Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/99db0446-fe0e-41b5-bb4b-84fefa1ebf90.cer
File:                     99db0446-fe0e-41b5-bb4b-84fefa1ebf90.cer (raw, json)
Hash identifier:          Rmrj4ZSl3F6FB/f0kCNdSJ+LHQmQLcOD4VWm1+EoqHw=
Subject key identifier:   1C:D6:69:AB:DF:1D:06:9F:0A:43:4C:80:25:2C:B5:A4:07:93:F6:0F
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843AB6DEA952AB5539C17124280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/99db0446-fe0e-41b5-bb4b-84fefa1ebf90/99db0446-fe0e-41b5-bb4b-84fefa1ebf90.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/99db0446-fe0e-41b5-bb4b-84fefa1ebf90/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 25 Oct 2023 17:56:54 +0000
Certificate not after:    Tue 27 Jan 2026 18:56:54 +0000
Subordinate resources:    AS: 14019
                          AS: 14267
                          IP: 198.73.105.0 -- 198.73.108.255
                          IP: 198.73.192.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ab:6d:ea:95:2a:b5:53:9c:17:12:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 25 17:56:54 2023 GMT
            Not After : Jan 27 18:56:54 2026 GMT
        Subject: CN=99db0446-fe0e-41b5-bb4b-84fefa1ebf90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b4:83:b3:d9:2c:65:f2:9d:d5:90:00:df:8d:
                    dc:3d:1a:81:4d:a8:b0:53:6e:57:80:52:c0:bf:67:
                    ed:09:85:c5:98:4c:52:5e:c2:d8:6d:19:97:2e:fd:
                    d0:22:d3:27:d0:75:b9:6d:45:b9:c1:fc:64:16:2a:
                    75:af:73:ec:72:9a:dc:6c:7a:a1:d9:0d:d9:b4:a3:
                    6a:f1:15:21:a9:b8:38:eb:e1:10:3d:7a:08:71:46:
                    3c:61:92:58:7b:a2:35:ad:f6:b1:dc:ea:38:55:68:
                    20:55:57:ba:b2:d8:68:f7:14:77:19:17:b6:94:1a:
                    b6:66:b2:fd:48:dc:08:1e:6d:f6:28:98:55:f2:1f:
                    40:1a:64:ce:6d:3f:ea:97:e0:0a:36:f7:e5:df:5c:
                    fb:74:83:56:0d:c7:43:d1:4a:78:1e:b1:d1:d3:80:
                    67:36:5a:27:65:b9:ab:5b:04:07:e4:27:e2:b4:ec:
                    d9:4f:9e:24:43:27:ff:ca:59:44:28:66:8b:5f:21:
                    cf:c1:81:71:a6:9f:30:5c:09:17:24:fd:f7:59:43:
                    9b:ea:a6:01:74:ce:c8:b9:fd:d6:5e:a6:d2:c8:c0:
                    67:eb:8d:eb:6e:41:bd:bf:4d:4c:9b:2c:1b:b1:24:
                    2b:74:ce:3f:4c:83:0c:b6:85:f1:1c:8f:ad:82:63:
                    c1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D6:69:AB:DF:1D:06:9F:0A:43:4C:80:25:2C:B5:A4:07:93:F6:0F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/99db0446-fe0e-41b5-bb4b-84fefa1ebf90/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/99db0446-fe0e-41b5-bb4b-84fefa1ebf90/99db0446-fe0e-41b5-bb4b-84fefa1ebf90.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.105.0-198.73.108.255
                  198.73.192.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14019
                  14267

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:b2:e3:ab:d6:d7:5d:64:0a:d0:0a:be:9c:e2:a5:19:8d:58:
         e3:ac:45:88:87:7d:8e:28:ec:71:9f:22:32:01:89:82:a3:a7:
         61:ec:81:47:e8:0b:a0:20:ce:3a:6e:99:a5:8a:11:58:62:b7:
         17:68:3f:bc:18:5f:0f:24:06:a3:43:f9:6d:22:18:fc:69:9e:
         6f:fb:ef:40:71:6f:66:d7:28:00:d5:74:72:31:ba:8c:0a:59:
         f5:1b:da:90:81:b8:41:10:e4:7f:b5:1d:eb:2b:0f:66:1b:af:
         fa:16:6d:be:56:f9:20:6f:cb:67:64:eb:7f:27:55:0c:bb:f0:
         c9:96:14:a3:f6:1a:ca:75:00:89:27:89:f5:67:1c:3b:b7:82:
         95:d0:fe:38:99:66:5b:d0:dc:1e:c1:e7:2d:62:3f:8a:23:8c:
         f9:a4:74:04:2e:d2:55:59:81:62:09:c1:92:71:59:ab:af:22:
         63:f0:2b:a8:78:51:e9:50:3d:d5:a9:43:53:24:4b:ab:8a:66:
         c7:26:68:b2:26:4b:a2:38:d3:db:25:a4:ac:f8:e6:db:1a:14:
         e7:49:e3:72:c3:56:c4:9d:65:98:46:82:c7:45:ee:f1:9f:9a:
         0f:88:c3:2c:27:81:d4:5b:b2:13:5e:66:cc:d7:07:95:86:1d:
         51:be:3c:45
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 11 15:32:37 2024 by rpki-client on console-ams.rpki-client.org