Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abbdeaa7-55c4-447a-a755-22eb5208650f.cer
File:                     abbdeaa7-55c4-447a-a755-22eb5208650f.cer (raw, json)
Hash identifier:          mJIPyVtaRjkU8FwLWwvemvc9BQYzUiO3R8l3AjOQO5g=
Subject key identifier:   C3:F3:9A:62:47:E0:0F:CE:1B:93:57:97:D2:0C:38:23:7C:3C:96:20
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584376506A47C0399751D5CF299D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abbdeaa7-55c4-447a-a755-22eb5208650f/abbdeaa7-55c4-447a-a755-22eb5208650f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abbdeaa7-55c4-447a-a755-22eb5208650f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 06 Oct 2023 17:19:37 +0000
Certificate not after:    Thu 08 Jan 2026 18:19:37 +0000
Subordinate resources:    AS: 1411

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:76:50:6a:47:c0:39:97:51:d5:cf:29:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct  6 17:19:37 2023 GMT
            Not After : Jan  8 18:19:37 2026 GMT
        Subject: CN=abbdeaa7-55c4-447a-a755-22eb5208650f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:cf:0b:81:04:ec:f5:21:22:a3:71:19:ff:
                    47:11:4c:23:32:9a:1c:ad:19:c1:a1:a5:f9:7c:0e:
                    ab:ac:e4:79:0b:dc:48:27:80:56:b7:27:41:73:bb:
                    9a:97:89:78:db:d7:b9:7a:c7:9d:7b:ed:e1:36:bd:
                    39:4b:2b:61:85:13:36:d2:d5:74:b9:2b:8d:3c:e3:
                    3d:33:eb:e6:f8:82:0b:4d:71:e1:ab:18:00:b3:1c:
                    3e:c1:2b:af:7d:6b:49:e9:17:8d:fa:77:5f:50:c3:
                    c1:a3:0a:dd:46:a4:51:fb:3d:3f:98:f2:a1:f1:f8:
                    e1:70:88:db:dc:e0:06:be:33:46:97:21:e3:73:b3:
                    38:8d:9d:bd:03:9c:68:c9:7c:8a:71:f7:6f:76:51:
                    d3:f0:4f:14:a4:8f:62:80:76:dd:d5:44:03:cd:6a:
                    91:c5:60:f3:22:39:cc:96:dd:3c:52:74:de:93:6a:
                    fa:bd:60:0e:f4:e9:57:7a:5d:32:0c:59:87:90:0c:
                    f5:dc:b9:20:ca:c1:f0:22:a2:86:4f:a5:13:3b:9b:
                    f6:79:a6:91:1b:7b:cf:a8:3c:fe:75:d3:35:0e:c1:
                    ce:1e:cf:3f:e6:88:42:b5:b5:f6:5f:b1:f0:06:dd:
                    58:46:f0:a5:39:14:87:a2:27:77:fe:1c:60:cf:67:
                    d8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F3:9A:62:47:E0:0F:CE:1B:93:57:97:D2:0C:38:23:7C:3C:96:20
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abbdeaa7-55c4-447a-a755-22eb5208650f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abbdeaa7-55c4-447a-a755-22eb5208650f/abbdeaa7-55c4-447a-a755-22eb5208650f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1411

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f2:11:5a:2b:e9:a6:91:ba:71:c2:73:dc:04:2b:94:3f:cc:
         04:0f:85:da:ce:5b:cf:1d:7a:c0:76:ce:18:b2:58:08:59:ea:
         fd:90:63:1f:37:90:08:6f:91:5d:85:56:04:77:1e:e4:d0:6e:
         92:d9:d2:26:3a:ee:2e:46:2c:b9:29:12:77:5a:c6:86:bb:e1:
         74:ed:45:39:13:a1:2a:c5:99:f9:a8:ac:fc:1c:c8:94:fe:86:
         b1:9b:14:1f:13:5b:00:ab:e8:e8:6e:1b:37:8c:d4:41:4e:9a:
         91:b5:bc:97:57:a9:4d:b0:87:d7:ac:36:a5:7d:6b:85:57:24:
         3d:57:bb:82:4b:86:b5:aa:c2:f8:7b:1a:9e:d9:73:02:67:2c:
         32:be:e2:90:1b:99:17:d7:07:56:58:b4:ce:b9:fa:2e:d6:8c:
         d2:ce:f6:a3:1b:5f:f5:fa:2f:3e:67:83:0d:7d:99:ab:b3:d4:
         14:b9:1d:85:df:0b:74:b3:3f:99:d0:a4:4a:c6:21:30:92:1a:
         1f:d8:ff:8a:70:fa:da:22:28:fe:38:f7:b9:af:f1:7f:da:62:
         69:77:d5:71:93:d4:8c:0c:70:f2:26:54:05:66:68:de:1a:1b:
         fe:70:e0:f6:e4:e4:1d:2d:37:0a:ec:27:d2:9f:f7:1c:92:fd:
         67:06:aa:b9
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEN2UGpHwDmXUdXPKZ0wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTAwNjE3MTkzN1oXDTI2MDEwODE4MTkzN1owLzEtMCsGA1UEAxMk
YWJiZGVhYTctNTVjNC00NDdhLWE3NTUtMjJlYjUyMDg2NTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuijPC4EE7PUhIqNxGf9HEUwjMpocrRnBoaX5
fA6rrOR5C9xIJ4BWtydBc7ual4l429e5esede+3hNr05SythhRM20tV0uSuNPOM9
M+vm+IILTXHhqxgAsxw+wSuvfWtJ6ReN+ndfUMPBowrdRqRR+z0/mPKh8fjhcIjb
3OAGvjNGlyHjc7M4jZ29A5xoyXyKcfdvdlHT8E8UpI9igHbd1UQDzWqRxWDzIjnM
lt08UnTek2r6vWAO9OlXel0yDFmHkAz13LkgysHwIqKGT6UTO5v2eaaRG3vPqDz+
ddM1DsHOHs8/5ohCtbX2X7HwBt1YRvClORSHoid3/hxgz2fYCwIDAQABo4ID+TCC
A/UwHQYDVR0OBBYEFMPzmmJH4A/OG5NXl9IMOCN8PJYgMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h
YmJkZWFhNy01NWM0LTQ0N2EtYTc1NS0yMmViNTIwODY1MGYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2FiYmRlYWE3LTU1YzQtNDQ3YS1h
NzU1LTIyZWI1MjA4NjUwZi9hYmJkZWFhNy01NWM0LTQ0N2EtYTc1NS0yMmViNTIw
ODY1MGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICBYMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlvIRWivpppG6ccJz3AQrlD/MBA+F
2s5bzx16wHbOGLJYCFnq/ZBjHzeQCG+RXYVWBHce5NBuktnSJjruLkYsuSkSd1rG
hrvhdO1FOROhKsWZ+ais/BzIlP6GsZsUHxNbAKvo6G4bN4zUQU6akbW8l1epTbCH
16w2pX1rhVckPVe7gkuGtarC+HsantlzAmcsMr7ikBuZF9cHVli0zrn6LtaM0s72
oxtf9fovPmeDDX2Zq7PUFLkdhd8LdLM/mdCkSsYhMJIaH9j/inD62iIo/jj3ua/x
f9piaXfVcZPUjAxw8iZUBWZo3hob/nDg9uTkHS03Cuwn0p/3HJL9ZwaquQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:42 2024 by rpki-client on console-fra.rpki-client.org