Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b.cer
File:                     6d944863-bb4b-4403-99d8-bdd9488dc28b.cer (raw, json)
Hash identifier:          c8/v+wMwd9Yalj1eRE/VfLF10J7B+m01/6i2VVfWBc4=
Subject key identifier:   D8:C6:D8:E7:FB:B9:CD:70:02:7B:7B:3E:6A:DA:A5:DA:3E:65:8C:96
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843FE69095DECDE0FAD3B9C3B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b/6d944863-bb4b-4403-99d8-bdd9488dc28b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 24 Nov 2023 11:19:09 +0000
Certificate not after:    Thu 26 Feb 2026 11:19:09 +0000
Subordinate resources:    IP: 23.165.248.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:fe:69:09:5d:ec:de:0f:ad:3b:9c:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 24 11:19:09 2023 GMT
            Not After : Feb 26 11:19:09 2026 GMT
        Subject: CN=6d944863-bb4b-4403-99d8-bdd9488dc28b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:99:5d:e6:cf:4e:ea:41:6d:7c:bc:19:7d:cd:
                    90:0c:c6:45:c5:8f:f6:a5:69:37:2a:c8:23:f6:dd:
                    f8:b1:eb:5a:3f:77:52:fb:11:af:27:fe:27:14:cf:
                    61:49:dc:4f:59:a9:a0:a3:2b:02:cb:4a:03:95:36:
                    a8:4a:8b:88:ba:06:b8:47:33:9b:af:02:c9:09:02:
                    79:87:c8:fc:4d:ef:a7:c8:af:91:63:56:63:a0:95:
                    3e:d3:f0:25:cb:db:42:18:81:34:93:55:96:85:f3:
                    7e:5d:96:3b:05:a2:eb:2a:38:f1:06:7d:f0:21:f0:
                    81:05:7b:68:c3:ba:98:f3:cb:3e:52:8e:25:4a:56:
                    59:9f:9b:37:37:59:05:dc:62:70:97:93:53:84:46:
                    f3:a7:aa:0b:e2:d6:5e:7c:bf:76:8b:36:60:8b:c8:
                    f9:88:30:39:cf:17:61:bd:2c:34:27:85:a1:cd:6a:
                    37:d4:05:76:6a:d1:66:a7:99:35:b8:3d:65:34:3e:
                    46:15:fd:ce:38:27:0b:25:3c:76:ed:cd:7e:5d:e9:
                    d3:8b:99:c7:47:8a:cf:00:09:c7:2f:54:9f:89:0b:
                    e9:71:da:08:2d:4d:ec:b1:3c:2c:3e:86:6f:49:21:
                    5a:b4:1e:4b:d6:d3:4e:78:68:5d:51:0d:b1:67:db:
                    73:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C6:D8:E7:FB:B9:CD:70:02:7B:7B:3E:6A:DA:A5:DA:3E:65:8C:96
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b/6d944863-bb4b-4403-99d8-bdd9488dc28b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ba:f3:a1:fe:e8:4e:7a:f5:44:6e:eb:c4:ec:5f:28:11:38:
         20:14:88:5d:07:d5:e8:da:88:f3:65:1f:26:6e:ff:c9:33:72:
         3c:bd:63:8d:68:5c:96:ba:ba:a6:b7:02:bd:8e:5e:95:7a:41:
         cd:a1:8d:db:86:1d:2e:d4:43:6a:07:d5:95:00:9b:53:a6:67:
         5f:67:c0:0e:b9:06:c2:3a:af:69:9d:c3:60:ed:cf:ab:30:b6:
         b6:fc:3d:af:56:a9:34:07:9d:e7:64:fe:52:40:7d:4a:ed:b7:
         9a:07:be:22:1d:d3:00:51:a9:45:45:57:d1:e1:a8:54:3b:e2:
         55:09:44:0a:8f:46:93:72:bf:45:3b:c1:5f:7f:07:6c:b1:31:
         d3:36:c3:f7:0d:cf:b8:af:6c:4b:d3:a0:2f:5c:ab:38:fa:0a:
         3d:7a:fd:57:0d:70:0f:28:1b:82:8a:b0:c7:6d:a7:90:28:d0:
         cc:00:03:7a:ff:48:1b:c1:28:9a:7a:ed:d7:e3:07:c8:54:8e:
         ac:47:1f:99:8b:8c:3c:3c:0a:0d:5a:86:79:0e:fe:c8:1c:02:
         e8:0c:d3:3e:91:ce:4b:eb:5a:f7:ce:82:ab:fe:bb:cb:5a:5c:
         dd:61:b1:52:3a:f1:44:af:c4:5f:43:7e:04:6b:af:f0:ee:a1:
         16:ba:8a:ed
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEP+aQld7N4PrTucO4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTEyNDExMTkwOVoXDTI2MDIyNjExMTkwOVowLzEtMCsGA1UEAxMk
NmQ5NDQ4NjMtYmI0Yi00NDAzLTk5ZDgtYmRkOTQ4OGRjMjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJld5s9O6kFtfLwZfc2QDMZFxY/2pWk3Ksgj
9t34setaP3dS+xGvJ/4nFM9hSdxPWamgoysCy0oDlTaoSouIuga4RzObrwLJCQJ5
h8j8Te+nyK+RY1ZjoJU+0/Aly9tCGIE0k1WWhfN+XZY7BaLrKjjxBn3wIfCBBXto
w7qY88s+Uo4lSlZZn5s3N1kF3GJwl5NThEbzp6oL4tZefL92izZgi8j5iDA5zxdh
vSw0J4WhzWo31AV2atFmp5k1uD1lND5GFf3OOCcLJTx27c1+XenTi5nHR4rPAAnH
L1SfiQvpcdoILU3ssTwsPoZvSSFatB5L1tNOeGhdUQ2xZ9tzxwIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFNjG2Of7uc1wAnt7Pmrapdo+ZYyWMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82
ZDk0NDg2My1iYjRiLTQ0MDMtOTlkOC1iZGQ5NDg4ZGMyOGIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzZkOTQ0ODYzLWJiNGItNDQwMy05
OWQ4LWJkZDk0ODhkYzI4Yi82ZDk0NDg2My1iYjRiLTQ0MDMtOTlkOC1iZGQ5NDg4
ZGMyOGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAXpfgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlLrzof7oTnr1RG7rxOxf
KBE4IBSIXQfV6NqI82UfJm7/yTNyPL1jjWhclrq6prcCvY5elXpBzaGN24YdLtRD
agfVlQCbU6ZnX2fADrkGwjqvaZ3DYO3PqzC2tvw9r1apNAed52T+UkB9Su23mge+
Ih3TAFGpRUVX0eGoVDviVQlECo9Gk3K/RTvBX38HbLEx0zbD9w3PuK9sS9OgL1yr
OPoKPXr9Vw1wDygbgoqwx22nkCjQzAADev9IG8Eomnrt1+MHyFSOrEcfmYuMPDwK
DVqGeQ7+yBwC6AzTPpHOS+ta986Cq/67y1pc3WGxUjrxRK/EX0N+BGuv8O6hFrqK
7Q==
-----END CERTIFICATE-----