Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer
File:                     2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer (raw, json)
Hash identifier:          QWfaYrp5NZxkYV4CbqvE0CcfZe/yOOV9QC580aC2vj4=
Subject key identifier:   2F:81:83:F2:A8:61:24:55:A8:AD:5D:BA:D3:85:A9:C6:E5:F3:28:4C
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858443762C8AD03850B8456E52900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 14 Dec 2023 21:07:38 +0000
Certificate not after:    Wed 18 Mar 2026 20:07:38 +0000
Subordinate resources:    IP: 199.101.8.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:37:62:c8:ad:03:85:0b:84:56:e5:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec 14 21:07:38 2023 GMT
            Not After : Mar 18 20:07:38 2026 GMT
        Subject: CN=2aa49d03-db4a-4804-82dc-fc2c0fdb94e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8e:36:7e:9a:a4:79:f3:5b:5b:ee:43:e5:90:
                    48:e0:68:e9:f4:35:e2:01:27:ae:a3:0f:b1:37:e8:
                    70:f7:3b:c8:4c:e0:10:e6:ee:da:49:21:76:58:eb:
                    22:dc:19:df:61:27:81:85:51:31:67:2f:7a:f2:da:
                    89:c3:36:29:93:61:4e:0e:ae:2b:69:d9:c7:37:59:
                    21:c2:6b:a4:2a:d7:3b:85:13:4f:5e:51:ad:ab:5b:
                    73:eb:da:24:d0:cc:b2:f2:41:85:36:d4:4a:0b:51:
                    0a:6d:6c:52:55:dc:55:86:09:ec:1d:f7:96:1a:a6:
                    a3:1a:99:c1:71:c9:2e:73:bc:63:d7:cc:44:59:83:
                    24:08:bd:79:3b:85:06:22:70:8a:63:ca:55:de:97:
                    38:47:6b:8f:45:7b:76:b1:ea:e3:66:a9:75:f1:6d:
                    e1:f0:b1:df:20:ad:6c:23:3b:1e:44:f9:65:60:85:
                    c5:eb:fe:07:83:aa:c3:59:64:da:ad:0a:e8:7b:43:
                    95:93:b9:78:75:45:79:d4:bc:be:08:4b:87:b2:a1:
                    44:06:2e:47:69:b7:21:bc:7b:fe:60:a6:73:0f:aa:
                    d5:ac:b8:34:68:b0:81:81:d8:b3:39:82:5d:cd:b9:
                    73:cf:1d:15:d3:c5:dd:f4:d5:5f:12:f7:3b:10:2f:
                    bb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:81:83:F2:A8:61:24:55:A8:AD:5D:BA:D3:85:A9:C6:E5:F3:28:4C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ab:13:50:e2:d0:34:f4:d4:d9:8e:91:21:fa:c5:8e:32:72:
         28:b2:46:ca:d4:db:5e:e4:d7:37:66:a4:23:74:4b:7d:1e:1d:
         c0:c4:e6:cc:94:26:dd:bb:b8:db:78:f7:fa:c9:7c:ee:d4:fb:
         63:4b:22:9d:7a:6a:01:54:2d:52:f8:94:3f:1c:3f:3d:8b:50:
         55:78:a2:24:0c:63:18:c9:d5:bd:41:20:34:03:e9:6d:13:db:
         c4:5b:06:8b:75:85:52:2c:2e:34:6c:6a:15:fc:16:a3:0c:f7:
         95:05:b7:b5:41:3d:61:3f:c2:7d:ea:c7:9f:46:e4:6b:1d:ae:
         af:53:cf:48:01:84:dd:3d:68:10:87:e9:5d:60:d8:a5:b5:80:
         09:6e:37:6f:15:9c:bf:c1:6e:80:e1:6e:f0:fe:81:46:6d:76:
         8c:7f:b9:43:b5:dd:77:b1:16:72:e1:ec:7d:81:bb:99:ac:c8:
         25:5a:c5:6a:3d:67:73:c4:c0:41:d3:4d:ea:ce:10:a8:d5:79:
         cb:fa:77:36:f1:63:d0:7c:75:da:fd:96:b3:a5:01:5c:7d:7f:
         7f:1a:b4:5c:9b:45:7b:e8:94:d9:25:8b:91:b8:8a:7f:7c:20:
         2f:04:e9:88:17:cc:92:00:2b:76:bb:79:17:3b:4c:9b:d0:ba:
         c8:94:2f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----