Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156.cer
File:                     928d2060-10a9-4ea3-becb-9d0ffe02a156.cer (raw, json)
Hash identifier:          qoHkBxxeywS9AGlqI5gxsjbFyFCwT9rty1nhgTbIi5U=
Subject key identifier:   E9:A2:53:7A:2E:7F:88:7F:5B:ED:46:A5:8B:5D:83:4C:C4:1F:84:A4
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843CF6488ABFA881B36C89FE940
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/928d2060-10a9-4ea3-becb-9d0ffe02a156.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 07 Nov 2023 15:07:05 +0000
Certificate not after:    Mon 09 Feb 2026 15:07:05 +0000
Subordinate resources:    AS: 22953
                          IP: 2620:60:8000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:cf:64:88:ab:fa:88:1b:36:c8:9f:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov  7 15:07:05 2023 GMT
            Not After : Feb  9 15:07:05 2026 GMT
        Subject: CN=928d2060-10a9-4ea3-becb-9d0ffe02a156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:61:ec:21:18:85:5a:17:e9:0b:bf:75:be:
                    f0:29:ee:53:67:19:0d:5a:0b:ff:81:0a:55:6f:a4:
                    4b:cc:11:f2:41:c9:0c:3a:b1:6e:16:a0:af:97:8f:
                    01:a7:f3:1d:e1:95:4b:80:7d:ad:42:b2:f4:54:ef:
                    b9:e8:eb:79:c0:77:ef:07:a8:2a:4a:f5:1b:c3:88:
                    c8:f6:b6:9d:73:31:2b:7b:df:bd:f0:6c:f3:10:07:
                    87:cd:97:47:bf:b0:79:3f:65:27:f2:8a:33:6e:64:
                    f6:82:6b:00:c8:9f:c1:24:73:0e:01:d4:bb:86:66:
                    f9:75:bf:49:68:5d:39:0d:9d:f8:6d:a4:22:d7:95:
                    9e:13:8e:59:c6:df:02:fd:25:76:91:3a:eb:69:28:
                    eb:ad:4b:7e:aa:69:4f:7d:4e:a8:44:38:7d:0b:e6:
                    5f:d4:69:e5:2b:bd:ec:7b:90:8b:62:d2:d6:4a:ca:
                    20:ff:47:85:24:53:e5:50:46:f6:00:a7:98:d5:0f:
                    06:f8:34:52:83:65:d9:1c:da:81:d5:eb:cb:59:87:
                    8e:96:a1:dd:db:45:4a:f0:d8:70:5b:4f:b2:0d:8c:
                    3f:4e:ec:cb:80:17:23:0f:ad:4c:77:f6:9b:0f:70:
                    06:a1:e3:7d:30:3b:c1:41:59:b3:2a:c4:5a:6f:f9:
                    55:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A2:53:7A:2E:7F:88:7F:5B:ED:46:A5:8B:5D:83:4C:C4:1F:84:A4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/928d2060-10a9-4ea3-becb-9d0ffe02a156.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:60:8000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22953

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8e:ab:c2:0a:f7:ba:b2:3f:ec:2f:cb:cd:09:fb:45:09:05:
         da:67:56:08:61:c1:ac:23:90:7c:c7:8b:25:66:2d:a7:bf:b0:
         5d:65:ec:25:de:e9:66:9a:ba:be:11:b0:21:c4:7a:7b:60:04:
         60:2d:0b:e9:71:80:5a:7f:62:b4:32:93:b0:62:5f:d1:46:29:
         d7:fb:09:00:77:40:fc:f3:5e:d1:43:dc:16:5b:c8:eb:99:86:
         0e:39:95:0d:b9:9c:23:cf:aa:af:99:23:f3:1f:51:21:c9:b8:
         87:7a:b0:d7:a2:0a:52:14:fb:41:87:fd:d5:2c:6a:ed:48:8b:
         85:11:d4:b8:a1:04:a6:27:20:d0:a9:cf:e1:fd:5c:62:56:de:
         58:78:d4:a1:7d:bf:95:f6:90:8b:ee:84:2c:54:84:c3:3a:3d:
         91:82:d4:c0:82:7b:1c:49:ad:eb:fd:ec:04:6d:0c:8a:44:9d:
         c0:9a:0e:ee:ca:bf:94:9d:71:5c:c8:20:6e:48:f8:91:5e:d9:
         ab:16:ec:52:5e:82:15:cb:7c:cc:8d:dd:06:a6:00:d6:09:df:
         04:ca:e8:8a:12:7e:79:00:19:c8:1a:c2:a3:49:4b:14:61:e5:
         c0:9c:a5:0b:eb:14:71:e1:53:c0:4a:04:e3:7c:98:44:04:01:
         f5:47:d1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:35:59 2024 by rpki-client on console-fra.rpki-client.org