Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0.cer
File:                     93c28a85-3c1d-4c8d-acda-3352597574a0.cer (raw, json)
Hash identifier:          +ZNgS3tzcSp6PJmZTtR4Sd3hpBEl3u9wzbjF/jZ/R+8=
Subject key identifier:   D8:68:1D:93:17:DF:0D:69:D2:67:57:83:43:FF:51:AF:EA:71:C8:D4
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584362F574AFFCDBD72D02C5AA40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0/93c28a85-3c1d-4c8d-acda-3352597574a0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 29 Sep 2023 18:55:59 +0000
Certificate not after:    Thu 01 Jan 2026 19:55:59 +0000
Subordinate resources:    AS: 5786
                          IP: 136.145.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:62:f5:74:af:fc:db:d7:2d:02:c5:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Sep 29 18:55:59 2023 GMT
            Not After : Jan  1 19:55:59 2026 GMT
        Subject: CN=93c28a85-3c1d-4c8d-acda-3352597574a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3c:85:d8:e3:09:95:17:19:3f:97:e0:be:3d:
                    29:cb:7b:49:e9:b4:dd:ff:fb:43:5b:8e:c7:e7:15:
                    83:c3:64:2e:b7:a0:98:51:5b:d7:50:6d:20:90:28:
                    28:a0:cc:fe:42:15:bd:93:fd:4e:ab:a7:34:47:6d:
                    e3:78:09:41:c5:8e:a4:52:44:2a:ca:3e:3e:98:aa:
                    75:e4:65:ff:10:34:7b:1c:e5:e9:03:e7:77:5a:e9:
                    13:9b:17:f9:43:b7:57:0c:e1:37:e8:0a:eb:14:1a:
                    6f:72:6e:ee:9c:42:55:36:05:ae:b4:9d:02:79:35:
                    b3:ae:43:b1:2d:03:db:41:5e:88:8c:a6:fd:4d:a8:
                    6c:62:30:90:cf:cb:05:ce:07:18:9a:fb:41:fa:71:
                    38:36:c7:c7:cc:ef:49:63:6c:e6:d7:ad:f6:83:8f:
                    c7:cc:b9:2e:a5:67:40:fa:21:00:8f:1a:78:62:58:
                    3a:bc:a8:57:0d:9e:0c:a4:52:07:7a:c6:06:50:13:
                    d7:a7:4e:b4:a5:a9:cf:41:bd:9e:4d:eb:b1:8d:d1:
                    72:2a:54:14:3e:34:17:87:f4:53:80:b0:b1:5c:99:
                    17:90:37:ef:b5:c2:ba:38:4f:6d:54:3f:8d:d1:37:
                    07:78:9c:65:27:de:43:8c:2e:55:66:9f:03:01:16:
                    1f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:68:1D:93:17:DF:0D:69:D2:67:57:83:43:FF:51:AF:EA:71:C8:D4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0/93c28a85-3c1d-4c8d-acda-3352597574a0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.145.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5786

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f7:f5:a6:df:c3:a2:90:d9:a8:ae:d1:fd:94:83:c6:b2:dd:
         d1:16:1f:db:d0:3e:a0:75:ea:d9:ce:c6:87:5f:56:1f:d5:6c:
         4d:c2:ca:a8:0e:65:97:e3:f4:1d:53:62:40:d3:9b:27:a0:2d:
         3f:07:d2:f6:32:35:63:d0:68:70:3e:d7:a2:f0:54:6a:f9:00:
         70:15:96:0f:e6:5a:41:08:b8:2e:34:f9:e8:3b:69:6e:68:a2:
         54:9d:a0:df:b5:dc:cf:88:d0:8b:d8:e8:d5:c1:02:da:57:6a:
         ee:74:fc:20:57:91:b5:18:f5:c2:4e:2f:2f:b3:91:1a:74:22:
         6c:d3:29:67:05:26:17:36:ca:0a:e1:ac:a8:d9:91:2e:dd:69:
         b1:f6:de:2d:d4:f4:c2:02:90:29:b3:0d:62:59:6e:e4:1e:0d:
         4f:5c:de:2e:9a:0d:6d:f9:37:d6:24:e2:c9:6c:38:2b:25:48:
         cb:97:00:6a:3e:10:28:f7:a7:6d:74:81:da:42:1c:37:a9:10:
         3d:b9:fe:38:aa:ae:47:b5:3d:7c:2a:33:28:22:39:85:42:fe:
         28:bf:fd:fc:8e:e2:c2:3e:fa:34:7e:8a:6c:a5:dd:c0:ca:3a:
         1b:fa:60:f9:01:ec:27:e7:89:43:78:53:d9:fc:db:ae:7c:3e:
         91:8e:4f:bc
-----BEGIN CERTIFICATE-----
MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWENi9XSv/NvXLQLFqkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMDkyOTE4NTU1OVoXDTI2MDEwMTE5NTU1OVowLzEtMCsGA1UEAxMk
OTNjMjhhODUtM2MxZC00YzhkLWFjZGEtMzM1MjU5NzU3NGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDyF2OMJlRcZP5fgvj0py3tJ6bTd//tDW47H
5xWDw2Qut6CYUVvXUG0gkCgooMz+QhW9k/1Oq6c0R23jeAlBxY6kUkQqyj4+mKp1
5GX/EDR7HOXpA+d3WukTmxf5Q7dXDOE36ArrFBpvcm7unEJVNgWutJ0CeTWzrkOx
LQPbQV6IjKb9TahsYjCQz8sFzgcYmvtB+nE4NsfHzO9JY2zm1632g4/HzLkupWdA
+iEAjxp4Ylg6vKhXDZ4MpFIHesYGUBPXp060panPQb2eTeuxjdFyKlQUPjQXh/RT
gLCxXJkXkDfvtcK6OE9tVD+N0TcHeJxlJ95DjC5VZp8DARYffQIDAQABo4IEGTCC
BBUwHQYDVR0OBBYEFNhoHZMX3w1p0mdXg0P/Ua/qccjUMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85
M2MyOGE4NS0zYzFkLTRjOGQtYWNkYS0zMzUyNTk3NTc0YTAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzkzYzI4YTg1LTNjMWQtNGM4ZC1h
Y2RhLTMzNTI1OTc1NzRhMC85M2MyOGE4NS0zYzFkLTRjOGQtYWNkYS0zMzUyNTk3
NTc0YTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH
AQcBAf8EDzANMAsEAgABMAUDAwCIkTAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIW
mjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQAJ9/Wm38OikNmortH9lIPGst3RFh/b0D6gderZzsaHX1Yf1WxN
wsqoDmWX4/QdU2JA05snoC0/B9L2MjVj0GhwPtei8FRq+QBwFZYP5lpBCLguNPno
O2luaKJUnaDftdzPiNCL2OjVwQLaV2rudPwgV5G1GPXCTi8vs5EadCJs0ylnBSYX
NsoK4ayo2ZEu3Wmx9t4t1PTCApApsw1iWW7kHg1PXN4umg1t+TfWJOLJbDgrJUjL
lwBqPhAo96dtdIHaQhw3qRA9uf44qq5HtT18KjMoIjmFQv4ov/38juLCPvo0fops
pd3Ayjob+mD5Aewn54lDeFPZ/NuufD6Rjk+8
-----END CERTIFICATE-----