Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/333ac4ed-50fb-4488-8a6c-c5740bdf4141.cer
File:                     333ac4ed-50fb-4488-8a6c-c5740bdf4141.cer (raw, json)
Hash identifier:          GGmMyPY6JJuzXeqE4wXLJXNRg0r990jTrRn6iHLVhn4=
Subject key identifier:   60:54:06:88:89:88:96:E7:7A:77:5C:E2:65:63:96:0D:24:70:FC:F4
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843AC7C98BC94D000A968ED5C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/333ac4ed-50fb-4488-8a6c-c5740bdf4141/333ac4ed-50fb-4488-8a6c-c5740bdf4141.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/333ac4ed-50fb-4488-8a6c-c5740bdf4141/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 26 Oct 2023 03:02:17 +0000
Certificate not after:    Wed 28 Jan 2026 04:02:17 +0000
Subordinate resources:    AS: 396856

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ac:7c:98:bc:94:d0:00:a9:68:ed:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 26 03:02:17 2023 GMT
            Not After : Jan 28 04:02:17 2026 GMT
        Subject: CN=333ac4ed-50fb-4488-8a6c-c5740bdf4141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:20:d4:7d:17:6b:24:dd:37:5f:9e:75:48:36:
                    7a:f3:dd:02:fa:e2:81:16:44:8b:0c:2e:f4:70:26:
                    26:1d:85:4a:6d:7e:f0:1c:e1:56:99:6c:b6:a6:17:
                    d8:62:64:ca:8c:d3:c6:0f:1c:75:4e:04:4d:78:2d:
                    de:a7:55:a3:ba:bd:78:97:b6:58:43:b6:c0:a5:62:
                    96:d6:7a:3d:4f:21:36:e9:57:01:0f:2c:e3:63:34:
                    82:2a:0f:c9:7e:9c:ce:9e:cf:19:6b:96:f6:a7:f7:
                    b0:17:f3:fe:38:22:c5:68:4b:3c:17:de:31:00:4a:
                    05:03:b1:ed:ad:7f:a5:cc:8b:33:32:65:26:76:a6:
                    4d:8c:4a:5e:11:1f:35:1a:b6:91:0d:ca:b0:49:f2:
                    f7:d4:43:62:d2:67:1c:1e:c6:73:9c:13:20:dc:cb:
                    ec:90:91:a6:f2:ac:8f:19:72:7f:42:5e:5b:13:39:
                    6a:6d:c1:0e:06:9d:0e:d3:02:20:d7:c5:af:89:98:
                    68:31:7d:67:5e:6e:fa:1e:9d:21:2b:7b:31:80:38:
                    2a:90:44:45:1b:8a:84:55:0b:ca:a6:ab:3a:32:2d:
                    47:91:2f:f8:ac:8b:23:a7:86:46:2d:d7:db:a5:33:
                    ed:2f:40:7b:81:06:94:51:c1:e3:22:13:5b:14:7a:
                    f3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:54:06:88:89:88:96:E7:7A:77:5C:E2:65:63:96:0D:24:70:FC:F4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/333ac4ed-50fb-4488-8a6c-c5740bdf4141/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/333ac4ed-50fb-4488-8a6c-c5740bdf4141/333ac4ed-50fb-4488-8a6c-c5740bdf4141.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396856

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:10:bd:05:83:c3:02:a2:93:87:82:0c:38:25:fd:19:42:f3:
         08:df:78:ac:38:93:eb:48:49:12:c7:ce:5b:8b:8d:cd:c7:7c:
         08:cc:22:5a:23:e5:45:62:54:6e:0a:45:07:84:c1:99:74:7a:
         62:5c:a9:60:31:43:8e:9d:0f:f8:69:b0:68:41:26:e6:5f:22:
         e6:ee:3b:27:ad:03:3c:2a:57:90:6e:aa:a9:37:d6:4e:1b:fd:
         7a:3f:b1:3a:2d:85:94:55:22:14:aa:01:d0:ac:91:36:a2:2d:
         d9:f0:2f:df:b9:f5:8f:bf:90:b6:58:66:58:9f:92:b4:f5:7f:
         c7:09:30:6a:d2:ca:35:33:45:67:3e:41:a6:16:78:20:0a:bd:
         45:e0:cf:31:cf:49:d2:62:e5:b7:42:9a:67:76:28:89:fd:67:
         b6:b5:f7:c8:fa:a9:9c:be:54:e7:1f:ff:ff:85:9d:8d:82:87:
         c9:bd:e2:46:ef:70:3b:60:e7:21:81:9f:a3:ed:9e:6e:53:49:
         1f:dc:5b:b7:ee:eb:20:c2:bd:a2:ce:45:44:bc:d2:d2:50:b8:
         2a:a4:c7:ec:9e:1d:11:7c:0a:f7:41:ea:98:9d:45:d7:84:68:
         ab:28:38:97:d1:34:73:ae:48:cd:54:f6:b8:53:7a:8a:cf:8b:
         cc:f4:67:64
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEOsfJi8lNAAqWjtXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTAyNjAzMDIxN1oXDTI2MDEyODA0MDIxN1owLzEtMCsGA1UEAxMk
MzMzYWM0ZWQtNTBmYi00NDg4LThhNmMtYzU3NDBiZGY0MTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCDUfRdrJN03X551SDZ6890C+uKBFkSLDC70
cCYmHYVKbX7wHOFWmWy2phfYYmTKjNPGDxx1TgRNeC3ep1Wjur14l7ZYQ7bApWKW
1no9TyE26VcBDyzjYzSCKg/JfpzOns8Za5b2p/ewF/P+OCLFaEs8F94xAEoFA7Ht
rX+lzIszMmUmdqZNjEpeER81GraRDcqwSfL31ENi0mccHsZznBMg3MvskJGm8qyP
GXJ/Ql5bEzlqbcEOBp0O0wIg18WviZhoMX1nXm76Hp0hK3sxgDgqkERFG4qEVQvK
pqs6Mi1HkS/4rIsjp4ZGLdfbpTPtL0B7gQaUUcHjIhNbFHrzjwIDAQABo4ID+jCC
A/YwHQYDVR0OBBYEFGBUBoiJiJbnendc4mVjlg0kcPz0MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z
MzNhYzRlZC01MGZiLTQ0ODgtOGE2Yy1jNTc0MGJkZjQxNDEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzMzM2FjNGVkLTUwZmItNDQ4OC04
YTZjLWM1NzQwYmRmNDE0MS8zMzNhYzRlZC01MGZiLTQ0ODgtOGE2Yy1jNTc0MGJk
ZjQxNDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBg44MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEgQvQWDwwKik4eCDDgl/RlC8wjf
eKw4k+tISRLHzluLjc3HfAjMIloj5UViVG4KRQeEwZl0emJcqWAxQ46dD/hpsGhB
JuZfIubuOyetAzwqV5Buqqk31k4b/Xo/sTothZRVIhSqAdCskTaiLdnwL9+59Y+/
kLZYZlifkrT1f8cJMGrSyjUzRWc+QaYWeCAKvUXgzzHPSdJi5bdCmmd2KIn9Z7a1
98j6qZy+VOcf//+FnY2Ch8m94kbvcDtg5yGBn6Ptnm5TSR/cW7fu6yDCvaLORUS8
0tJQuCqkx+yeHRF8CvdB6pidRdeEaKsoOJfRNHOuSM1U9rhTeorPi8z0Z2Q=
-----END CERTIFICATE-----