Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer
File:                     4559e616-17ae-4214-9407-2e51c3be0fa4.cer (raw, json)
Hash identifier:          dQKljGvJ5BEjEKuvxVr70p7FRv6wgoSM0xrcqZsH89s=
Subject key identifier:   C7:F1:28:E8:A7:9A:65:B5:47:99:3D:CA:EF:64:B1:D7:7B:5F:89:0F
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584481AD61C7069D52193C0F6158
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 10 Jan 2024 11:47:45 +0000
Certificate not after:    Tue 14 Apr 2026 10:47:45 +0000
Subordinate resources:    IP: 23.165.232.0/24
                          IP: 2602:f9d4::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:81:ad:61:c7:06:9d:52:19:3c:0f:61:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan 10 11:47:45 2024 GMT
            Not After : Apr 14 10:47:45 2026 GMT
        Subject: CN=4559e616-17ae-4214-9407-2e51c3be0fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:5b:7f:65:fe:ba:08:06:e1:a1:62:af:04:
                    1a:6a:ec:b5:bf:b3:91:36:f1:cc:ce:f6:f9:70:2d:
                    96:cd:b7:45:a3:fd:0f:dd:6d:d9:b9:e3:cf:bb:a3:
                    85:a1:5b:83:f5:9d:dc:0c:ad:a4:6a:c5:c0:0a:d0:
                    6a:0f:a6:e5:b0:81:99:ce:eb:e3:1e:a0:bc:84:a4:
                    0e:54:04:34:68:78:84:32:c2:26:a8:a3:f6:73:5f:
                    3d:83:56:9d:33:36:ed:f0:6b:f8:17:c0:83:9b:3c:
                    c3:57:43:23:2b:10:90:a6:23:2d:6d:ec:1b:6c:27:
                    64:44:22:cf:9f:0f:0d:77:a4:ad:61:c1:23:ec:22:
                    38:31:c4:9a:8d:53:99:16:11:0c:80:e9:61:0a:6e:
                    b0:9d:2c:fc:cb:0a:14:e1:27:a3:22:26:42:2f:1c:
                    39:a2:39:93:f3:70:dd:f0:d0:13:a3:7f:23:93:dc:
                    96:b0:3a:1b:63:a6:28:09:40:92:b7:5d:c0:ed:0d:
                    a8:fc:66:fc:3b:56:7c:2d:db:71:7d:52:5a:c2:34:
                    1f:b1:56:13:13:76:95:64:ac:e6:07:22:63:c5:45:
                    c3:25:78:bc:dd:1d:4f:78:e2:b9:20:6f:c4:08:e3:
                    0f:64:dc:d5:71:e8:19:3a:10:70:36:e0:8d:4e:66:
                    38:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F1:28:E8:A7:9A:65:B5:47:99:3D:CA:EF:64:B1:D7:7B:5F:89:0F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.232.0/24
                IPv6:
                  2602:f9d4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:21:21:7c:bf:c4:49:d6:e0:e1:8e:b3:3a:54:cd:57:96:2a:
         76:35:ff:c7:c4:33:39:f0:f3:13:ff:87:16:48:2a:99:0a:fd:
         00:c6:ae:4d:ce:a4:38:f1:64:bd:cf:78:3f:34:94:16:61:9f:
         c7:9c:4f:89:a7:8c:1e:79:8e:63:67:c1:69:92:ff:fa:95:42:
         72:08:a1:e1:53:01:27:e2:0d:04:90:aa:e1:f2:cb:d9:cd:f5:
         bd:c9:e0:4b:46:2a:42:2f:c8:88:42:93:b3:48:b7:c9:00:55:
         8d:4d:9b:b8:ef:a1:0e:b5:68:4f:09:35:9f:92:04:ee:40:7a:
         03:f2:cb:82:ff:ee:25:fc:48:c4:d5:bd:22:b9:22:c2:62:ec:
         c4:74:88:0e:aa:aa:e7:79:91:4c:51:3b:62:1f:20:ff:6a:8f:
         41:fa:29:d7:f9:e1:06:53:c6:5e:98:25:a7:d7:83:25:ac:e7:
         bd:fc:f2:de:c2:b9:16:74:3e:b0:91:94:76:32:6a:d0:2e:8b:
         1a:db:bd:f2:07:93:21:ee:9a:18:8b:f0:94:07:52:ea:45:4d:
         19:d0:3e:19:e8:6a:20:56:a2:d4:a4:20:dc:ad:73:34:a7:14:
         62:53:2e:7b:37:de:33:1a:5f:ce:d8:57:01:53:77:7b:22:c0:
         04:f8:cd:16
-----BEGIN CERTIFICATE-----
MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWESBrWHHBp1SGTwPYVgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI0MDExMDExNDc0NVoXDTI2MDQxNDEwNDc0NVowLzEtMCsGA1UEAxMk
NDU1OWU2MTYtMTdhZS00MjE0LTk0MDctMmU1MWMzYmUwZmE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZxbf2X+uggG4aFirwQaauy1v7ORNvHMzvb5
cC2WzbdFo/0P3W3ZuePPu6OFoVuD9Z3cDK2kasXACtBqD6blsIGZzuvjHqC8hKQO
VAQ0aHiEMsImqKP2c189g1adMzbt8Gv4F8CDmzzDV0MjKxCQpiMtbewbbCdkRCLP
nw8Nd6StYcEj7CI4McSajVOZFhEMgOlhCm6wnSz8ywoU4SejIiZCLxw5ojmT83Dd
8NATo38jk9yWsDobY6YoCUCSt13A7Q2o/Gb8O1Z8LdtxfVJawjQfsVYTE3aVZKzm
ByJjxUXDJXi83R1PeOK5IG/ECOMPZNzVcegZOhBwNuCNTmY46QIDAQABo4IEDzCC
BAswHQYDVR0OBBYEFMfxKOinmmW1R5k9yu9ksdd7X4kPMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80
NTU5ZTYxNi0xN2FlLTQyMTQtOTQwNy0yZTUxYzNiZTBmYTQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzQ1NTllNjE2LTE3YWUtNDIxNC05
NDA3LTJlNTFjM2JlMGZhNC80NTU5ZTYxNi0xN2FlLTQyMTQtOTQwNy0yZTUxYzNi
ZTBmYTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXpegwDgQCAAIwCAMGACYC+dQAMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AEshIXy/xEnW4OGOszpUzVeWKnY1/8fEMznw8xP/hxZIKpkK/QDGrk3OpDjxZL3P
eD80lBZhn8ecT4mnjB55jmNnwWmS//qVQnIIoeFTASfiDQSQquHyy9nN9b3J4EtG
KkIvyIhCk7NIt8kAVY1Nm7jvoQ61aE8JNZ+SBO5AegPyy4L/7iX8SMTVvSK5IsJi
7MR0iA6qqud5kUxRO2IfIP9qj0H6Kdf54QZTxl6YJafXgyWs57388t7CuRZ0PrCR
lHYyatAuixrbvfIHkyHumhiL8JQHUupFTRnQPhnoaiBWotSkINytczSnFGJTLns3
3jMaX87YVwFTd3siwAT4zRY=
-----END CERTIFICATE-----