Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer
File:                     a120b5d4-da56-49b1-8ae1-7987a6afde99.cer (raw, json)
Hash identifier:          iZL0nkfDW9wCe0SGHR2ivO7LE3sNZ6G5VIVktsdGcno=
Subject key identifier:   C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843EC2A724C4CA4DDC96E371380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 17 Nov 2023 22:28:30 +0000
Certificate not after:    Thu 19 Feb 2026 22:28:30 +0000
Subordinate resources:    AS: 394989
                          IP: 23.151.192.0/23
                          IP: 2602:febb::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ec:2a:72:4c:4c:a4:dd:c9:6e:37:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 17 22:28:30 2023 GMT
            Not After : Feb 19 22:28:30 2026 GMT
        Subject: CN=a120b5d4-da56-49b1-8ae1-7987a6afde99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:73:a1:74:1e:d9:64:63:2c:b8:bc:96:a1:d6:
                    f4:29:89:57:ea:56:95:57:55:95:ed:f1:fd:b7:6d:
                    8f:96:02:48:b9:d3:82:7e:f6:cb:5e:c3:e6:be:72:
                    21:86:a1:39:25:97:03:ad:7d:d0:95:35:74:bc:f2:
                    a0:80:00:6d:11:2c:27:22:9e:26:52:86:e5:fd:3c:
                    3c:79:6c:2f:db:75:38:05:cb:74:50:f4:35:f7:ec:
                    f6:e9:7d:89:f2:95:62:4e:f1:b0:d7:40:97:ec:48:
                    9a:7a:c5:24:04:c2:63:e6:98:a3:06:97:fd:d7:c7:
                    f4:df:62:bb:63:ab:0a:1b:77:25:dc:15:75:79:6d:
                    00:bc:34:02:31:39:9c:42:46:f5:9a:cc:35:cd:88:
                    b6:4a:27:52:47:65:49:05:e8:1f:af:86:04:c4:01:
                    4f:6c:9f:56:f2:0e:d1:50:b8:c7:4f:d9:69:bf:42:
                    f7:c9:5e:91:90:7d:4c:74:75:f9:97:de:a7:89:60:
                    2d:d4:54:e8:90:82:26:ba:63:d2:37:f7:04:3b:8a:
                    11:0d:c5:ed:c1:ee:f4:2f:f2:33:5f:86:a2:09:38:
                    19:56:1b:71:da:b6:81:a1:dd:0c:5d:c5:61:cd:79:
                    f1:51:3b:c6:31:6d:9f:9f:0c:74:71:4e:6f:d3:e3:
                    ef:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.192.0/23
                IPv6:
                  2602:febb::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394989

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:84:a7:17:9e:ee:40:1c:74:cc:5b:1c:96:07:1b:e5:e6:61:
         b6:68:6c:33:4e:bd:e2:88:31:41:22:55:15:89:a6:5a:c4:01:
         0d:25:78:2e:69:23:90:4e:67:bc:33:17:a3:ef:41:fb:f1:1e:
         6b:d9:67:02:fe:de:25:33:b6:bc:e5:71:ff:2c:be:95:95:8c:
         29:0c:23:ca:1d:7e:15:b8:5a:e4:4a:60:a8:8e:b7:3b:85:da:
         e2:dd:0e:2b:9b:96:e6:53:23:8c:fb:ac:ae:74:89:25:46:e1:
         e1:8d:bc:0d:5e:31:2a:b7:85:76:41:a0:ab:34:22:fb:c6:34:
         a8:86:03:e6:a2:90:22:5d:38:3f:c2:b5:52:a6:5f:c1:70:3f:
         51:54:66:7c:54:fb:5b:63:37:fb:1c:f1:e0:59:3e:08:df:6d:
         54:55:7f:40:d4:43:2e:5c:9b:7b:fb:2a:bf:9f:52:5a:02:3a:
         55:fc:59:af:ca:63:a7:a2:bc:f4:f3:d6:65:e1:b7:23:8d:49:
         d0:77:e7:34:19:49:3f:34:87:89:c8:4e:01:01:39:df:e6:f8:
         d1:fa:a4:b5:80:c8:9f:59:e7:63:61:5f:b1:ca:25:b6:53:d1:
         60:6e:d4:0a:b6:d5:db:06:27:d5:1b:95:1b:6d:af:b7:6d:d3:
         cc:f2:df:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----