Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.cer
File:                     a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.cer (raw, json)
Hash identifier:          IIqq5xJ/ofFITxQWkZIdd6lGGcu0UPcIq7qaQmhuLh4=
Subject key identifier:   41:20:48:6D:40:4B:BB:FF:D6:63:E2:24:9A:28:73:B0:C5:00:5B:C1
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858435D64959E5F0A6CEEBD83B040
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 27 Sep 2023 19:05:02 +0000
Certificate not after:    Tue 30 Dec 2025 20:05:02 +0000
Subordinate resources:    AS: 30484

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5d:64:95:9e:5f:0a:6c:ee:bd:83:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Sep 27 19:05:02 2023 GMT
            Not After : Dec 30 20:05:02 2025 GMT
        Subject: CN=a543a7f7-4aa0-4c84-8a59-004c26b0e5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:7a:98:2c:53:08:35:bf:3e:a3:9b:7a:74:
                    4a:6c:0a:c5:bc:18:90:93:69:6b:9a:99:df:6e:ab:
                    28:55:4f:40:73:7a:b2:21:4b:9b:7f:d1:55:ff:a1:
                    48:76:99:3b:ad:c9:7a:04:2a:52:71:b5:ea:5d:74:
                    9b:d4:49:f4:4a:45:e9:a0:eb:82:b1:c4:63:29:59:
                    31:72:f4:84:5b:bd:11:e7:54:8b:3f:e5:7f:66:d9:
                    41:17:4a:81:8a:5e:e3:3d:a8:55:06:e5:c4:24:80:
                    98:51:68:82:80:d2:fc:46:ca:6d:6b:a5:74:87:e5:
                    96:a3:9a:db:14:8f:2e:d8:f6:72:8b:67:9e:80:49:
                    6d:06:12:3c:ec:26:c5:59:41:a0:95:1d:20:63:16:
                    b1:53:29:d3:7d:d2:e3:2a:72:f7:76:3b:f9:cb:bd:
                    68:12:1a:f9:2b:28:54:6f:3f:ad:ca:f8:1f:94:8f:
                    de:26:81:45:eb:c7:5a:6f:ff:af:56:87:a3:07:e3:
                    fd:4f:c7:6b:fd:6f:60:2e:9f:4a:8d:0d:85:c4:c8:
                    df:46:13:c1:9e:a7:36:8a:8d:14:b0:0a:2b:ed:2c:
                    6b:cc:7f:9d:52:08:40:1c:d3:89:ea:c5:15:2f:4a:
                    02:f1:05:9e:1d:05:6b:0b:8a:53:b1:8e:13:a3:4d:
                    76:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:20:48:6D:40:4B:BB:FF:D6:63:E2:24:9A:28:73:B0:C5:00:5B:C1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30484

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:1d:f7:40:64:e9:72:e3:0f:db:5b:cc:24:ea:97:6c:18:8e:
         c8:c0:81:e7:aa:ef:66:63:04:91:d8:f5:c2:40:bc:e1:40:97:
         8e:c3:2f:78:42:df:3e:a1:54:6d:a0:42:19:c2:97:aa:d1:f1:
         ae:00:ef:da:f1:2a:3a:ca:d2:24:ad:56:55:1d:49:46:c1:c6:
         9c:06:a6:23:48:98:92:50:0f:f0:9d:63:49:2b:43:0b:3c:39:
         56:85:a7:8b:df:65:f4:a8:a0:e5:eb:bc:09:06:27:76:c5:21:
         57:9d:56:7a:1f:a8:3c:11:1f:70:8f:ff:38:eb:e3:76:0d:bd:
         cc:11:01:37:b6:30:27:2f:6a:3e:54:0e:41:d1:5b:e7:94:df:
         a7:33:32:b7:ce:0b:22:54:de:dd:d8:0b:13:ea:f2:df:3f:30:
         f7:24:12:43:92:c5:00:76:fe:89:0c:72:95:4c:e0:52:8b:63:
         7c:bc:60:e0:cf:ad:47:48:c4:e3:c5:62:6d:ad:d5:6c:3b:91:
         d6:1c:71:21:aa:f1:d9:8a:8a:a6:91:f5:45:2f:63:4b:90:87:
         af:59:3e:9f:c0:99:78:48:e2:ea:ce:8d:88:46:f0:20:d2:2c:
         15:d9:75:15:f1:e3:83:90:5a:a5:ec:59:ee:83:1d:b7:da:7a:
         78:53:3c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----