Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer
File:                     68e273c1-e39f-464b-8c1f-b45c8df2b148.cer (raw, json)
Hash identifier:          AvgwceJuCfku23t1ikz9lgu01F6HJg2+w4PFFBoY3EY=
Subject key identifier:   4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285844371626FD01AFF6382CF1F400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 14 Dec 2023 18:33:14 +0000
Certificate not after:    Wed 18 Mar 2026 17:33:14 +0000
Subordinate resources:    AS: 26886
                          IP: 23.167.136.0/24
                          IP: 2607:82c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:37:16:26:fd:01:af:f6:38:2c:f1:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec 14 18:33:14 2023 GMT
            Not After : Mar 18 17:33:14 2026 GMT
        Subject: CN=68e273c1-e39f-464b-8c1f-b45c8df2b148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:65:2e:bc:f8:3f:9d:02:cb:b1:e0:bf:f1:7f:
                    73:7c:17:93:22:33:7e:0c:9a:5a:92:b7:f5:2c:35:
                    e8:35:df:2b:4b:dd:67:1d:ab:9d:b4:f8:96:4e:cd:
                    19:2d:97:d9:01:50:7d:31:fa:3f:30:2e:1c:31:9f:
                    73:a8:94:36:4b:09:44:1b:ea:6a:87:52:5c:ab:49:
                    ef:fc:96:98:35:ec:30:16:67:a5:9a:64:79:20:c1:
                    e4:a7:ed:2e:64:c5:76:f1:89:de:4d:0e:83:b3:87:
                    7b:9a:d4:cc:81:20:94:f3:a1:85:7c:94:2f:c5:73:
                    e7:3d:77:89:90:11:5e:4c:bd:b4:be:d8:05:0d:59:
                    0a:c6:28:e8:c1:f8:c8:b2:28:65:5a:db:21:15:7e:
                    39:6a:c3:85:0f:ea:a4:97:e0:c3:88:fb:4b:b0:49:
                    f8:7d:ce:9e:b5:de:3e:30:ba:43:c7:e4:c7:f1:85:
                    7a:43:d9:42:d7:51:fd:da:24:3b:b1:e5:05:f8:f7:
                    49:7b:61:b4:bf:fc:65:f3:6a:9d:a2:1d:6b:01:1d:
                    72:86:3f:5e:d4:f8:a5:47:8c:07:74:6a:f6:9f:33:
                    7c:00:b9:1e:40:3b:ee:db:23:b8:70:ad:29:5f:7f:
                    c3:0f:f2:c9:c5:27:91:57:d1:3c:e1:15:9f:90:1a:
                    2e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.136.0/24
                IPv6:
                  2607:82c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26886

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:4f:0a:2d:8b:16:9b:f5:74:28:e0:d5:64:15:ae:60:1b:68:
         31:d3:2d:7f:1d:a1:68:57:57:af:6d:fc:8b:d7:3c:c1:a8:85:
         a9:75:46:26:1d:bc:76:60:07:be:06:0d:b0:14:36:f4:d4:1b:
         e1:dc:e1:9a:f9:74:28:43:78:fb:bb:d8:e3:b6:80:6d:11:e9:
         2d:2f:83:f6:93:8b:26:39:a1:f7:90:bc:e7:db:6b:a3:8c:b9:
         43:c1:cb:3a:37:87:89:59:9c:0c:db:dd:14:f6:4c:53:78:7d:
         f5:ed:b2:ff:2c:8a:7e:c5:11:d0:a7:16:fb:88:79:f7:67:20:
         11:b6:38:dd:27:17:bf:e6:0b:09:a2:30:e3:89:10:a2:22:89:
         5d:cf:70:83:e9:e1:19:57:c6:7f:f7:f1:56:5f:a2:44:8d:17:
         c8:3f:bf:f4:a4:cc:ab:7c:a5:b7:e4:71:05:9e:76:b0:27:f1:
         fe:33:17:38:18:8a:00:5a:d2:f0:b0:52:4e:c2:42:8e:72:d2:
         5c:28:28:40:7a:89:50:02:c7:72:7b:c0:f2:f6:09:a1:5b:08:
         fa:10:ff:68:8b:fa:96:bc:2f:39:5e:37:00:d8:73:07:80:df:
         0b:73:69:a5:a5:94:d0:15:3b:44:b2:f7:8d:c4:0b:75:07:15:
         0b:12:3b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----