtNGU4MS00MjlmLTkxZjktNTU5MTNhYTFkOTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ktScm21jSMDI+IV361Lp6yxGGfSvg+rMC+A
9B3qd6xoNjAiSoTMAZCg9D0nnjYR41ecz+Aojmo8zI8etsgqOb21z4fBIPAT7seT
3owZmNx3UT/rQ95XpqcIMoa6v45ZqQveLa28TpdoVy6jy+cU+JVMqjU8l/kT2+ml
98ZA+l5XvYQ1VF625LltXq9kvZUItwYVjvSAoaQsB3n6xtSByuz3Xxp7nVk1ELzJ
1ALtjBdh2ebF8HFEBJQINRlOPMjfg4Vb3iTMRYL5B9ijOJAASEqexIoj4J5Y1Yxn
EQZTnz+SZbSN73PJxR6ydILi3aRpfxnePFFVvE7NwkkP4P2rGwIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFP4NstEQPIp0c+YPVLy32VRRIQmjMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x
Mzg1NTM2NS00ZTgxLTQyOWYtOTFmOS01NTkxM2FhMWQ5MmQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzEzODU1MzY1LTRlODEtNDI5Zi05
MWY5LTU1OTEzYWExZDkyZC8xMzg1NTM2NS00ZTgxLTQyOWYtOTFmOS01NTkxM2Fh
MWQ5MmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAS1owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAW74F9IGPicYNseSRlNe7
DV8LZT9VyH1+Qxs+VpbQwOVxUb0N9sw2i5d2ZK5D/kLDtIH70ZZ8RPv/tn6ZbE3s
MsEmcn7UQ0IbW/NCpCCslIQz3SYkBTjWJXq1nSPHdYbTMvpE6jVx2wP2nsy8ZY9y
fZJqVqFl6J0l/fRSsf+FxApPLBLLOjYF3k4WEJbzObFNYQ7MGBPFeZofxb/cV9we
XCj9qJz7WVfELdBna+SS4pHfvzSFXWRR9ZFznvpocnnzS+02GPHLP+ZdGX78dLOS
qd2CASV0ScewSReAkN3UCKPAn/ZDzc8VwLWweZWEx0argnZoj1oA2YHdj514NQeI
UQ==
-----END CERTIFICATE-----