Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86.cer
File:                     6fd900fb-7b81-4099-bb11-824fdecd0a86.cer (raw, json)
Hash identifier:          NRWbYzEjaX6NyiHUKxrN6/8I14YDdVZ92c5MBR0VIeg=
Subject key identifier:   3B:29:4A:9B:4E:89:0C:58:09:38:E8:26:5A:18:EE:48:9E:18:0B:A5
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843C4D5B4E9117AD0C1CA06D900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/6fd900fb-7b81-4099-bb11-824fdecd0a86.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 03 Nov 2023 20:21:14 +0000
Certificate not after:    Fri 16 Jan 2026 00:39:28 +0000
Subordinate resources:    AS: 16950
                          AS: 62501
                          IP: 23.164.24.0/24
                          IP: 2620:c0:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:c4:d5:b4:e9:11:7a:d0:c1:ca:06:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov  3 20:21:14 2023 GMT
            Not After : Jan 16 00:39:28 2026 GMT
        Subject: CN=6fd900fb-7b81-4099-bb11-824fdecd0a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ca:b3:58:6f:2e:59:36:3f:b8:fd:d7:e5:f3:
                    28:81:3b:f8:35:c5:7f:fc:6a:dd:c5:a3:0c:70:38:
                    30:a9:dd:59:2b:00:47:2c:71:db:60:10:df:9d:b2:
                    ac:12:04:e8:4f:86:e8:8f:7a:06:eb:eb:a9:f5:1d:
                    74:df:16:9a:0a:19:0a:a4:83:51:93:b3:1a:47:70:
                    19:84:e8:b2:1f:ef:04:ff:7c:47:53:de:25:76:c4:
                    a5:9c:64:06:4a:2e:b1:40:b5:cb:6b:2c:49:2f:16:
                    d0:cf:af:83:99:ad:c5:a4:c5:6d:97:f2:56:27:68:
                    20:2a:45:61:d3:60:f5:5b:c1:12:be:43:f4:1f:93:
                    04:f0:58:86:ad:2c:de:0e:3a:a9:2f:dc:43:0c:91:
                    84:2b:c6:60:ff:c4:3f:d4:06:75:c1:d8:b6:29:95:
                    e3:69:6d:32:27:44:2f:ef:df:07:cd:51:ba:da:e0:
                    9e:3b:ef:d2:82:42:6d:1e:68:bb:7f:e0:4d:3f:85:
                    c4:fb:8f:ae:bd:db:cd:d1:ab:f6:8f:da:5d:3f:5e:
                    36:50:50:52:f6:fc:3b:c7:d0:92:86:7e:d9:91:d7:
                    86:56:06:b8:72:99:7e:98:7a:ff:16:af:e1:8d:91:
                    64:ba:61:b8:ce:7a:6c:5c:df:f9:fb:32:6b:b3:80:
                    95:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:29:4A:9B:4E:89:0C:58:09:38:E8:26:5A:18:EE:48:9E:18:0B:A5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/6fd900fb-7b81-4099-bb11-824fdecd0a86.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.24.0/24
                IPv6:
                  2620:c0:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16950
                  62501

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:5d:06:63:d9:70:bc:dc:70:1f:b2:f6:c8:c5:2d:00:e0:1b:
         7b:7c:59:00:ce:8f:0e:cb:cd:6d:d8:83:5d:fa:1d:14:38:ad:
         5c:ee:05:d1:0a:15:03:2c:09:e7:5c:a1:bc:da:02:81:26:53:
         cf:1a:7a:c9:3f:ad:d1:ef:6e:e2:1d:61:5b:d6:69:fe:af:b1:
         54:68:5f:eb:c7:49:6f:41:53:6e:2c:da:c6:9b:ae:cc:2a:d0:
         10:9e:6d:27:95:d1:44:91:4b:59:99:33:72:12:d4:bd:2b:68:
         1d:06:15:b4:95:ea:f0:87:f5:97:c2:76:82:4c:d3:9f:88:77:
         ef:7b:ba:90:87:92:7c:86:79:a8:3b:ba:a8:02:63:7b:06:56:
         cc:3b:ce:22:7a:07:84:ed:0c:84:e2:a9:1b:5b:35:ce:c9:d5:
         23:16:03:94:00:da:69:0c:84:3f:55:29:68:a0:bc:00:51:be:
         05:b3:f2:da:00:b7:91:56:d1:bb:64:d0:ad:13:13:8a:2a:e3:
         78:9e:98:fb:07:10:51:53:cd:6b:b0:b6:51:63:3d:f7:62:1d:
         e6:a0:cb:8b:f6:61:d7:4a:98:e8:c5:86:ff:ba:16:21:62:05:
         16:b8:7b:83:68:d0:91:bd:49:b9:98:78:cb:5c:73:d8:17:e0:
         96:cd:36:77
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEPE1bTpEXrQwcoG2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTEwMzIwMjExNFoXDTI2MDExNjAwMzkyOFowLzEtMCsGA1UEAxMk
NmZkOTAwZmItN2I4MS00MDk5LWJiMTEtODI0ZmRlY2QwYTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8qzWG8uWTY/uP3X5fMogTv4NcV//GrdxaMM
cDgwqd1ZKwBHLHHbYBDfnbKsEgToT4boj3oG6+up9R103xaaChkKpINRk7MaR3AZ
hOiyH+8E/3xHU94ldsSlnGQGSi6xQLXLayxJLxbQz6+Dma3FpMVtl/JWJ2ggKkVh
02D1W8ESvkP0H5ME8FiGrSzeDjqpL9xDDJGEK8Zg/8Q/1AZ1wdi2KZXjaW0yJ0Qv
798HzVG62uCeO+/SgkJtHmi7f+BNP4XE+4+uvdvN0av2j9pdP142UFBS9vw7x9CS
hn7ZkdeGVga4cpl+mHr/Fq/hjZFkumG4znpsXN/5+zJrs4CV9wIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFDspSptOiQxYCTjoJloY7kieGAulMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82
ZmQ5MDBmYi03YjgxLTQwOTktYmIxMS04MjRmZGVjZDBhODYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzZmZDkwMGZiLTdiODEtNDA5OS1i
YjExLTgyNGZkZWNkMGE4Ni82ZmQ5MDBmYi03YjgxLTQwOTktYmIxMS04MjRmZGVj
ZDBhODYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBAAXpBgwDwQCAAIwCQMHACYgAMCgADAeBggrBgEF
BQcBCAEB/wQPMA2gCzAJAgJCNgIDAPQlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAINdBmPZcLzccB+y9sjF
LQDgG3t8WQDOjw7LzW3Yg136HRQ4rVzuBdEKFQMsCedcobzaAoEmU88aesk/rdHv
buIdYVvWaf6vsVRoX+vHSW9BU24s2sabrswq0BCebSeV0USRS1mZM3IS1L0raB0G
FbSV6vCH9ZfCdoJM05+Id+97upCHknyGeag7uqgCY3sGVsw7ziJ6B4TtDITiqRtb
Nc7J1SMWA5QA2mkMhD9VKWigvABRvgWz8toAt5FW0btk0K0TE4oq43iemPsHEFFT
zWuwtlFjPfdiHeagy4v2YddKmOjFhv+6FiFiBRa4e4No0JG9SbmYeMtcc9gX4JbN
Nnc=
-----END CERTIFICATE-----