Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
File:                     8d37a072-15ae-4905-810e-991fc6201b45.cer (raw, json)
Hash identifier:          JHW8my4Ik00Rpm0x4dc3gZhwmxakpKM34MjS/zckkxM=
Subject key identifier:   31:F3:6A:E0:EB:81:E6:E3:7B:6C:55:02:40:E4:4F:91:B0:18:8C:B3
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584701DCD1F4E7E95C90AC54DF00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 26 Aug 2024 19:20:41 +0000
Certificate not after:    Sun 29 Nov 2026 20:20:41 +0000
Subordinate resources:    AS: 19330
                          IP: 23.168.24.0/24
                          IP: 2602:f9ba::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:dc:d1:f4:e7:e9:5c:90:ac:54:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Aug 26 19:20:41 2024 GMT
            Not After : Nov 29 20:20:41 2026 GMT
        Subject: CN=8d37a072-15ae-4905-810e-991fc6201b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e5:79:74:65:3d:8e:1a:34:05:54:db:8c:aa:
                    16:4a:c6:a3:ad:9b:85:a4:ee:d1:de:49:bc:e6:e8:
                    95:17:d6:9e:7d:a8:76:4e:73:d9:56:2e:4a:a2:4e:
                    b7:9b:cb:52:eb:08:1f:7f:cb:5b:3b:7b:13:39:f9:
                    be:fa:ab:19:63:3b:b8:d4:6c:70:a2:37:5b:72:63:
                    63:9c:0b:fe:ee:db:f1:67:1c:60:ed:b8:ec:ee:57:
                    ca:42:4b:9c:52:67:70:b8:b8:be:15:10:0b:c4:e4:
                    94:69:1e:40:cc:b6:7a:54:09:57:cd:e3:ba:6b:80:
                    54:98:7c:84:8f:ea:90:b7:49:14:05:1a:63:49:a8:
                    6c:27:5b:a0:09:a8:40:a7:23:07:75:12:38:2d:5c:
                    99:1d:a6:69:74:99:20:c4:d8:51:55:f5:fc:70:3b:
                    aa:94:06:89:c0:dc:3c:c7:7f:27:36:50:71:e2:be:
                    71:ac:17:92:ba:bb:74:4c:be:5b:45:c8:22:82:db:
                    7b:eb:46:c4:b0:98:75:8e:cf:42:94:e0:92:01:93:
                    17:67:58:74:3f:ae:54:f3:47:2a:70:14:b5:a0:df:
                    44:89:22:38:1f:16:97:51:93:fa:54:1e:99:0e:32:
                    be:5d:04:b1:76:56:ce:5a:04:80:21:83:d3:22:7a:
                    11:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F3:6A:E0:EB:81:E6:E3:7B:6C:55:02:40:E4:4F:91:B0:18:8C:B3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.24.0/24
                IPv6:
                  2602:f9ba::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19330

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ee:61:6f:a5:a8:ed:f5:18:b6:8e:23:19:3c:fb:2e:74:53:
         6c:2e:b8:ce:d3:97:cd:51:98:b0:99:8a:3a:82:b5:a5:79:d7:
         60:fd:e1:19:64:32:e6:8b:bc:29:16:0f:76:c6:e9:dd:2d:55:
         2c:00:98:16:55:94:1f:fd:d9:de:16:ab:03:d4:18:4b:fe:a7:
         c8:b6:ed:08:41:db:19:22:61:8d:26:3a:c7:22:6e:17:eb:ca:
         3c:05:b6:b0:5a:20:9c:a8:99:5b:83:93:f1:18:b6:fe:bf:cf:
         64:92:a6:3e:3d:99:2e:95:f5:fe:d7:02:53:16:1b:78:8d:fa:
         4b:8c:ae:35:fe:19:f6:8e:63:1b:ba:64:b0:45:af:4f:47:10:
         56:c6:ed:98:db:74:7b:28:08:1a:8f:cc:8a:a5:06:87:12:2c:
         47:ac:3f:19:7d:a7:e7:ff:c6:22:c3:5d:70:52:16:cf:50:d0:
         26:0e:f8:f0:48:39:f2:a8:4a:90:e1:e4:7a:bb:22:57:60:e8:
         09:d4:27:a2:f4:80:99:ba:b8:05:0c:af:4d:67:14:91:39:f3:
         81:8b:72:fd:b3:41:b4:8f:f4:14:0e:53:d6:2a:f5:f3:91:fb:
         ef:10:e3:c7:9a:31:27:17:6d:68:89:2b:2c:b6:f5:19:9f:b0:
         86:5e:bd:5d
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEcB3NH05+lckKxU3wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI0MDgyNjE5MjA0MVoXDTI2MTEyOTIwMjA0MVowLzEtMCsGA1UEAxMk
OGQzN2EwNzItMTVhZS00OTA1LTgxMGUtOTkxZmM2MjAxYjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeV5dGU9jho0BVTbjKoWSsajrZuFpO7R3km8
5uiVF9aefah2TnPZVi5Kok63m8tS6wgff8tbO3sTOfm++qsZYzu41GxwojdbcmNj
nAv+7tvxZxxg7bjs7lfKQkucUmdwuLi+FRALxOSUaR5AzLZ6VAlXzeO6a4BUmHyE
j+qQt0kUBRpjSahsJ1ugCahApyMHdRI4LVyZHaZpdJkgxNhRVfX8cDuqlAaJwNw8
x38nNlBx4r5xrBeSurt0TL5bRcgigtt760bEsJh1js9ClOCSAZMXZ1h0P65U80cq
cBS1oN9EiSI4HxaXUZP6VB6ZDjK+XQSxdlbOWgSAIYPTInoR+QIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFDHzauDrgebje2xVAkDkT5GwGIyzMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84
ZDM3YTA3Mi0xNWFlLTQ5MDUtODEwZS05OTFmYzYyMDFiNDUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04
MTBlLTk5MWZjNjIwMWI0NS84ZDM3YTA3Mi0xNWFlLTQ5MDUtODEwZS05OTFmYzYy
MDFiNDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXqBgwDgQCAAIwCAMGBCYC+boAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAkuCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFvuYW+lqO31GLaOIxk8+y50U2wu
uM7Tl81RmLCZijqCtaV512D94RlkMuaLvCkWD3bG6d0tVSwAmBZVlB/92d4WqwPU
GEv+p8i27QhB2xkiYY0mOscibhfryjwFtrBaIJyomVuDk/EYtv6/z2SSpj49mS6V
9f7XAlMWG3iN+kuMrjX+GfaOYxu6ZLBFr09HEFbG7ZjbdHsoCBqPzIqlBocSLEes
Pxl9p+f/xiLDXXBSFs9Q0CYO+PBIOfKoSpDh5Hq7Ildg6AnUJ6L0gJm6uAUMr01n
FJE584GLcv2zQbSP9BQOU9Yq9fOR++8Q48eaMScXbWiJKyy29RmfsIZevV0=
-----END CERTIFICATE-----