Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b.cer
File:                     4786912c-91d1-4981-a8a8-ab21be09e84b.cer (raw, json)
Hash identifier:          JrabUBK615FNarbHZR+3eTdh81+9+d8kUSW1VPJD+zE=
Subject key identifier:   01:89:77:61:B0:5F:45:2F:29:32:6D:9D:9F:03:58:CA:CC:ED:66:B9
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858436AA742774912AC498CD65880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/4786912c-91d1-4981-a8a8-ab21be09e84b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 02 Oct 2023 13:04:54 +0000
Certificate not after:    Sun 04 Jan 2026 14:04:54 +0000
Subordinate resources:    AS: 400530
                          IP: 198.190.197.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:6a:a7:42:77:49:12:ac:49:8c:d6:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct  2 13:04:54 2023 GMT
            Not After : Jan  4 14:04:54 2026 GMT
        Subject: CN=4786912c-91d1-4981-a8a8-ab21be09e84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:53:e7:a2:6e:fc:a3:2e:7a:85:e2:e0:c5:
                    85:bf:41:f7:36:ee:b4:65:1b:49:45:b5:e8:01:fb:
                    13:d2:6d:78:62:36:90:3e:de:76:f8:54:b9:15:b6:
                    ca:3f:f7:8c:6f:ef:bf:0b:22:18:31:8f:8a:78:75:
                    8f:4a:64:37:9e:5e:e2:d3:ac:53:1a:d3:4b:4c:4d:
                    9d:b3:4a:a5:2b:26:9f:84:4c:59:33:30:ec:b9:a6:
                    7b:87:ee:9b:b7:45:25:9b:5a:0c:4c:0f:fa:c5:f4:
                    89:89:30:2a:cf:ea:bf:cf:ed:96:62:65:a7:13:1d:
                    4e:fb:4a:b2:d5:db:72:0f:df:c1:aa:ca:7f:ae:b3:
                    ec:1f:06:52:85:8b:cd:16:28:cd:29:ec:93:ec:5f:
                    52:19:65:c0:98:64:74:41:9f:99:23:4e:df:b3:41:
                    0b:4e:dd:0e:05:21:f0:5e:6b:1d:05:8c:c5:be:e0:
                    83:00:e7:2f:d1:df:c3:6e:6e:7a:f3:09:8b:89:b1:
                    6c:bf:78:47:a9:be:df:1b:ec:4f:2c:60:ba:71:df:
                    85:6d:af:5c:83:71:53:a1:e7:fd:60:1a:84:93:5c:
                    98:c1:49:8c:ca:2e:df:03:b3:52:65:aa:10:ad:1b:
                    68:d8:25:8d:89:09:e4:12:e8:f1:fc:31:1c:d8:38:
                    dd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:89:77:61:B0:5F:45:2F:29:32:6D:9D:9F:03:58:CA:CC:ED:66:B9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/4786912c-91d1-4981-a8a8-ab21be09e84b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.190.197.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400530

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a3:7b:f6:1f:90:d4:ea:e0:2b:d5:68:70:44:2f:3e:83:a9:
         ba:58:82:0c:62:91:69:89:a2:bc:c3:2c:63:ae:29:87:cc:5f:
         51:38:36:78:ee:56:6c:a1:2d:69:f9:f2:8b:24:2f:a6:74:34:
         ac:19:9d:4c:cb:62:66:4e:15:95:d5:ec:f5:b3:be:b3:aa:18:
         4f:2c:74:28:cf:65:33:62:0b:00:e4:4f:fc:39:2b:d5:f2:a6:
         9d:65:96:8f:e4:c7:f4:d6:9e:a3:0e:19:ce:42:e2:67:6f:66:
         56:cf:9c:67:80:5a:8b:bd:5c:65:a9:b2:f5:d6:ed:d6:f6:5f:
         20:da:57:2b:26:b8:ce:a3:d4:8d:66:32:e8:76:71:c3:9c:31:
         07:bb:e1:87:f6:aa:70:a0:87:b4:4b:7d:7a:a7:25:9a:87:8b:
         ec:6d:55:a5:b8:c0:1e:c2:f0:17:5f:66:24:eb:6d:37:60:d8:
         a6:bf:0e:6e:0c:ba:2c:f1:00:5a:01:60:55:0c:9b:66:ce:ae:
         29:e2:9e:a0:5f:78:28:c0:12:ec:c6:44:df:3f:ad:0c:54:53:
         68:69:a8:84:44:c5:64:ce:ca:3a:43:5f:24:b3:86:f6:a2:67:
         5c:ad:fc:d4:65:1a:61:8f:a9:52:be:17:5e:fe:f0:43:4a:ff:
         cb:b2:99:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:35:56 2024 by rpki-client on console-fra.rpki-client.org