Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer
File:                     ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer (raw, json)
Hash identifier:          O6CfrZA7PjrylpyyeNDPx2hEQFi3BDUmI4A3AVHAyMM=
Subject key identifier:   EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843D3005FBB239021CFABA7E4C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 08 Nov 2023 22:08:31 +0000
Certificate not after:    Tue 10 Feb 2026 22:08:31 +0000
Subordinate resources:    AS: 32003
                          IP: 104.243.144.0/20
                          IP: 199.38.168.0/22
                          IP: 2606:780::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:d3:00:5f:bb:23:90:21:cf:ab:a7:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov  8 22:08:31 2023 GMT
            Not After : Feb 10 22:08:31 2026 GMT
        Subject: CN=ce57877c-89ad-4d14-9b2c-3fbd440b003b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6a:fa:19:43:32:81:22:e0:e6:51:fb:fd:19:
                    6c:33:99:49:9d:bf:f6:0a:b6:4b:e6:d5:09:e8:e5:
                    28:cf:6e:0e:5e:37:3b:4a:51:ef:b9:f9:34:9a:52:
                    18:10:fc:ed:bf:45:b5:e5:e1:84:fb:96:ad:82:39:
                    c1:22:89:c3:4c:cd:f7:c4:21:98:9f:65:73:55:85:
                    e5:9f:77:9b:7d:16:ee:d8:3f:23:f2:45:29:d4:37:
                    1f:bb:75:4f:05:11:0d:a2:b8:94:55:65:cc:0d:87:
                    dd:22:03:41:0e:76:f3:8a:8b:9f:e2:c0:c7:31:83:
                    29:29:c7:62:79:cd:e1:d7:33:8b:c9:51:64:99:db:
                    09:f4:5a:72:6d:7e:95:07:58:f9:84:db:49:66:47:
                    5d:eb:2f:6f:db:05:be:ef:42:b9:6a:da:35:8b:71:
                    bd:7e:04:28:8c:5f:a5:a4:86:51:27:8d:37:71:c9:
                    1f:43:6b:78:e2:e3:f5:67:52:8b:ce:4e:0d:b5:af:
                    be:29:79:69:3a:c5:1e:b0:be:e9:8e:02:d7:a1:9c:
                    be:0e:ee:20:e0:b4:00:19:c3:e4:78:fe:52:71:e7:
                    cc:db:78:a1:fd:33:ad:1a:d3:be:b1:12:10:62:81:
                    b2:33:f8:2d:07:df:2a:9b:8f:ff:03:1e:d6:45:02:
                    ed:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.144.0/20
                  199.38.168.0/22
                IPv6:
                  2606:780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32003

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:3b:50:3f:ce:bd:f8:bf:df:44:3b:25:2c:da:3b:f2:6c:be:
         38:a1:f0:1d:cf:14:ae:b0:15:ba:c7:3d:84:47:4b:c7:36:e4:
         ba:f7:a4:ec:de:67:08:34:43:1b:49:33:3b:fa:80:a9:a1:fe:
         42:bf:0a:b2:d2:f2:7f:59:c2:84:a2:fd:81:44:3e:fe:cc:a7:
         e4:5d:84:a1:17:a0:19:79:78:5c:f4:02:a4:75:70:76:8b:f6:
         d4:3b:33:f5:4d:89:7f:7a:d6:9f:57:b8:f9:46:ba:ec:81:80:
         24:ce:9b:b4:98:e7:4d:32:1e:cc:da:3b:cc:a6:00:05:9b:1c:
         f3:d1:a4:b2:61:d9:4a:5a:96:57:26:fa:c0:88:50:79:c6:eb:
         cf:11:8b:e6:76:15:df:ae:1a:74:4f:12:19:3f:ea:9b:5c:e0:
         4f:7b:22:33:fb:a5:d1:91:d2:1a:f0:40:07:20:b7:b1:1a:b1:
         ea:3b:7c:62:f8:8c:81:3a:db:32:12:6f:bf:bf:bd:bf:92:ee:
         59:fc:08:a0:fa:14:f2:59:3c:de:bd:2d:6c:fe:88:86:7d:7c:
         b1:42:97:3e:13:98:ba:e4:40:1c:d0:e7:2d:75:69:85:9f:cc:
         7e:62:4a:c4:c8:b1:31:0b:b4:09:da:2d:15:80:3b:58:75:4c:
         f9:3b:bd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:55:52 2024 by rpki-client on console-ams.rpki-client.org