Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
File:                     a234649d-ab49-458b-a5e3-7765fe7a066c.cer (raw, json)
Hash identifier:          2xGSgD7ub4qVqjNK7uEqxP+0YNsALnDsCSuKxMNRg+w=
Subject key identifier:   9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584473C12065BB0BACFACB4FD040
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 05 Jan 2024 12:06:13 +0000
Certificate not after:    Wed 04 Feb 2026 08:16:19 +0000
Subordinate resources:    AS: 27010
                          IP: 23.165.184.0/24
                          IP: 2602:f9f6::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Dec 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:73:c1:20:65:bb:0b:ac:fa:cb:4f:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan  5 12:06:13 2024 GMT
            Not After : Feb  4 08:16:19 2026 GMT
        Subject: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d9:fe:91:f8:86:6a:db:bb:41:a0:84:33:ce:
                    e3:0c:1e:37:dc:10:d1:6c:75:74:27:e1:2a:06:2b:
                    c4:23:1d:64:26:c1:93:03:1c:bf:cc:63:83:83:82:
                    28:f5:78:4f:97:a3:01:f8:17:71:1b:ae:d2:09:c1:
                    3e:07:f9:8c:a3:32:ae:ab:d6:a5:0d:90:5b:ae:81:
                    48:b4:37:51:95:c3:c1:2e:d2:4e:dc:31:21:3c:7a:
                    eb:53:45:1a:8b:12:b9:12:51:17:e3:73:79:91:59:
                    c3:d3:07:09:a7:44:c4:a4:90:c3:b5:8a:5b:80:ef:
                    34:f6:c8:f2:13:0a:57:4b:83:20:8e:8b:a4:f9:03:
                    c9:bd:80:ab:ae:88:55:97:ea:34:f6:89:15:1e:19:
                    de:1a:fd:13:40:0f:ef:db:d8:09:f5:19:b3:b2:f0:
                    72:2b:f0:2b:1b:b5:89:be:e0:0e:36:51:8b:f1:a2:
                    32:b1:34:83:11:4b:32:13:92:d5:26:6a:e0:1e:b1:
                    19:bd:26:c0:bc:78:ca:7a:d6:3f:1d:91:cb:2a:13:
                    9a:01:b2:bf:1d:10:de:53:15:94:8b:72:b7:b2:14:
                    a5:b3:a3:be:a3:62:71:f9:76:e2:0e:71:e0:e7:32:
                    da:af:d4:5e:14:f5:f3:5d:f3:1b:2e:bf:cc:70:d8:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.184.0/24
                IPv6:
                  2602:f9f6::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27010

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:08:75:72:5c:b2:09:f6:d4:08:54:7c:dc:88:a5:de:33:3d:
         3e:cf:7f:5f:9c:37:9e:51:95:61:90:2f:0f:43:79:2d:f4:03:
         b1:75:c4:3f:80:3d:8b:8f:11:cc:2f:13:82:7d:b5:e6:e6:ef:
         26:4e:f5:2b:16:9b:a9:b3:73:27:0b:5b:79:de:91:a9:c9:86:
         4e:bc:4a:8d:47:0c:ef:8d:b7:e1:ef:22:da:f0:08:89:db:c6:
         a8:18:9d:8c:f8:55:58:9f:98:43:01:31:7d:51:0a:18:7c:5e:
         b7:e4:4d:e4:ce:54:80:fe:2c:7d:8e:e5:7e:8f:04:28:c6:a8:
         8d:39:e1:21:f7:a6:55:b6:fd:c0:b0:72:3c:ba:9f:d0:f9:3d:
         79:d5:40:b9:66:f5:9b:df:b8:e9:b9:9a:5f:cd:88:85:dc:22:
         5f:8d:38:a2:69:29:38:a8:dd:04:5d:4b:99:94:28:69:16:46:
         01:5b:eb:9d:4d:51:b2:ab:af:3e:0d:f4:bf:2d:46:b3:0d:94:
         a0:f2:f9:aa:ba:91:37:07:aa:f6:a0:6c:73:03:31:95:85:42:
         4e:4f:4b:7f:e7:86:5a:69:fc:37:97:95:27:7c:f0:f2:48:08:
         78:5a:e1:b4:aa:38:28:0a:0d:f0:ab:73:d8:f9:52:a1:f1:ac:
         26:b1:6f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 17:16:03 2024 by rpki-client on console-fra.rpki-client.org