Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad.cer
File:                     b5df7c19-240b-4a12-a886-6df8618d66ad.cer (raw, json)
Hash identifier:          12U8F2fiZJ0De0QYWE810T8rv6wVDbMXi8flpICTJWM=
Subject key identifier:   60:0C:21:01:B9:E8:9D:F8:22:A4:1F:0C:2A:41:BE:6A:F0:36:A6:5C
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843F69DAF3D87E91B0128F2014C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/b5df7c19-240b-4a12-a886-6df8618d66ad.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 21 Nov 2023 16:18:46 +0000
Certificate not after:    Mon 23 Feb 2026 16:18:46 +0000
Subordinate resources:    AS: 20073
                          IP: 206.168.168.0/22
                          IP: 2606:bcc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f6:9d:af:3d:87:e9:1b:01:28:f2:01:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 21 16:18:46 2023 GMT
            Not After : Feb 23 16:18:46 2026 GMT
        Subject: CN=b5df7c19-240b-4a12-a886-6df8618d66ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:30:ba:ea:8b:78:99:85:d1:21:db:b6:24:
                    53:a1:56:bd:91:a7:7b:c2:12:0f:f0:6f:34:78:09:
                    00:73:c8:6b:16:ac:5d:f6:a8:a7:d2:31:a8:4a:6d:
                    e5:4e:03:e5:59:90:40:92:ab:32:5c:ac:0e:7a:2f:
                    af:5c:13:2d:96:11:0d:16:a9:98:96:ef:9b:4b:d3:
                    b2:7a:8e:5f:99:32:0c:73:c4:35:a2:78:72:ab:2d:
                    20:3f:b5:c9:e8:80:86:d7:b0:10:fb:16:76:1c:ab:
                    b4:64:e0:b7:3b:15:7a:83:b4:bb:0e:c2:cc:71:1b:
                    c3:b5:d2:e8:86:5f:1a:61:7e:c1:ec:e8:2c:dc:3f:
                    ee:55:5a:04:1d:39:55:f6:99:2b:d0:07:3e:2e:fb:
                    d5:fd:e1:64:83:d0:f7:fe:99:c0:7d:1e:fe:89:f3:
                    94:67:02:33:0d:97:ca:3c:c0:ba:7e:93:37:57:20:
                    bc:66:02:5f:97:c0:70:c4:7d:28:ed:a4:42:4d:e6:
                    7c:d5:7d:e2:98:7b:57:bc:2e:86:31:af:20:6e:ca:
                    91:85:b1:a4:a1:df:6f:f5:18:9d:0e:a8:da:7c:07:
                    fe:46:7b:4c:d6:96:04:1a:8e:8d:2d:d1:aa:ec:ef:
                    70:a9:95:a5:ec:9b:2d:ae:cd:48:03:34:8d:0b:50:
                    11:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0C:21:01:B9:E8:9D:F8:22:A4:1F:0C:2A:41:BE:6A:F0:36:A6:5C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/b5df7c19-240b-4a12-a886-6df8618d66ad.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.168.0/22
                IPv6:
                  2606:bcc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20073

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:6d:a5:c5:77:a4:2f:5d:fc:8b:95:cf:69:69:05:6a:ac:62:
         ee:2b:76:b1:02:87:76:d2:4d:d2:d0:50:9d:cb:2c:eb:c6:3e:
         32:07:cb:b0:6a:9d:71:86:ed:d2:74:13:3b:d9:e0:57:06:6a:
         ca:2c:a9:be:00:83:1d:3d:fa:af:8e:02:f5:ea:8f:45:5b:bf:
         12:d9:5a:9c:b4:16:a3:f5:86:c5:7f:e7:c3:c2:f5:db:41:cf:
         3f:ab:cb:9b:6d:2c:6a:f2:9a:6d:9d:70:9a:1c:ca:29:7d:15:
         c0:95:06:d5:19:f3:4e:16:a5:a1:3d:f9:06:1c:c0:ec:c4:ac:
         02:98:43:7e:41:4a:ed:62:e2:dc:e5:aa:ee:0f:ee:8b:53:44:
         ae:8a:05:b9:03:da:13:09:70:8a:ec:dd:59:37:22:16:89:b7:
         2e:6b:5e:3b:7c:3c:67:56:ee:d5:6b:5b:bd:2c:5d:95:3a:d0:
         ae:48:b6:76:1c:a0:45:07:0c:e8:39:0d:00:e9:f7:01:4f:12:
         73:0f:03:c4:0e:e8:a5:8e:d6:c2:09:2c:c1:8b:ea:74:88:7e:
         0d:07:09:81:33:80:c7:52:e8:42:bc:24:40:0a:05:b3:a0:1b:
         85:1c:40:1a:c5:7e:89:c8:ef:f7:4d:c5:6a:b3:79:56:c8:2f:
         e5:3b:d5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----