Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer
File:                     1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer (raw, json)
Hash identifier:          6RZ7XinDa9TFGf6qCVNSKnuBjIAqkeF/8p8MunwzieY=
Subject key identifier:   97:74:18:04:15:FD:08:E1:C0:7E:49:AC:EB:3A:F8:3E:81:A9:A0:CB
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584433EBB9406C6D1D27005EA8E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 13 Dec 2023 15:20:19 +0000
Certificate not after:    Tue 17 Mar 2026 14:20:19 +0000
Subordinate resources:    IP: 128.198.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:33:eb:b9:40:6c:6d:1d:27:00:5e:a8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec 13 15:20:19 2023 GMT
            Not After : Mar 17 14:20:19 2026 GMT
        Subject: CN=1d26934e-0bbf-439c-a115-4e6f4a8d53a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2a:5d:dd:bd:8d:01:b0:5f:ea:0f:74:88:03:
                    34:cd:49:af:ae:54:82:b7:3e:3a:fc:3e:9d:39:44:
                    f7:6f:84:bb:ca:b4:0c:1d:7f:ae:70:a5:29:0e:da:
                    d8:2e:e1:34:68:fc:b3:9b:30:07:52:12:3f:1b:3c:
                    b6:bf:30:ac:70:20:92:df:1b:ad:af:c6:bd:72:df:
                    f2:b6:37:58:61:f3:a3:41:2a:3f:0b:82:c1:4c:d5:
                    4c:14:c6:93:f8:aa:e8:c7:1a:a0:f1:33:f9:b2:98:
                    a1:36:eb:b8:7d:c2:66:3a:a4:c0:ce:45:35:f5:65:
                    42:6e:b3:bd:e2:46:dd:0b:23:13:86:e5:3e:42:45:
                    75:ff:07:4f:16:91:9a:e2:31:9c:83:c4:95:3a:3f:
                    02:26:9d:da:96:a5:ff:8c:4a:e4:f5:f3:d0:ee:11:
                    f0:95:97:ab:5b:3b:5f:e0:e0:80:5e:a0:75:d3:8f:
                    80:98:8f:a6:fc:c1:ea:11:ca:8f:c5:2a:44:06:de:
                    d3:79:9e:a0:77:2d:a8:b0:0e:fc:c5:88:7a:3d:a3:
                    c6:69:39:f9:3a:27:6d:5e:13:e2:60:c4:03:a0:a2:
                    a0:cb:55:e5:ad:f4:10:60:01:b3:96:7a:2a:10:e6:
                    2a:be:1b:71:60:a6:be:24:fc:5c:cf:06:0e:75:92:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:74:18:04:15:FD:08:E1:C0:7E:49:AC:EB:3A:F8:3E:81:A9:A0:CB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.198.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:fd:13:07:0b:51:0e:89:81:10:cc:04:29:cd:e9:f6:df:dc:
         d3:f5:68:a2:d4:bd:8a:7f:9e:71:ad:53:40:ef:a1:3b:ea:80:
         25:c7:f1:cb:c3:13:bb:ff:0d:fb:31:48:b5:a0:41:79:8c:99:
         7b:38:ef:71:e3:bc:fe:76:16:10:58:c9:81:4f:1d:7e:3f:20:
         3d:f1:c9:66:f4:9f:a2:83:03:83:e9:07:db:7a:91:bb:8f:80:
         74:c6:1c:aa:d0:c3:7b:22:4b:2f:c6:75:1a:a4:53:5e:a1:e2:
         e2:c7:f7:58:98:fa:96:7d:fe:70:8e:7a:11:b4:83:9e:b7:d0:
         a0:1c:40:da:10:bc:7f:03:5d:48:35:5f:21:68:9a:a8:2a:0b:
         78:89:99:c1:d9:ff:83:9a:fe:83:59:9a:77:8b:85:76:7e:ea:
         7c:ce:ad:96:c7:c3:46:a9:25:7e:ec:48:23:ef:8c:b0:3d:b7:
         15:e7:e8:1c:f6:da:16:5e:04:26:24:d4:14:62:dd:81:e0:4e:
         2e:6d:13:8e:d4:bd:a8:43:9e:d9:12:9d:11:6e:90:6e:b3:71:
         06:39:80:3d:f3:a8:c8:2a:64:23:fd:2d:89:34:b0:22:44:c9:
         6a:d7:ca:cc:91:d5:85:6a:2f:6b:51:10:a4:42:f4:12:6d:c1:
         ee:ed:b3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----