Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900.cer
File:                     d770c5cf-d883-43bc-a72e-4ae7f90d4900.cer (raw, json)
Hash identifier:          kbicd/kyCYAJW3htCTL8XpEaIAGOH8XXWobf7wOf1dE=
Subject key identifier:   7C:1E:62:77:45:49:21:21:11:77:82:62:6F:8C:D5:52:B1:BA:A8:2E
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858438725990282DDD98ED4B47280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/d770c5cf-d883-43bc-a72e-4ae7f90d4900.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 12 Oct 2023 18:02:05 +0000
Certificate not after:    Wed 14 Jan 2026 19:02:05 +0000
Subordinate resources:    IP: 142.17.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:87:25:99:02:82:dd:d9:8e:d4:b4:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 12 18:02:05 2023 GMT
            Not After : Jan 14 19:02:05 2026 GMT
        Subject: CN=d770c5cf-d883-43bc-a72e-4ae7f90d4900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:a5:7f:95:28:15:d9:80:07:97:73:f1:9a:
                    d1:5d:91:73:e4:fb:9f:75:18:90:65:e1:f5:82:fb:
                    8e:d0:0c:77:ce:d4:88:3a:08:3f:f2:0c:26:e4:17:
                    40:f0:7f:eb:d7:36:3f:3b:bb:d3:08:90:6c:60:46:
                    05:4c:53:8f:c3:3a:61:69:20:ab:78:fa:2a:b6:34:
                    fc:74:04:e6:48:9c:ff:07:f1:e9:5e:87:a8:27:4d:
                    d1:1c:a2:c9:88:e3:bd:97:d6:6e:c4:bb:e5:32:7d:
                    ab:c1:00:df:eb:be:64:c7:d6:6a:69:a8:72:a3:c7:
                    0a:1d:06:5d:39:05:9f:30:c0:39:e6:c0:c6:2d:17:
                    1b:c9:89:75:0f:98:ed:4d:dc:9e:54:ac:98:52:7d:
                    da:7a:d3:3d:a8:c3:72:ab:08:9c:be:26:68:54:94:
                    40:b7:40:2d:b5:f9:27:e7:ab:ed:05:4d:a9:5b:58:
                    ad:c3:61:0b:db:46:5b:ea:33:5a:1a:c9:78:35:7b:
                    e3:9a:c9:ca:57:4e:a7:13:21:c3:71:8f:7b:10:be:
                    ae:39:dd:c6:90:f2:e6:88:a4:e9:91:28:43:11:f5:
                    95:65:c8:b4:85:26:08:28:f0:ac:d9:0c:24:3c:f0:
                    1d:04:89:9a:7c:20:7c:1d:fc:89:32:d6:45:bc:4e:
                    a0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1E:62:77:45:49:21:21:11:77:82:62:6F:8C:D5:52:B1:BA:A8:2E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/d770c5cf-d883-43bc-a72e-4ae7f90d4900.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.17.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:21:69:5f:cf:ba:0d:97:1a:95:87:c4:9f:98:f1:63:36:15:
         a9:34:da:86:67:04:19:69:87:6c:e9:92:d7:bc:77:e6:96:ea:
         a5:40:5e:4a:93:0d:f0:10:ec:0e:64:8b:ca:c4:1e:ba:20:f3:
         ff:87:4a:ae:8b:95:5c:67:dd:c9:f6:45:80:dd:a7:4e:2b:78:
         c4:37:c0:89:21:a0:e6:8a:5a:c3:15:cc:67:86:60:46:ae:c1:
         7b:f5:cd:5d:93:82:7a:19:da:fb:b6:6d:71:3b:f7:50:18:45:
         20:c1:ce:4c:76:0b:b9:b0:e3:d0:81:aa:ad:67:9d:25:01:b3:
         73:b8:7c:23:56:59:27:bd:ea:8d:d4:3e:21:b6:e3:53:fd:5b:
         63:8c:93:75:28:0f:3b:ac:79:40:8e:06:99:c1:a4:f5:a2:0f:
         47:a2:d0:19:ad:53:34:e2:eb:14:10:cf:73:3d:a5:6f:f2:d9:
         a3:30:eb:93:b0:c1:b6:ee:7f:6a:3c:00:ef:5a:b1:89:28:b9:
         04:6e:36:61:cb:36:17:07:23:fb:8a:7b:ca:3c:b4:f2:fb:1d:
         90:62:1b:5a:9e:ff:ed:8b:2c:2f:ac:56:27:10:bf:60:bb:c1:
         8a:ad:c7:d8:2b:a1:ac:1d:37:41:16:8a:a7:3a:83:4e:15:89:
         c3:98:83:4d
-----BEGIN CERTIFICATE-----
MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEOHJZkCgt3ZjtS0coAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTAxMjE4MDIwNVoXDTI2MDExNDE5MDIwNVowLzEtMCsGA1UEAxMk
ZDc3MGM1Y2YtZDg4My00M2JjLWE3MmUtNGFlN2Y5MGQ0OTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoalf5UoFdmAB5dz8ZrRXZFz5PufdRiQZeH1
gvuO0Ax3ztSIOgg/8gwm5BdA8H/r1zY/O7vTCJBsYEYFTFOPwzphaSCrePoqtjT8
dATmSJz/B/HpXoeoJ03RHKLJiOO9l9ZuxLvlMn2rwQDf675kx9Zqaahyo8cKHQZd
OQWfMMA55sDGLRcbyYl1D5jtTdyeVKyYUn3aetM9qMNyqwicviZoVJRAt0Attfkn
56vtBU2pW1itw2EL20Zb6jNaGsl4NXvjmsnKV06nEyHDcY97EL6uOd3GkPLmiKTp
kShDEfWVZci0hSYIKPCs2QwkPPAdBImafCB8HfyJMtZFvE6gfQIDAQABo4ID/jCC
A/owHQYDVR0OBBYEFHweYndFSSEhEXeCYm+M1VKxuqguMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k
NzcwYzVjZi1kODgzLTQzYmMtYTcyZS00YWU3ZjkwZDQ5MDAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2Q3NzBjNWNmLWQ4ODMtNDNiYy1h
NzJlLTRhZTdmOTBkNDkwMC9kNzcwYzVjZi1kODgzLTQzYmMtYTcyZS00YWU3Zjkw
ZDQ5MDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH
AQcBAf8EDzANMAsEAgABMAUDAwCOETBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALIWlfz7oNlxqVh8SfmPFj
NhWpNNqGZwQZaYds6ZLXvHfmluqlQF5Kkw3wEOwOZIvKxB66IPP/h0qui5VcZ93J
9kWA3adOK3jEN8CJIaDmilrDFcxnhmBGrsF79c1dk4J6Gdr7tm1xO/dQGEUgwc5M
dgu5sOPQgaqtZ50lAbNzuHwjVlknveqN1D4htuNT/VtjjJN1KA87rHlAjgaZwaT1
og9HotAZrVM04usUEM9zPaVv8tmjMOuTsMG27n9qPADvWrGJKLkEbjZhyzYXByP7
invKPLTy+x2QYhtanv/tiywvrFYnEL9gu8GKrcfYK6GsHTdBFoqnOoNOFYnDmINN
-----END CERTIFICATE-----