Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/96b66967-d0d3-422c-adef-2daf10553799.cer
File:                     96b66967-d0d3-422c-adef-2daf10553799.cer (raw, json)
Hash identifier:          mqIskbcA09hO1KeMtbJjJ+44ODth50P+NgqsQUrr+P0=
Subject key identifier:   AE:2E:CB:9C:A1:DD:C6:3D:6A:CF:27:52:D6:D1:DE:83:39:DB:81:24
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584922E1743683DB2745587D1240
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/96b66967-d0d3-422c-adef-2daf10553799/96b66967-d0d3-422c-adef-2daf10553799.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/96b66967-d0d3-422c-adef-2daf10553799/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 10 Mar 2025 00:45:33 +0000
Certificate not after:    Sun 13 Jun 2027 00:45:33 +0000
Subordinate resources:    AS: 1647
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:22:e1:74:36:83:db:27:45:58:7d:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Mar 10 00:45:33 2025 GMT
            Not After : Jun 13 00:45:33 2027 GMT
        Subject: CN=96b66967-d0d3-422c-adef-2daf10553799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:07:fb:be:09:8b:9b:1f:e8:ea:c5:6a:2c:13:
                    e0:ef:85:bb:ec:05:1d:4a:b9:f4:0e:c1:89:8d:52:
                    0d:be:f6:68:25:11:6a:fd:c6:36:17:23:63:15:35:
                    3f:4c:e0:af:f1:6e:15:05:90:75:85:a5:be:8d:e3:
                    57:b1:8c:9c:8f:a7:e3:75:62:34:37:ca:72:8d:a0:
                    7f:47:bd:de:dd:6f:42:3d:f2:5e:d5:f3:8c:9d:f7:
                    00:ae:f7:7e:f7:9e:10:b2:0a:3c:42:6c:1e:41:78:
                    78:7e:6d:01:45:19:c6:05:53:ec:fe:0e:07:a7:00:
                    09:99:7f:f6:f5:b5:08:c1:19:7b:1a:69:80:8e:fd:
                    8c:af:0c:5f:bf:a6:31:85:99:b2:22:c7:16:d2:25:
                    23:66:83:88:6b:99:44:87:e4:85:67:3b:4c:57:a3:
                    70:74:05:a6:44:85:0e:a4:83:11:80:6c:ee:f4:09:
                    e2:a5:1c:75:d8:0a:41:46:a7:81:f0:be:51:cb:5e:
                    89:b4:91:00:99:c0:e6:a6:e8:09:7f:15:a0:03:78:
                    72:ec:43:b2:ab:b4:50:0d:84:c8:d7:af:c1:de:b1:
                    bc:43:38:bd:c1:6f:f6:c3:98:e5:b4:5a:67:bf:b9:
                    5f:a2:67:aa:6e:16:2e:ed:9f:ad:3c:15:90:e9:05:
                    3c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2E:CB:9C:A1:DD:C6:3D:6A:CF:27:52:D6:D1:DE:83:39:DB:81:24
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/96b66967-d0d3-422c-adef-2daf10553799/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/96b66967-d0d3-422c-adef-2daf10553799/96b66967-d0d3-422c-adef-2daf10553799.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1647

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e5:2c:c4:90:6e:ca:1f:22:ff:83:8d:03:97:1c:ba:7e:a5:
         bf:30:ce:ba:73:a7:d2:9c:94:5b:d4:e0:85:b7:af:8b:06:54:
         f0:89:b6:87:c5:ab:9e:51:ef:57:00:65:47:5c:9c:dd:3d:e9:
         18:d1:e9:2d:e4:a2:7a:a3:f8:3a:21:4b:65:06:b1:9f:91:94:
         63:36:55:a6:eb:d5:05:16:3c:dd:3e:3f:b4:74:ee:c6:64:e1:
         dd:3e:45:dd:f8:c1:e4:e3:6d:5c:64:66:24:bb:80:b0:f6:a3:
         e9:8a:32:01:6f:8f:1c:04:69:d2:d3:b2:5d:e7:ef:b7:02:17:
         28:6b:21:5d:a4:11:d7:9d:ad:d5:05:03:cc:51:39:d5:df:9f:
         28:2d:9e:f2:22:5a:e5:4e:e8:b6:eb:26:d2:1e:44:19:0f:e8:
         6b:40:68:c9:2f:3c:d9:64:56:ec:26:38:75:b7:02:b1:1d:4b:
         3f:fb:0d:a9:c7:aa:7a:3d:38:f7:14:76:46:45:5b:64:2e:02:
         a1:49:24:ce:5b:60:09:fe:ae:1c:ad:f8:b8:70:18:0a:c4:27:
         7a:bc:59:7b:63:21:c2:31:9f:e2:7b:e5:cb:82:1f:b6:88:5a:
         9a:17:7b:ab:fc:8e:83:12:83:2b:56:81:aa:09:20:de:60:34:
         b2:f8:43:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:46:03 2025 by rpki-client