Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer
File:                     a2ca3b16-f470-4287-8db9-b28e0667efdb.cer (raw, json)
Hash identifier:          SAup+s+IwWLIE+6kb+LcKnuk4g3VJ1e42g1tvd6+UWg=
Subject key identifier:   4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584357C27BC9EA8CD7A9D1153CC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 25 Sep 2023 18:39:23 +0000
Certificate not after:    Sun 28 Dec 2025 19:39:23 +0000
Subordinate resources:    IP: 199.91.104.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:57:c2:7b:c9:ea:8c:d7:a9:d1:15:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Sep 25 18:39:23 2023 GMT
            Not After : Dec 28 19:39:23 2025 GMT
        Subject: CN=a2ca3b16-f470-4287-8db9-b28e0667efdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:91:cb:3a:fa:51:e6:9b:d3:ac:29:ce:d9:16:
                    18:ed:87:a8:00:c3:78:ea:d8:15:d9:c1:f0:4f:07:
                    9a:8e:e6:23:57:f6:99:07:79:ba:81:ce:1f:ac:06:
                    86:94:9b:66:0c:c4:f0:d4:c7:a7:3d:8c:04:48:8b:
                    fa:7b:0e:5f:4a:f7:2b:3e:28:83:db:36:c1:44:c0:
                    09:00:5e:fb:73:04:33:ce:ab:aa:db:d9:1a:07:0b:
                    81:4a:a0:b9:23:17:02:92:62:36:f1:aa:0d:71:ef:
                    89:d9:59:97:83:7f:22:00:0d:9a:f7:d5:7a:e6:c1:
                    24:e3:bc:3b:b6:9d:0f:b0:98:e3:4a:6c:97:35:dd:
                    af:3d:21:b5:17:a3:fb:45:53:36:0d:1a:c1:b4:a0:
                    47:08:d7:78:6b:6f:71:2d:53:f5:4c:93:ec:b9:0d:
                    ff:9b:4e:a3:2d:28:66:4c:df:b9:97:2f:65:9a:5e:
                    a9:cd:fd:a4:e9:90:10:6b:8c:1c:08:25:96:b9:3e:
                    16:35:28:7a:f9:20:2d:45:5c:ce:d0:b2:47:53:e9:
                    32:75:00:67:25:7c:51:fa:53:98:97:fe:e3:34:61:
                    c4:b3:57:ec:92:56:f7:ab:fd:21:84:e0:3f:38:56:
                    a2:27:00:47:e2:4d:a5:73:6f:8f:48:c5:c6:11:37:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:6b:9d:26:06:32:36:05:65:9f:e6:4b:98:1b:86:37:b1:76:
         12:f0:9f:5c:90:d8:7e:0c:32:2f:0b:ba:7b:61:20:ed:0e:ab:
         74:a8:3e:cf:49:f2:d7:27:ff:fb:1a:ee:0c:0d:be:4d:89:cc:
         32:4d:2f:c2:bd:e9:3d:70:4f:9b:8e:d3:75:23:3a:36:3e:49:
         7c:a4:00:7b:7d:6e:33:3d:a0:10:2b:bb:05:0a:3b:9c:38:a7:
         42:00:a5:23:79:4b:99:1b:2e:27:53:ab:03:5d:4f:94:97:4b:
         70:6d:4c:d8:ab:db:2b:b2:92:3d:69:16:80:34:f6:30:b3:e1:
         6a:b8:c1:4f:a5:19:c7:05:fe:35:56:1d:bd:5c:7d:3a:a5:4c:
         8f:3f:57:c1:b6:74:aa:b9:77:48:e1:02:30:c1:52:72:72:40:
         8f:41:33:ad:6e:d0:e9:38:06:6e:11:c3:41:c7:80:b2:0d:6c:
         67:47:0c:e8:aa:9b:73:90:17:b5:02:24:7c:10:18:23:15:3c:
         04:3b:1d:0f:93:32:cf:0d:94:d3:d4:70:9d:01:e7:1a:26:74:
         3b:d2:83:3e:f8:78:45:93:23:0d:27:59:bc:c8:55:51:fa:43:
         48:02:8d:18:c7:be:0b:6f:60:ab:a5:5d:26:cd:bd:42:92:e0:
         93:ae:2c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----