Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8.cer
File:                     cdd649c3-69cc-4c17-ab23-18770e2b8be8.cer (raw, json)
Hash identifier:          nQf886JmXnYt//Zm7xLqyxdhjQ/MFDJN6wxsVnoJmhs=
Subject key identifier:   26:0E:C1:31:80:A9:07:AB:3B:51:A6:8E:ED:B7:15:A7:A1:7B:55:30
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843D23511C4B3F604C224A26280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/cdd649c3-69cc-4c17-ab23-18770e2b8be8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 08 Nov 2023 15:18:53 +0000
Certificate not after:    Tue 10 Feb 2026 15:18:53 +0000
Subordinate resources:    AS: 36309
                          IP: 66.9.44.0/24
                          IP: 2620:9d:c000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:d2:35:11:c4:b3:f6:04:c2:24:a2:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov  8 15:18:53 2023 GMT
            Not After : Feb 10 15:18:53 2026 GMT
        Subject: CN=cdd649c3-69cc-4c17-ab23-18770e2b8be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:ef:c0:70:2b:2e:64:96:7e:2b:bc:22:98:
                    4c:51:1f:41:f2:e5:86:78:a8:95:cc:7a:f6:32:7b:
                    23:4c:43:6f:c2:94:d3:69:ba:5f:bc:95:ab:0a:dc:
                    7c:c1:5a:8e:be:be:87:67:44:a7:0c:14:40:94:e0:
                    d5:72:c8:2c:3f:c5:07:ed:57:d3:e9:29:36:ea:90:
                    dd:2d:18:18:63:68:73:7e:0f:18:ca:cb:ac:7c:42:
                    90:1e:33:86:5a:ec:7b:f9:af:b8:52:04:4b:de:cc:
                    2b:7e:27:8d:38:14:99:77:10:6b:c5:65:ab:0d:3d:
                    d3:44:dd:ab:13:41:95:b3:82:a4:98:f4:2e:5e:d0:
                    cb:d0:89:f5:99:43:d1:71:6a:47:85:0d:1e:90:93:
                    14:0b:45:da:9d:40:4c:9a:d5:c1:2c:87:80:b5:be:
                    87:d0:fd:2d:76:59:6d:e8:1f:a1:bf:a1:67:62:05:
                    d3:b6:5b:d0:3a:11:b7:90:bf:e7:7f:75:56:bf:92:
                    f9:02:8c:be:5f:09:6d:9e:14:38:6a:db:7a:72:d1:
                    43:a7:ec:98:b9:2c:c4:e2:ca:61:f7:b9:14:6b:7d:
                    23:ef:c9:e6:e5:a6:55:31:cb:c3:95:9b:47:fb:db:
                    27:c3:ed:9d:77:40:c1:07:19:f3:48:37:a7:ac:e6:
                    35:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0E:C1:31:80:A9:07:AB:3B:51:A6:8E:ED:B7:15:A7:A1:7B:55:30
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/cdd649c3-69cc-4c17-ab23-18770e2b8be8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.9.44.0/24
                IPv6:
                  2620:9d:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36309

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:0b:09:3c:1e:d3:1c:67:ae:d4:92:a8:65:4b:67:ce:85:b8:
         0d:d6:9a:c6:23:bf:b1:32:69:e1:41:76:94:b7:0d:67:2e:d6:
         bd:81:5d:51:2a:8b:52:74:43:f9:a7:21:b0:30:ab:cb:66:e2:
         3c:c9:f6:04:c4:21:fc:30:58:99:1a:a0:5b:25:bd:4b:4d:41:
         42:27:1b:46:27:8f:d5:ee:ae:0d:21:9f:19:af:0c:93:38:5b:
         9f:f4:68:15:b2:e5:0f:23:a3:ca:90:2c:d1:6b:c8:81:30:2b:
         f0:ee:3f:c7:df:f4:f1:73:15:fa:82:5f:1f:da:78:09:d8:57:
         bf:71:cf:65:aa:48:c7:ea:7b:1f:b9:7f:cf:93:84:5f:50:63:
         de:0d:33:eb:c9:7d:e3:46:bd:af:fa:1f:30:fc:a1:c3:31:0d:
         dd:a1:8e:55:34:88:36:27:bb:41:fa:b4:4e:45:4b:bc:89:45:
         b9:a7:bf:16:49:bc:5f:00:d3:ce:1f:91:f6:9f:e8:6a:a4:70:
         fd:94:77:16:ec:f2:a5:36:2c:63:a0:9c:99:ec:58:60:8a:77:
         81:8d:8e:9f:c6:14:53:4f:5f:56:d5:fc:e0:3c:a2:24:1a:36:
         54:14:d7:fd:db:05:ca:7a:fe:dd:d8:50:95:7e:fe:d9:4c:4b:
         78:11:6c:2d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----