Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer
File:                     14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer (raw, json)
Hash identifier:          YudyMnPGjS92UYuUPvac55Ve6lqrlkZ/xONBAzVuPRc=
Subject key identifier:   AF:7E:74:FC:70:9F:AB:B7:AA:68:46:E8:30:D2:DD:9B:F3:08:30:3A
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858440E4A7AB1B64D3235F64AFE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 30 Nov 2023 03:50:31 +0000
Certificate not after:    Wed 04 Mar 2026 03:50:31 +0000
Subordinate resources:    IP: 23.145.248.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0e:4a:7a:b1:b6:4d:32:35:f6:4a:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 30 03:50:31 2023 GMT
            Not After : Mar  4 03:50:31 2026 GMT
        Subject: CN=14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e4:50:b2:4a:76:d3:62:2f:b7:0e:50:c7:8b:
                    06:df:2a:78:2d:4c:85:ba:16:93:62:05:f2:8c:c7:
                    2c:a1:fe:39:5d:0d:4e:20:a3:67:ac:13:df:80:05:
                    92:d0:06:b8:e2:e0:05:30:2e:ca:90:f4:1c:72:b0:
                    76:93:82:28:b3:e3:53:5e:98:68:43:d5:c9:43:d6:
                    71:df:8c:7e:04:25:8a:46:80:cd:ef:07:75:e3:03:
                    0c:95:cf:ef:78:de:87:68:88:c6:3f:67:3f:1d:f0:
                    dd:04:a9:5a:4b:49:15:ad:2e:e7:a2:b1:33:bc:91:
                    bb:3c:f9:c2:2d:eb:17:c1:fb:06:94:b9:dc:37:14:
                    73:d3:fc:1e:e0:4c:65:c4:f5:50:71:3b:2b:02:97:
                    37:a8:e4:04:0a:40:56:60:d7:fc:ae:2d:23:24:c3:
                    ff:a9:ea:2b:5c:ae:7f:5a:0a:71:13:d3:59:32:66:
                    4d:6e:8d:94:08:47:e6:db:5e:09:2f:3b:bd:81:0f:
                    2f:ce:a0:b5:ce:48:58:00:d2:df:dd:76:08:9f:01:
                    ec:2d:b9:c0:57:4a:98:b8:67:79:96:c3:07:5f:2a:
                    f8:9e:a3:70:15:ed:77:ec:5e:85:af:c0:a4:d6:15:
                    0f:7e:79:32:bf:a6:96:72:ef:4b:de:85:14:7a:52:
                    d4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7E:74:FC:70:9F:AB:B7:AA:68:46:E8:30:D2:DD:9B:F3:08:30:3A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:55:c1:f8:e1:6f:85:e2:43:57:d8:06:1d:89:77:fc:dc:7a:
         d8:0c:32:c8:5a:61:ab:08:f0:65:ac:a4:98:3e:f0:cf:53:13:
         f2:7c:6f:d0:1e:9f:a0:c6:37:39:f0:ed:c4:6f:48:32:f3:11:
         f6:aa:34:79:65:03:53:57:67:38:8f:19:66:aa:7a:68:53:c5:
         08:9b:fa:00:91:be:35:3d:d9:f8:a9:12:f2:c7:21:db:83:55:
         06:bd:69:e9:68:5a:66:64:4d:37:50:d3:f3:c7:0c:a2:15:9e:
         07:f3:f2:de:4d:13:29:ce:c3:21:43:31:57:75:8a:b2:d6:52:
         4e:3f:82:4c:12:b5:29:27:83:36:1c:e5:ed:e1:65:87:c7:b0:
         64:22:50:a2:06:8c:b3:53:2c:0e:ca:82:36:ae:04:ae:bb:73:
         a1:04:65:8a:98:36:1a:60:80:08:55:ff:a2:f1:ec:0b:0f:1f:
         78:6b:b7:6f:77:d2:3b:76:72:bb:90:b6:5b:e6:6d:12:5f:db:
         20:3a:f5:21:84:91:aa:26:06:d6:54:e2:36:15:85:1d:7b:c2:
         3d:34:cb:37:ea:6d:94:47:e6:92:5c:23:d9:99:10:e9:3e:e9:
         60:68:a5:21:d6:df:02:0d:23:fd:8e:fe:42:a0:e1:e0:be:8f:
         9c:44:dd:94
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEQOSnqxtk0yNfZK/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTEzMDAzNTAzMVoXDTI2MDMwNDAzNTAzMVowLzEtMCsGA1UEAxMk
MTRmNWE4ZTEtM2QxYS00N2E1LWI2YzgtY2Y2YzEyNDJkMmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiORQskp202Ivtw5Qx4sG3yp4LUyFuhaTYgXy
jMcsof45XQ1OIKNnrBPfgAWS0Aa44uAFMC7KkPQccrB2k4Ios+NTXphoQ9XJQ9Zx
34x+BCWKRoDN7wd14wMMlc/veN6HaIjGP2c/HfDdBKlaS0kVrS7norEzvJG7PPnC
LesXwfsGlLncNxRz0/we4ExlxPVQcTsrApc3qOQECkBWYNf8ri0jJMP/qeorXK5/
WgpxE9NZMmZNbo2UCEfm214JLzu9gQ8vzqC1zkhYANLf3XYInwHsLbnAV0qYuGd5
lsMHXyr4nqNwFe137F6Fr8Ck1hUPfnkyv6aWcu9L3oUUelLU4QIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFK9+dPxwn6u3qmhG6DDS3ZvzCDA6MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x
NGY1YThlMS0zZDFhLTQ3YTUtYjZjOC1jZjZjMTI0MmQyYWEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzE0ZjVhOGUxLTNkMWEtNDdhNS1i
NmM4LWNmNmMxMjQyZDJhYS8xNGY1YThlMS0zZDFhLTQ3YTUtYjZjOC1jZjZjMTI0
MmQyYWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAXkfgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAE1XB+OFvheJDV9gGHYl3
/Nx62AwyyFphqwjwZaykmD7wz1MT8nxv0B6foMY3OfDtxG9IMvMR9qo0eWUDU1dn
OI8ZZqp6aFPFCJv6AJG+NT3Z+KkS8sch24NVBr1p6WhaZmRNN1DT88cMohWeB/Py
3k0TKc7DIUMxV3WKstZSTj+CTBK1KSeDNhzl7eFlh8ewZCJQogaMs1MsDsqCNq4E
rrtzoQRlipg2GmCACFX/ovHsCw8feGu3b3fSO3Zyu5C2W+ZtEl/bIDr1IYSRqiYG
1lTiNhWFHXvCPTTLN+ptlEfmklwj2ZkQ6T7pYGilIdbfAg0j/Y7+QqDh4L6PnETd
lA==
-----END CERTIFICATE-----