Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/96b66967-d0d3-422c-adef-2daf10553799.cer
File:                     96b66967-d0d3-422c-adef-2daf10553799.cer (raw, json)
Hash identifier:          fH2EGhU1hwZwheWqjF3iADywWPz7D6LQKMnLWZAxEaA=
Subject key identifier:   AE:2E:CB:9C:A1:DD:C6:3D:6A:CF:27:52:D6:D1:DE:83:39:DB:81:24
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858441E9E96837E0579F967EDFFE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/96b66967-d0d3-422c-adef-2daf10553799/96b66967-d0d3-422c-adef-2daf10553799.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/96b66967-d0d3-422c-adef-2daf10553799/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 06 Dec 2023 00:12:55 +0000
Certificate not after:    Mon 09 Mar 2026 23:12:55 +0000
Subordinate resources:    AS: 1647

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:1e:9e:96:83:7e:05:79:f9:67:ed:ff:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec  6 00:12:55 2023 GMT
            Not After : Mar  9 23:12:55 2026 GMT
        Subject: CN=96b66967-d0d3-422c-adef-2daf10553799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:07:fb:be:09:8b:9b:1f:e8:ea:c5:6a:2c:13:
                    e0:ef:85:bb:ec:05:1d:4a:b9:f4:0e:c1:89:8d:52:
                    0d:be:f6:68:25:11:6a:fd:c6:36:17:23:63:15:35:
                    3f:4c:e0:af:f1:6e:15:05:90:75:85:a5:be:8d:e3:
                    57:b1:8c:9c:8f:a7:e3:75:62:34:37:ca:72:8d:a0:
                    7f:47:bd:de:dd:6f:42:3d:f2:5e:d5:f3:8c:9d:f7:
                    00:ae:f7:7e:f7:9e:10:b2:0a:3c:42:6c:1e:41:78:
                    78:7e:6d:01:45:19:c6:05:53:ec:fe:0e:07:a7:00:
                    09:99:7f:f6:f5:b5:08:c1:19:7b:1a:69:80:8e:fd:
                    8c:af:0c:5f:bf:a6:31:85:99:b2:22:c7:16:d2:25:
                    23:66:83:88:6b:99:44:87:e4:85:67:3b:4c:57:a3:
                    70:74:05:a6:44:85:0e:a4:83:11:80:6c:ee:f4:09:
                    e2:a5:1c:75:d8:0a:41:46:a7:81:f0:be:51:cb:5e:
                    89:b4:91:00:99:c0:e6:a6:e8:09:7f:15:a0:03:78:
                    72:ec:43:b2:ab:b4:50:0d:84:c8:d7:af:c1:de:b1:
                    bc:43:38:bd:c1:6f:f6:c3:98:e5:b4:5a:67:bf:b9:
                    5f:a2:67:aa:6e:16:2e:ed:9f:ad:3c:15:90:e9:05:
                    3c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2E:CB:9C:A1:DD:C6:3D:6A:CF:27:52:D6:D1:DE:83:39:DB:81:24
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/96b66967-d0d3-422c-adef-2daf10553799/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/96b66967-d0d3-422c-adef-2daf10553799/96b66967-d0d3-422c-adef-2daf10553799.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1647

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:58:e3:68:25:45:fc:93:6a:d0:9b:03:64:19:de:31:de:a2:
         6c:59:37:59:f6:ba:39:7f:3f:8b:3e:88:f3:77:14:1f:17:1e:
         0c:a3:1d:cf:05:b5:e2:f4:fb:85:57:aa:07:51:96:6a:a1:43:
         a5:a4:2e:6a:91:88:1b:3e:80:38:c1:fa:39:0e:19:8d:00:e6:
         ba:e1:5c:49:ad:d1:4b:48:10:bc:63:ee:ce:fa:41:96:39:1a:
         ca:c0:c6:c2:a1:9a:f8:30:b3:11:ff:06:fc:94:7e:30:5d:cb:
         ba:ec:60:bd:6b:ff:97:63:00:78:97:e9:fe:c7:95:bc:f1:9e:
         4b:5a:54:5b:0a:59:85:7b:a9:f6:1f:ab:f7:d9:05:70:e1:92:
         7c:f7:74:a1:8b:a1:06:10:4a:97:a6:fe:cc:ac:4d:dd:9f:7c:
         73:22:a0:93:a5:d2:8e:d0:4e:88:52:cd:b7:29:fe:5a:ee:4f:
         b5:17:e8:61:5c:c0:94:f1:e1:01:ad:c5:d8:d7:30:70:9c:ae:
         0f:24:99:a6:5b:99:25:b9:a8:2c:ab:a2:fb:19:99:48:f1:a8:
         72:06:2b:e5:a7:84:01:ac:1f:11:68:c1:11:cb:08:8f:4f:73:
         98:39:74:59:2b:fd:55:65:ea:6e:6e:3a:6b:92:38:b3:cc:39:
         e8:0b:06:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:35:59 2024 by rpki-client on console-fra.rpki-client.org