Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e093d22-0e04-4f30-8669-9e234d6b3fc5.cer
File:                     6e093d22-0e04-4f30-8669-9e234d6b3fc5.cer (raw, json)
Hash identifier:          y3nUDM7Qytsw71eLrTdZjKxC+KJOxLMfNEyR1HT4HkM=
Subject key identifier:   35:B2:9C:DE:9D:FF:D4:93:E3:3F:58:84:EB:26:69:27:F5:10:7C:2C
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843C56DA08A4D75517F0E2EECF0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e093d22-0e04-4f30-8669-9e234d6b3fc5/6e093d22-0e04-4f30-8669-9e234d6b3fc5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e093d22-0e04-4f30-8669-9e234d6b3fc5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 04 Nov 2023 01:27:20 +0000
Certificate not after:    Fri 06 Feb 2026 02:27:20 +0000
Subordinate resources:    AS: 395400

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:c5:6d:a0:8a:4d:75:51:7f:0e:2e:ec:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov  4 01:27:20 2023 GMT
            Not After : Feb  6 02:27:20 2026 GMT
        Subject: CN=6e093d22-0e04-4f30-8669-9e234d6b3fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:75:ce:5f:81:9b:8c:fe:a1:ce:c9:ba:bc:
                    70:e7:56:46:d3:ca:1b:9c:b6:3e:9b:02:0b:d5:bd:
                    93:4b:b1:03:64:d9:e7:d2:7a:45:55:f7:50:49:75:
                    c2:e5:74:89:e4:91:c4:fe:d6:66:cf:d1:c4:06:36:
                    e4:06:b6:31:ff:a4:45:33:8c:ce:0d:35:11:23:b9:
                    b0:05:3c:e7:c0:d6:ee:9a:66:c6:e9:1d:77:ff:9a:
                    77:15:9e:9b:bf:26:af:c8:29:77:0d:52:5d:39:b4:
                    d1:04:b5:8d:9a:3e:ad:b9:43:23:a8:4b:b0:b0:04:
                    af:4e:e1:76:68:c5:07:2a:eb:03:dd:0d:4c:c8:e3:
                    84:44:26:9b:98:d3:81:68:20:e0:cc:12:bd:e5:d9:
                    c2:65:ee:e5:d7:1d:aa:b1:a4:4d:ed:8d:68:80:b1:
                    d1:59:e4:12:f7:1c:fc:a1:8e:46:cc:33:46:f1:79:
                    27:10:fe:a2:38:34:4b:18:c3:cc:f9:5b:32:82:7a:
                    d6:b8:34:6a:c9:fe:4d:d7:9d:c1:c2:a6:51:d4:05:
                    30:ba:9e:57:5b:0c:af:76:86:1c:1e:b0:d7:04:96:
                    7d:d1:77:2d:a7:e5:f7:cd:1e:2e:06:0e:47:f5:d0:
                    fb:29:ea:f5:2e:99:a0:8b:d3:ba:5a:54:af:72:9d:
                    78:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B2:9C:DE:9D:FF:D4:93:E3:3F:58:84:EB:26:69:27:F5:10:7C:2C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e093d22-0e04-4f30-8669-9e234d6b3fc5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e093d22-0e04-4f30-8669-9e234d6b3fc5/6e093d22-0e04-4f30-8669-9e234d6b3fc5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395400

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8d:5f:9d:9a:9b:5c:33:20:46:dc:65:5a:5b:6b:aa:74:7e:
         ae:28:f3:c3:91:26:fe:48:8e:68:4d:ae:70:c2:d7:56:50:48:
         db:67:59:88:3c:bd:d7:d4:ff:17:de:32:66:9a:b7:4f:a4:7f:
         d5:3d:14:34:63:f9:9a:d1:49:23:72:88:0a:fd:9d:9b:39:4e:
         ce:24:21:a0:6a:a0:67:64:60:0d:60:a5:8f:8b:97:78:7a:d0:
         ac:50:23:c8:e8:f1:44:ca:c3:42:9e:9d:91:35:44:a0:6b:21:
         b9:c4:5f:31:bf:a9:3c:c9:05:0b:a3:e5:79:83:ac:e1:cc:8d:
         9b:76:a0:0d:83:5f:73:8f:48:7d:af:24:21:f3:f6:1a:08:d9:
         26:4d:c0:b7:fd:e4:0d:75:0a:f9:86:28:77:59:e7:9d:0d:a1:
         d4:db:1c:6e:d1:8c:85:ff:3a:3d:1a:70:67:8b:c8:5c:13:26:
         22:64:76:49:35:c4:2f:1d:2b:1a:e0:ab:25:91:c4:bd:43:bd:
         7e:d7:2c:b3:26:52:e4:ff:d2:8e:79:9f:e2:f5:38:c2:ad:ed:
         0c:73:92:5b:36:ba:30:4e:a1:f6:b8:30:2f:4f:44:97:3d:9d:
         be:51:38:00:dd:05:8a:da:c3:0b:f9:11:11:84:2e:95:a8:fb:
         7b:2a:0d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:16 2024 by rpki-client on console-ams.rpki-client.org