Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
File:                     8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer (raw, json)
Hash identifier:          SscMqcpRvc6fMCDiI8fFCP2E2pOYjcmhVemkVQZl2Xw=
Subject key identifier:   7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843FEF03A52FA808E4D4F75EB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 24 Nov 2023 15:51:33 +0000
Certificate not after:    Thu 26 Feb 2026 15:51:33 +0000
Subordinate resources:    AS: 11653
                          IP: 69.89.32.0/20
                          IP: 2602:faca::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:fe:f0:3a:52:fa:80:8e:4d:4f:75:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 24 15:51:33 2023 GMT
            Not After : Feb 26 15:51:33 2026 GMT
        Subject: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:21:a1:18:dd:4f:16:62:09:e9:b2:30:cf:74:
                    65:66:7e:25:bc:e7:ae:f7:68:94:93:95:92:9e:e1:
                    db:0f:5f:a4:24:a9:56:cf:45:f5:80:e6:86:5b:61:
                    94:af:19:48:31:cd:4e:a1:8a:3a:a2:d6:a7:a0:8a:
                    7a:c2:25:36:f6:c7:41:ed:51:8a:1e:3a:e4:23:18:
                    88:cb:2c:c1:33:ac:f3:55:a7:1d:7a:a3:f3:d5:23:
                    dc:60:c0:e3:91:7f:9c:16:10:64:ce:94:37:e1:1f:
                    7b:98:4d:0d:bf:84:44:68:f4:10:e9:74:ef:6f:da:
                    c1:ec:39:22:9a:b0:27:5b:f4:19:d5:4e:23:ac:64:
                    b8:80:db:7b:c6:04:38:70:6d:f7:c9:6c:1d:0c:61:
                    db:28:da:26:c7:1f:5b:53:00:eb:71:a6:e7:b6:cd:
                    84:ad:60:a0:95:72:a2:3a:69:c1:ff:a6:7e:01:f5:
                    66:20:73:ac:69:2c:62:bd:83:50:e8:92:3c:75:7e:
                    f2:37:78:81:16:79:74:a7:38:6c:b4:f6:f4:a5:3d:
                    29:e5:30:af:2f:87:76:ec:93:38:01:23:8e:08:d4:
                    ca:97:ac:03:67:4a:39:ba:e8:26:9d:d0:9b:54:a7:
                    b3:0e:dc:c5:9b:3e:01:0e:8c:83:71:ed:b4:4a:d3:
                    ad:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.32.0/20
                IPv6:
                  2602:faca::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11653

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:da:ef:2d:2b:59:b8:79:41:d9:25:9d:16:4f:db:9f:49:8f:
         00:3e:bf:6e:78:b5:d1:ea:ca:36:9c:a1:6d:63:e4:28:e0:92:
         5a:47:54:0f:37:32:44:41:d0:40:91:5d:4b:5f:93:d0:44:c6:
         97:14:b2:70:19:d0:51:5c:01:59:94:0e:4b:52:50:e6:7e:26:
         8f:e0:ed:b1:48:0f:5e:9b:66:b6:e3:3a:76:b8:3a:6f:ae:f5:
         f8:dc:d2:d1:1b:ed:ca:06:7c:9a:02:97:0f:6c:27:2b:0e:95:
         c7:fd:02:f8:20:6a:4c:d2:e7:57:4f:6c:01:d6:3e:a1:87:66:
         33:10:69:fe:fd:ef:21:6b:2e:35:09:6c:9e:1b:1a:04:d2:c8:
         3c:be:8e:cf:f2:31:c8:85:bb:fd:4d:48:13:b1:78:7d:ab:b6:
         3f:45:2b:0b:98:c0:ff:c4:0c:51:22:7f:61:61:dc:f6:a0:a0:
         00:a0:4f:79:8d:ce:b3:55:03:40:ce:6d:3a:00:ae:e9:e4:71:
         ef:b5:3d:f2:44:94:e7:8c:b9:ea:68:1e:77:50:62:1d:4f:00:
         d7:21:e7:5d:67:6e:0a:fa:24:fd:bc:7a:c7:3f:60:4a:ee:df:
         ac:01:2b:bc:ea:68:f1:ac:23:af:1f:4b:ec:5b:47:15:1a:4c:
         0c:5d:8f:dd
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEP+8DpS+oCOTU9164AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTEyNDE1NTEzM1oXDTI2MDIyNjE1NTEzM1owLzEtMCsGA1UEAxMk
OGU0MzNjMWYtYTA3Mi00ZGZkLTgwOTYtYzZjODYzNGE0OWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCGhGN1PFmIJ6bIwz3RlZn4lvOeu92iUk5WS
nuHbD1+kJKlWz0X1gOaGW2GUrxlIMc1OoYo6otanoIp6wiU29sdB7VGKHjrkIxiI
yyzBM6zzVacdeqPz1SPcYMDjkX+cFhBkzpQ34R97mE0Nv4REaPQQ6XTvb9rB7Dki
mrAnW/QZ1U4jrGS4gNt7xgQ4cG33yWwdDGHbKNomxx9bUwDrcabnts2ErWCglXKi
OmnB/6Z+AfVmIHOsaSxivYNQ6JI8dX7yN3iBFnl0pzhstPb0pT0p5TCvL4d27JM4
ASOOCNTKl6wDZ0o5uugmndCbVKezDtzFmz4BDoyDce20StOtawIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFH+UX9x9M3Ep1ER+HCdGb1hq1OInMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84
ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0YTQ5ZjgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzhlNDMzYzFmLWEwNzItNGRmZC04
MDk2LWM2Yzg2MzRhNDlmOC84ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0
YTQ5ZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBARFWSAwDgQCAAIwCAMGBCYC+soAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAi2FMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEPa7y0rWbh5QdklnRZP259JjwA+
v254tdHqyjacoW1j5CjgklpHVA83MkRB0ECRXUtfk9BExpcUsnAZ0FFcAVmUDktS
UOZ+Jo/g7bFID16bZrbjOna4Om+u9fjc0tEb7coGfJoClw9sJysOlcf9AvggakzS
51dPbAHWPqGHZjMQaf797yFrLjUJbJ4bGgTSyDy+js/yMciFu/1NSBOxeH2rtj9F
KwuYwP/EDFEif2Fh3PagoACgT3mNzrNVA0DObToArunkce+1PfJElOeMuepoHndQ
Yh1PANch511nbgr6JP28esc/YEru36wBK7zqaPGsI68fS+xbRxUaTAxdj90=
-----END CERTIFICATE-----