Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/840cdf7a-4078-44fb-a6ae-b94f6eb32b19.cer
File:                     840cdf7a-4078-44fb-a6ae-b94f6eb32b19.cer (raw, json)
Hash identifier:          BjeZro3CHVRjWvYA+yhTvuxZf5BK0BFy6W738OCjj24=
Subject key identifier:   79:6D:E6:40:0A:F3:A6:FE:2E:49:99:7B:9B:9E:ED:9B:56:F4:DE:E3
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858437098278C04E76C0F72120600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/840cdf7a-4078-44fb-a6ae-b94f6eb32b19/840cdf7a-4078-44fb-a6ae-b94f6eb32b19.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/840cdf7a-4078-44fb-a6ae-b94f6eb32b19/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 04 Oct 2023 16:09:18 +0000
Certificate not after:    Thu 25 Dec 2025 20:52:06 +0000
Subordinate resources:    AS: 31821
                          IP: 198.62.116.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:70:98:27:8c:04:e7:6c:0f:72:12:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct  4 16:09:18 2023 GMT
            Not After : Dec 25 20:52:06 2025 GMT
        Subject: CN=840cdf7a-4078-44fb-a6ae-b94f6eb32b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9a:af:08:5f:0e:dd:6a:fa:a9:c9:95:78:f8:
                    92:7a:89:19:7b:49:eb:84:d1:47:fb:bc:87:a6:f7:
                    dd:8f:56:28:c3:bc:81:b7:f0:fc:14:84:81:37:bc:
                    05:88:79:a1:51:f6:ce:ca:a0:da:9a:7e:6d:c6:6a:
                    88:ec:38:55:aa:15:78:02:73:af:11:0b:c2:22:e2:
                    52:2b:f9:fe:c8:20:f2:ff:82:bc:62:20:f1:0c:80:
                    75:31:fa:98:b2:7e:49:97:69:e7:23:dd:75:7d:67:
                    0d:b4:13:45:c3:1d:9a:bd:a8:67:dd:12:48:7b:53:
                    e5:d3:eb:46:e7:f8:1c:3c:bf:b4:71:d5:91:eb:d9:
                    03:23:43:f1:ca:8c:2a:a7:4d:91:a8:8a:4e:ed:5a:
                    ac:ad:ec:c9:c2:13:ab:84:3a:fb:54:be:d0:70:01:
                    01:35:78:c3:f3:43:61:91:92:8d:49:3c:d7:86:02:
                    78:ce:34:e7:58:78:52:b3:e5:d8:0d:03:a2:8a:cb:
                    1a:f4:30:96:57:eb:a2:4d:b2:31:34:61:e5:ca:34:
                    5d:47:a3:6a:43:fc:73:e2:16:72:ca:60:08:00:50:
                    48:5b:72:98:16:63:c0:d1:67:cd:a8:85:5e:e1:8d:
                    8c:db:b4:b0:ea:1c:ed:4b:64:8f:01:c7:1f:df:46:
                    37:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6D:E6:40:0A:F3:A6:FE:2E:49:99:7B:9B:9E:ED:9B:56:F4:DE:E3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/840cdf7a-4078-44fb-a6ae-b94f6eb32b19/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/840cdf7a-4078-44fb-a6ae-b94f6eb32b19/840cdf7a-4078-44fb-a6ae-b94f6eb32b19.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.62.116.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31821

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:20:2c:fd:2a:30:e3:d5:7f:5a:02:67:15:bf:1d:41:86:29:
         9f:87:b3:cb:da:2a:3f:4a:69:86:0e:f8:ce:cd:f2:ce:9b:fd:
         f5:03:cd:b2:94:b1:ba:93:57:5d:d0:47:6e:26:bd:2d:91:b4:
         8f:ed:04:a2:92:97:ec:14:3d:cd:0f:8f:bd:76:7c:09:af:99:
         b1:c7:80:45:1f:46:b3:67:44:af:bc:0b:93:ea:8b:f7:84:ea:
         d1:db:6f:e2:b7:12:41:64:d7:63:3c:6b:b8:cd:ba:af:9c:f3:
         57:30:bd:8f:7d:e1:e5:7e:1b:93:b7:c0:9a:4c:0d:f6:34:3c:
         a4:c4:f2:15:c2:5d:ee:bf:9a:9c:46:6f:f4:7f:b8:9c:9c:d4:
         06:8a:23:16:bb:5e:36:1f:31:b2:b1:64:15:ea:a9:7f:0f:df:
         cc:c4:62:85:85:b1:5b:b4:6d:8d:df:e7:14:f9:41:c5:76:b8:
         f9:32:1b:eb:6d:a0:ba:8f:06:5c:df:7d:b9:b4:3f:a6:26:ec:
         47:33:b3:2a:5e:58:7e:33:fd:e5:1b:7c:8c:0c:f3:60:d3:48:
         7e:d6:d8:22:41:57:3b:f1:69:d5:9a:b9:1f:2b:9d:c5:46:eb:
         d1:59:48:6d:aa:33:4b:1a:e4:61:56:71:30:b4:9a:75:06:70:
         f0:d2:95:26
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWENwmCeMBOdsD3ISBgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTAwNDE2MDkxOFoXDTI1MTIyNTIwNTIwNlowLzEtMCsGA1UEAxMk
ODQwY2RmN2EtNDA3OC00NGZiLWE2YWUtYjk0ZjZlYjMyYjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5qvCF8O3Wr6qcmVePiSeokZe0nrhNFH+7yH
pvfdj1Yow7yBt/D8FISBN7wFiHmhUfbOyqDamn5txmqI7DhVqhV4AnOvEQvCIuJS
K/n+yCDy/4K8YiDxDIB1MfqYsn5Jl2nnI911fWcNtBNFwx2avahn3RJIe1Pl0+tG
5/gcPL+0cdWR69kDI0Pxyowqp02RqIpO7VqsrezJwhOrhDr7VL7QcAEBNXjD80Nh
kZKNSTzXhgJ4zjTnWHhSs+XYDQOiissa9DCWV+uiTbIxNGHlyjRdR6NqQ/xz4hZy
ymAIAFBIW3KYFmPA0WfNqIVe4Y2M27Sw6hztS2SPAccf30Y3kwIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFHlt5kAK86b+LkmZe5ue7ZtW9N7jMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84
NDBjZGY3YS00MDc4LTQ0ZmItYTZhZS1iOTRmNmViMzJiMTkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzg0MGNkZjdhLTQwNzgtNDRmYi1h
NmFlLWI5NGY2ZWIzMmIxOS84NDBjZGY3YS00MDc4LTQ0ZmItYTZhZS1iOTRmNmVi
MzJiMTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADGPnQwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
fE0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAbSAs/Sow49V/WgJnFb8dQYYpn4ezy9oqP0pphg74zs3yzpv9
9QPNspSxupNXXdBHbia9LZG0j+0EopKX7BQ9zQ+PvXZ8Ca+ZsceARR9Gs2dEr7wL
k+qL94Tq0dtv4rcSQWTXYzxruM26r5zzVzC9j33h5X4bk7fAmkwN9jQ8pMTyFcJd
7r+anEZv9H+4nJzUBoojFrteNh8xsrFkFeqpfw/fzMRihYWxW7Rtjd/nFPlBxXa4
+TIb622guo8GXN99ubQ/pibsRzOzKl5YfjP95Rt8jAzzYNNIftbYIkFXO/Fp1Zq5
HyudxUbr0VlIbaozSxrkYVZxMLSadQZw8NKVJg==
-----END CERTIFICATE-----