Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer
File:                     54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer (raw, json)
Hash identifier:          kFmFpzhNs1oyqnjTY8/fzbVKvV3mCjgieYzrUBRuDd0=
Subject key identifier:   BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843E8170EBDEE52CAB73318C4A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 16 Nov 2023 11:26:12 +0000
Certificate not after:    Wed 18 Feb 2026 11:26:12 +0000
Subordinate resources:    IP: 64.95.152.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e8:17:0e:bd:ee:52:ca:b7:33:18:c4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 16 11:26:12 2023 GMT
            Not After : Feb 18 11:26:12 2026 GMT
        Subject: CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1c:c4:16:fb:3d:a4:00:1d:f0:21:ff:af:1a:
                    f4:e7:4b:00:0f:02:8e:b8:5a:53:11:c0:39:54:02:
                    d5:d8:18:09:aa:aa:51:d7:52:12:72:37:9d:e9:91:
                    ba:e8:29:04:e5:65:ec:6f:42:94:5a:66:87:75:2d:
                    78:e4:75:20:8d:b5:1e:7a:84:50:6f:d2:74:af:f7:
                    85:11:59:c9:95:cc:53:b6:fa:8b:2a:71:f6:2d:ca:
                    64:bf:ea:73:9a:8b:28:de:73:c8:9d:d7:45:cf:17:
                    c9:d6:56:9c:75:ec:c7:26:ef:4f:95:80:6e:ca:c8:
                    2e:5c:bb:33:5c:5c:d9:a9:e6:bb:32:e3:1e:31:7d:
                    37:8f:ed:35:f5:d5:a7:7b:e4:fb:0d:c3:39:85:7b:
                    c8:25:b1:08:0f:7f:20:c3:bc:d0:98:9b:92:f7:7e:
                    ee:8c:73:87:70:a4:b7:a8:43:84:af:36:bb:7a:47:
                    2f:84:ff:d1:55:3c:58:99:16:c3:57:3f:97:4b:0a:
                    43:9b:15:62:2c:f0:47:14:ca:b9:2e:a6:22:9c:72:
                    b1:bc:e0:52:76:aa:4f:e7:1e:ad:7e:a9:9f:8d:6a:
                    e9:22:84:43:db:66:f6:92:d8:66:43:5d:7e:b2:07:
                    c0:07:1a:09:4b:6d:d5:49:ff:79:cf:49:cb:42:b7:
                    1a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:c6:ff:a5:dd:82:4a:4f:be:3d:62:a5:be:86:88:53:f2:af:
         ad:f0:72:61:c4:9f:73:b7:ab:a1:8b:b9:75:5d:76:4c:4a:97:
         cd:1a:21:bf:60:fd:28:20:6b:7f:6e:f7:50:47:70:d2:cc:74:
         13:4e:ab:be:f2:9c:2c:87:8e:59:ae:55:ec:8d:19:82:df:5d:
         68:4c:1f:b4:07:7f:c9:4f:56:63:3d:c2:22:8f:c4:db:d4:24:
         48:4d:ef:39:aa:0f:c9:b0:76:01:fe:19:cb:3a:31:b5:f4:c9:
         2f:1f:9f:06:6a:aa:93:69:84:33:f8:c5:bb:f4:f9:eb:c3:14:
         10:7c:16:d6:4f:45:de:d2:32:6c:79:0b:af:8b:7f:50:71:f4:
         ca:5e:da:e4:7b:2b:a6:d0:70:c3:a2:56:ec:c5:b2:23:b9:1c:
         cb:05:a6:67:7a:27:5c:d9:2f:be:17:83:41:37:f0:26:d9:91:
         e1:8c:fb:20:7b:af:65:28:12:07:3e:3c:42:b3:74:8a:cd:96:
         51:ef:ba:0a:49:95:ce:06:61:b0:fe:d0:73:69:b8:6b:b7:13:
         ce:9c:e5:ad:16:29:3e:5e:a9:7d:2f:75:98:1b:7b:79:a3:2f:
         08:84:51:ec:a9:a5:b7:62:98:ac:24:2c:91:47:89:7e:a3:98:
         54:62:9c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----