Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer
File:                     8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer (raw, json)
Hash identifier:          98sPLRS5pGMfuD0W/O3HdnxdP69Y93j2bUX+18BvBlw=
Subject key identifier:   5E:2C:07:78:47:BE:CE:0F:D3:6B:45:4A:CF:96:02:66:B8:69:E6:B2
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858436B284A75AAFF4DE6C85E98C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 02 Oct 2023 17:24:52 +0000
Certificate not after:    Sun 04 Jan 2026 18:24:52 +0000
Subordinate resources:    AS: 40321
                          IP: 206.53.4.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:6b:28:4a:75:aa:ff:4d:e6:c8:5e:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct  2 17:24:52 2023 GMT
            Not After : Jan  4 18:24:52 2026 GMT
        Subject: CN=8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a9:21:3d:4e:d5:f3:ec:52:12:10:d3:73:95:
                    de:c2:b2:2f:c8:b6:21:16:43:4a:f9:51:56:06:3a:
                    de:f5:7d:33:57:a0:f1:f7:9c:e2:5b:a7:c9:70:f2:
                    89:c5:63:02:c2:19:14:57:c7:b7:8e:0b:41:90:8f:
                    71:0b:a8:dd:65:d6:cf:38:ff:15:f6:a9:02:46:34:
                    b0:52:6e:bb:9d:0a:88:ab:ac:e5:95:6a:97:a2:d6:
                    c9:de:82:da:67:13:f9:14:16:43:aa:3f:ab:35:e8:
                    5f:00:4b:b8:ac:0d:45:01:8e:9d:4e:56:04:26:a2:
                    b3:e1:3f:39:d0:73:06:9c:9b:5f:eb:d9:0c:a1:b6:
                    3b:1c:33:40:f5:35:d1:3e:54:82:3b:0a:4a:c8:fa:
                    ce:ef:10:54:72:74:15:10:7a:f9:1d:6f:c8:09:f9:
                    bb:49:60:56:d3:04:7d:3d:29:43:95:1c:64:9e:8e:
                    19:42:ca:4e:13:d8:47:9b:62:ac:f2:7c:31:b2:93:
                    47:0d:7b:87:fa:d1:58:58:fd:11:23:f4:4a:60:40:
                    89:25:a7:5c:e7:f0:68:c3:0e:01:cf:6e:a9:bf:22:
                    ac:a9:49:83:fb:c0:f4:bc:57:99:38:fb:f3:38:1c:
                    aa:c3:60:9c:37:7f:5c:d5:cb:fd:ea:1b:74:a8:2c:
                    7d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2C:07:78:47:BE:CE:0F:D3:6B:45:4A:CF:96:02:66:B8:69:E6:B2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.4.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40321

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f7:63:08:95:1c:65:33:01:c4:a1:6d:6d:80:59:1c:66:61:
         af:9e:8a:25:52:aa:30:91:1a:16:61:69:9a:68:da:ad:9c:e3:
         5a:c3:5b:8f:67:fe:1b:35:ef:13:4f:c6:12:84:6b:81:81:5b:
         a3:e2:9d:d7:7e:3d:6f:a5:de:6e:6e:4e:3c:50:00:1a:37:14:
         1e:ee:c6:c2:6c:ad:0d:96:55:af:79:f5:2e:f5:9b:fc:03:be:
         af:aa:9e:f0:67:68:39:8d:9f:60:c3:fc:4f:fa:16:90:14:1c:
         0a:71:b3:8a:eb:a8:b7:2e:7e:94:6e:9a:9b:3d:10:c6:4e:ce:
         9c:54:a8:f5:34:62:de:3e:20:d5:c9:2d:36:23:4c:22:2d:5c:
         fc:3b:48:46:d6:d1:77:6e:b9:a2:f0:de:56:35:de:20:b1:19:
         3a:3e:cc:19:1b:2a:d5:a6:a4:ad:c0:c9:b6:ad:9c:ec:77:39:
         2a:1f:61:17:bc:4d:74:e2:95:1a:30:61:d2:b6:3e:80:ad:43:
         c7:d7:16:58:78:a7:aa:ed:3e:92:58:b0:15:44:70:7e:b2:43:
         7f:62:9f:0b:18:37:d3:ac:c9:6b:a6:a8:c5:93:13:88:ff:d6:
         c1:15:89:d3:00:4d:d1:3f:c6:37:70:c4:e0:0c:76:da:9e:73:
         91:fe:f6:9f
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWENrKEp1qv9N5shemMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTAwMjE3MjQ1MloXDTI2MDEwNDE4MjQ1MlowLzEtMCsGA1UEAxMk
ODY0NWI2ZTctYWMwYi00NzBlLWI1NGUtZTM4ZWQ3ZjhjNWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKkhPU7V8+xSEhDTc5XewrIvyLYhFkNK+VFW
Bjre9X0zV6Dx95ziW6fJcPKJxWMCwhkUV8e3jgtBkI9xC6jdZdbPOP8V9qkCRjSw
Um67nQqIq6zllWqXotbJ3oLaZxP5FBZDqj+rNehfAEu4rA1FAY6dTlYEJqKz4T85
0HMGnJtf69kMobY7HDNA9TXRPlSCOwpKyPrO7xBUcnQVEHr5HW/ICfm7SWBW0wR9
PSlDlRxkno4ZQspOE9hHm2Ks8nwxspNHDXuH+tFYWP0RI/RKYECJJadc5/Boww4B
z26pvyKsqUmD+8D0vFeZOPvzOByqw2CcN39c1cv96ht0qCx9VwIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFF4sB3hHvs4P02tFSs+WAma4aeayMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84
NjQ1YjZlNy1hYzBiLTQ3MGUtYjU0ZS1lMzhlZDdmOGM1YTgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzg2NDViNmU3LWFjMGItNDcwZS1i
NTRlLWUzOGVkN2Y4YzVhOC84NjQ1YjZlNy1hYzBiLTQ3MGUtYjU0ZS1lMzhlZDdm
OGM1YTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALONQQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
AJ2BMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJb3YwiVHGUzAcShbW2AWRxmYa+eiiVSqjCRGhZhaZpo2q2c
41rDW49n/hs17xNPxhKEa4GBW6Pindd+PW+l3m5uTjxQABo3FB7uxsJsrQ2WVa95
9S71m/wDvq+qnvBnaDmNn2DD/E/6FpAUHApxs4rrqLcufpRumps9EMZOzpxUqPU0
Yt4+INXJLTYjTCItXPw7SEbW0XduuaLw3lY13iCxGTo+zBkbKtWmpK3AybatnOx3
OSofYRe8TXTilRowYdK2PoCtQ8fXFlh4p6rtPpJYsBVEcH6yQ39inwsYN9OsyWum
qMWTE4j/1sEVidMATdE/xjdwxOAMdtqec5H+9p8=
-----END CERTIFICATE-----