Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b58669a5-66da-44e2-ac3e-90a9397af972.cer
File:                     b58669a5-66da-44e2-ac3e-90a9397af972.cer (raw, json)
Hash identifier:          vVmdf/C16E5wfSA0scwp2IFhmTlcyUhoGO7BKvNpyuo=
Subject key identifier:   E1:04:1F:7E:72:7C:19:4A:04:55:DC:00:26:41:8A:DA:F7:17:11:2D
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584441FDF74560728B293E98E580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b58669a5-66da-44e2-ac3e-90a9397af972/b58669a5-66da-44e2-ac3e-90a9397af972.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b58669a5-66da-44e2-ac3e-90a9397af972/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 18 Dec 2023 16:18:23 +0000
Certificate not after:    Sun 22 Mar 2026 15:18:23 +0000
Subordinate resources:    AS: 11507

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:41:fd:f7:45:60:72:8b:29:3e:98:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec 18 16:18:23 2023 GMT
            Not After : Mar 22 15:18:23 2026 GMT
        Subject: CN=b58669a5-66da-44e2-ac3e-90a9397af972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:44:a0:b0:d9:c7:c0:68:97:12:f1:d1:e6:
                    b3:e9:7e:f4:22:c8:b4:16:4a:47:92:c7:6e:5b:e0:
                    0d:c8:d0:34:93:bb:50:42:70:b7:5d:2f:8a:21:d4:
                    09:cb:98:c4:1f:d9:3d:5b:88:4f:ad:ed:36:ad:76:
                    11:c4:74:a8:31:90:89:8e:1d:db:ed:fb:ef:68:08:
                    80:90:be:1c:3c:25:e8:3a:30:51:60:a0:9d:16:82:
                    48:59:2c:05:f7:d7:fc:84:87:b7:04:f9:6f:b3:dc:
                    65:ce:b1:a3:b9:9e:3a:78:30:72:49:6c:3f:49:34:
                    0e:f8:83:8f:d8:7f:29:83:b5:2d:bb:78:45:77:c6:
                    60:63:59:c2:07:94:37:48:37:48:70:97:aa:32:ff:
                    39:b4:0c:e7:9a:1b:32:b3:25:32:2f:ad:b5:70:b1:
                    41:bf:ac:a5:72:39:34:10:3e:42:56:8b:89:67:68:
                    d8:51:ac:06:59:fd:8d:91:7e:af:07:32:63:97:e2:
                    12:9f:a2:8e:b2:be:3d:86:35:44:df:f3:08:63:6d:
                    2b:2f:a0:9f:46:9f:37:b7:e1:db:92:17:c2:d7:94:
                    a0:58:8b:53:41:25:f6:73:98:28:b5:94:c3:de:2a:
                    bd:0d:3b:be:33:94:d0:56:64:03:35:d0:6f:1f:ff:
                    0e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:04:1F:7E:72:7C:19:4A:04:55:DC:00:26:41:8A:DA:F7:17:11:2D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b58669a5-66da-44e2-ac3e-90a9397af972/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b58669a5-66da-44e2-ac3e-90a9397af972/b58669a5-66da-44e2-ac3e-90a9397af972.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11507

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:0b:01:de:15:d0:fe:da:fa:c5:e7:a8:da:85:2e:1f:b8:77:
         80:aa:dd:ee:cb:0e:0d:3d:ef:07:02:97:dc:2e:45:19:08:e0:
         40:29:c0:8f:71:e9:e5:80:da:5b:9e:28:e1:db:53:b7:de:b8:
         68:43:56:18:c1:d5:f2:92:ae:46:4a:fe:77:3c:83:d5:0f:9c:
         22:02:d6:44:de:5e:e8:df:a7:09:a1:b3:54:bc:1a:98:12:b3:
         1f:a0:ea:eb:d8:ca:71:84:c5:fb:04:1c:f3:b5:b4:56:98:c7:
         01:b0:23:c6:82:a6:e6:df:2b:94:71:93:69:6e:ce:a6:ff:3a:
         a4:5a:e4:54:ec:de:cf:a9:79:05:6d:e7:8d:45:cb:d4:ad:8e:
         3f:99:8d:8a:6d:78:3f:aa:e6:76:31:a3:f1:80:53:cb:5d:5a:
         1f:ad:5c:5a:75:cb:05:7f:3d:b1:f7:15:e5:60:5f:3e:16:7f:
         ae:33:30:9a:92:06:9f:dc:ce:0a:c7:90:ff:ee:76:a6:b8:98:
         c7:62:5b:37:ab:10:bc:5c:3d:f0:81:01:46:ad:34:89:2a:d1:
         ed:11:96:88:6d:18:c2:ee:c6:2a:71:e8:64:b9:cb:0a:ad:ff:
         96:2e:a9:17:ee:fe:0f:58:43:be:63:33:92:11:77:49:cf:8e:
         2c:55:12:c7
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWERB/fdFYHKLKT6Y5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTIxODE2MTgyM1oXDTI2MDMyMjE1MTgyM1owLzEtMCsGA1UEAxMk
YjU4NjY5YTUtNjZkYS00NGUyLWFjM2UtOTBhOTM5N2FmOTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2xEoLDZx8BolxLx0eaz6X70Isi0FkpHksdu
W+ANyNA0k7tQQnC3XS+KIdQJy5jEH9k9W4hPre02rXYRxHSoMZCJjh3b7fvvaAiA
kL4cPCXoOjBRYKCdFoJIWSwF99f8hIe3BPlvs9xlzrGjuZ46eDBySWw/STQO+IOP
2H8pg7Utu3hFd8ZgY1nCB5Q3SDdIcJeqMv85tAznmhsysyUyL621cLFBv6ylcjk0
ED5CVouJZ2jYUawGWf2NkX6vBzJjl+ISn6KOsr49hjVE3/MIY20rL6CfRp83t+Hb
khfC15SgWItTQSX2c5gotZTD3iq9DTu+M5TQVmQDNdBvH/8ONwIDAQABo4ID+TCC
A/UwHQYDVR0OBBYEFOEEH35yfBlKBFXcACZBitr3FxEtMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i
NTg2NjlhNS02NmRhLTQ0ZTItYWMzZS05MGE5Mzk3YWY5NzIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2I1ODY2OWE1LTY2ZGEtNDRlMi1h
YzNlLTkwYTkzOTdhZjk3Mi9iNTg2NjlhNS02NmRhLTQ0ZTItYWMzZS05MGE5Mzk3
YWY5NzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICLPMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFgsB3hXQ/tr6xeeo2oUuH7h3gKrd
7ssODT3vBwKX3C5FGQjgQCnAj3Hp5YDaW54o4dtTt964aENWGMHV8pKuRkr+dzyD
1Q+cIgLWRN5e6N+nCaGzVLwamBKzH6Dq69jKcYTF+wQc87W0VpjHAbAjxoKm5t8r
lHGTaW7Opv86pFrkVOzez6l5BW3njUXL1K2OP5mNim14P6rmdjGj8YBTy11aH61c
WnXLBX89sfcV5WBfPhZ/rjMwmpIGn9zOCseQ/+52priYx2JbN6sQvFw98IEBRq00
iSrR7RGWiG0Ywu7GKnHoZLnLCq3/li6pF+7+D1hDvmMzkhF3Sc+OLFUSxw==
-----END CERTIFICATE-----