Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer
File:                     ac870f3e-b014-4387-bb59-63f4192b5665.cer (raw, json)
Hash identifier:          QssbIVlRROuXI45xaZ35bUKKhUNsZW5lrhbJCjNIIaU=
Subject key identifier:   AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843C566303D1EB9A5D368DC1440
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 04 Nov 2023 01:12:20 +0000
Certificate not after:    Fri 06 Feb 2026 02:12:20 +0000
Subordinate resources:    IP: 2604:49c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:c5:66:30:3d:1e:b9:a5:d3:68:dc:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov  4 01:12:20 2023 GMT
            Not After : Feb  6 02:12:20 2026 GMT
        Subject: CN=ac870f3e-b014-4387-bb59-63f4192b5665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7c:60:c8:6b:65:55:7e:e7:01:15:95:45:95:
                    9e:5e:c5:36:d1:f9:a0:10:6b:bd:02:cf:15:bb:52:
                    3d:c7:88:7f:69:40:cb:f0:45:d8:f4:de:36:c1:a8:
                    4f:ac:7b:24:ca:e1:d4:e8:4c:44:e3:5f:b2:4b:e7:
                    6f:b6:1a:ac:7d:ce:ea:88:06:b3:43:27:1c:bd:f1:
                    15:e5:a3:9a:15:72:a4:da:67:b6:8d:f3:a1:f4:af:
                    18:25:f2:48:cc:2c:6c:02:ce:14:59:f0:38:98:02:
                    57:d3:33:c5:96:98:74:b7:4d:f1:06:da:7b:75:6a:
                    f3:e8:39:96:d9:b2:09:84:81:37:92:74:0a:94:74:
                    48:dd:08:b9:5e:9d:76:78:66:31:05:1c:a0:41:8b:
                    77:91:04:5c:6c:2f:a7:8d:4d:e6:55:9c:ec:9b:d6:
                    7f:0f:27:d2:93:75:ae:a6:b9:7a:24:69:01:5f:ce:
                    c5:1a:32:6a:d7:08:3c:b5:5e:49:a2:17:db:91:b5:
                    3d:4b:d1:fa:17:84:1b:b1:c3:7c:52:eb:70:3c:ab:
                    7a:32:12:1e:23:d5:f6:15:49:48:2d:0a:6f:54:c1:
                    27:48:1c:a6:c6:32:47:72:88:2f:b0:5f:1e:5a:48:
                    88:6d:03:98:37:41:df:41:aa:18:b7:6c:fb:58:6b:
                    ea:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:49c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:05:fb:6a:ac:15:0c:b1:e5:d0:54:59:40:8b:92:f5:ee:29:
         49:5a:b0:11:c9:07:88:29:3b:64:ab:4c:cd:d4:61:30:b7:c8:
         e6:5f:d2:74:3d:fd:1c:9d:91:00:da:87:4c:d5:b5:90:a8:fa:
         1b:c8:34:ef:bd:b5:cc:1f:1e:13:77:69:4e:d3:11:0e:a8:36:
         3a:b1:d1:d8:80:b3:35:97:ff:d3:d5:f0:d8:83:8f:d7:69:59:
         3a:da:93:8e:88:64:cd:d0:7c:7f:4e:ec:6d:40:e6:67:d3:0b:
         dd:28:56:f4:e7:b3:46:5f:bb:b1:60:a9:58:dd:17:d8:7d:27:
         5b:45:6f:42:1c:b1:8a:09:1d:3a:2a:08:89:3b:4d:95:4f:79:
         d3:4d:ad:f3:77:dd:eb:c3:2c:98:b0:7a:21:b4:13:44:73:b3:
         46:51:98:58:10:35:21:33:01:25:2e:61:7c:c6:81:dd:d6:45:
         f8:d3:5e:9b:bd:0a:e4:a1:16:e6:21:20:a1:db:31:94:29:16:
         32:96:52:f6:08:a9:62:dc:b8:df:b6:e8:cc:f6:0e:d3:0f:b6:
         10:c0:ad:c7:bc:a3:ec:8c:dd:dd:9c:1c:a3:b9:47:90:1b:5f:
         93:53:55:27:dc:af:74:d2:ab:a2:ab:05:3c:13:bb:a6:19:14:
         8d:de:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----