Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78cb0c6a-70b2-4597-8ceb-08cb45726783.cer
File:                     78cb0c6a-70b2-4597-8ceb-08cb45726783.cer (raw, json)
Hash identifier:          K5mxUdZlicWZMsVDh0IQtchkyi4mxuG45TdtoTFyzpc=
Subject key identifier:   FA:EC:E1:BC:CA:E2:D4:DB:BC:7B:4F:52:3C:0F:AA:DE:5B:07:3F:D8
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858446C15CA7D7870533474330A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78cb0c6a-70b2-4597-8ceb-08cb45726783/78cb0c6a-70b2-4597-8ceb-08cb45726783.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78cb0c6a-70b2-4597-8ceb-08cb45726783/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 18:10:21 +0000
Certificate not after:    Mon 06 Apr 2026 17:10:21 +0000
Subordinate resources:    AS: 4902
                          IP: 205.196.4.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:6c:15:ca:7d:78:70:53:34:74:33:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan  2 18:10:21 2024 GMT
            Not After : Apr  6 17:10:21 2026 GMT
        Subject: CN=78cb0c6a-70b2-4597-8ceb-08cb45726783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c8:59:f8:a7:57:04:cb:84:57:af:d9:29:c3:
                    19:20:18:02:71:14:cb:43:e2:ba:14:21:78:2c:55:
                    45:90:3f:39:64:7b:a9:d3:4e:e0:53:c0:a1:fe:c3:
                    53:64:cb:bc:56:ae:1c:b8:e1:82:a6:55:3e:18:6e:
                    b0:b8:56:a1:da:bd:a7:d5:e1:11:34:9c:2b:42:de:
                    7e:80:09:ae:e4:23:93:67:07:c5:ba:11:79:73:b9:
                    65:8e:bc:ee:bd:1a:79:e6:d4:1a:3f:c2:a8:0b:2e:
                    88:b1:f9:eb:98:fc:11:51:96:df:3a:96:30:3b:e1:
                    46:40:2d:94:31:32:e9:31:bb:7b:85:d9:50:3e:87:
                    6c:b1:89:87:72:2f:1c:ca:cf:8e:0f:1a:98:18:e7:
                    52:73:7a:3c:87:38:0c:1a:1e:62:d4:a4:d5:75:c6:
                    47:6f:e1:3c:3d:dc:d6:03:d4:14:f2:0f:a4:44:c0:
                    54:6e:58:94:9d:b2:3a:9e:62:56:63:13:ee:38:43:
                    c4:4e:04:9b:7c:af:ac:10:bb:0b:6c:61:3b:88:19:
                    43:fe:50:8f:ce:d8:92:0e:e1:f2:8d:67:4d:6a:73:
                    8a:30:15:67:04:f1:2b:4d:e7:fd:1e:e8:1c:7f:15:
                    8c:3c:13:36:b4:b9:61:a1:49:bf:4c:38:b9:e8:1d:
                    a0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EC:E1:BC:CA:E2:D4:DB:BC:7B:4F:52:3C:0F:AA:DE:5B:07:3F:D8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78cb0c6a-70b2-4597-8ceb-08cb45726783/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78cb0c6a-70b2-4597-8ceb-08cb45726783/78cb0c6a-70b2-4597-8ceb-08cb45726783.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.4.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4902

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:1c:47:7c:b6:a9:aa:06:15:f7:52:8d:d3:3a:8a:6f:dd:b8:
         7e:b6:89:22:ef:5d:34:9f:d5:44:a2:10:62:89:ea:a9:8d:64:
         63:04:2e:d2:71:99:d7:de:75:ef:0a:62:62:8c:1f:5a:b9:cd:
         dc:a2:97:74:b8:c1:21:04:82:ce:06:73:69:25:57:c7:23:83:
         24:a4:b9:d9:32:c5:8e:3f:b5:de:1a:b8:8d:26:48:2c:2d:cc:
         2b:a0:19:48:d2:b0:c3:72:e0:64:92:6c:17:eb:4d:41:40:a4:
         67:c2:a1:68:c7:f5:43:83:2c:96:7a:2f:b1:de:44:10:51:49:
         d2:d3:59:a3:76:81:ee:5b:a4:a2:ba:6d:d3:84:d8:fd:47:2e:
         ad:ac:39:7b:8f:5c:6f:3b:0c:4e:ed:c2:e9:34:bb:8b:97:b5:
         0f:cc:b0:92:77:92:2a:20:e4:1d:ae:05:3b:69:36:b7:e0:dd:
         c0:ae:cc:9b:09:9e:f0:6c:13:8f:ee:8d:cd:61:94:0e:ee:e5:
         fb:dd:82:0a:ad:52:02:ec:be:77:38:77:05:08:fb:ed:10:21:
         1f:9a:21:d1:0d:40:0f:43:41:63:c6:a1:9f:81:b1:5b:fc:2c:
         54:54:34:ba:86:a2:4f:86:4a:7b:6c:a4:ca:56:4b:bd:ec:ff:
         d3:39:91:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----