Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87.cer
File:                     da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87.cer (raw, json)
Hash identifier:          D/FQ2buow5Cp25J2CoMyh3h093EvxRIr8wUnjmejhO4=
Subject key identifier:   96:1D:16:6F:94:C7:F0:16:F0:03:C8:56:35:8D:D4:E1:67:F2:BC:35
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584407BEEAEE5DD1CAB461D86180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 27 Nov 2023 19:34:28 +0000
Certificate not after:    Sun 01 Mar 2026 19:34:28 +0000
Subordinate resources:    AS: 20230
                          IP: 199.233.162.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:07:be:ea:ee:5d:d1:ca:b4:61:d8:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 27 19:34:28 2023 GMT
            Not After : Mar  1 19:34:28 2026 GMT
        Subject: CN=da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e0:16:54:c9:b2:74:64:a2:1d:06:65:99:d2:
                    42:6f:66:9b:63:e3:08:c7:42:64:5c:c5:0f:65:b7:
                    e8:f6:09:12:c5:9f:7d:dd:3a:68:b2:46:26:4c:56:
                    7c:cb:04:87:b1:92:f3:9f:31:10:71:3e:a5:1e:c5:
                    53:e8:93:03:01:f9:45:27:a1:79:db:5d:d5:80:26:
                    3e:33:2c:a4:f6:9e:05:90:06:1c:7d:c7:22:7f:03:
                    9c:78:2b:9f:ec:f3:bb:1c:bd:16:a3:1d:73:07:18:
                    eb:47:29:42:20:f7:14:8f:58:22:62:5d:0a:d1:42:
                    58:b2:76:f6:80:b3:be:6f:ef:ad:d9:bf:19:91:3e:
                    94:a7:03:92:7f:97:64:8b:1f:6d:61:78:75:1f:1b:
                    46:d6:d1:b3:d4:2d:cf:c1:0a:09:a0:d4:ab:91:97:
                    91:d6:d0:1b:88:e5:3a:57:e0:02:a4:1a:24:5e:da:
                    b1:49:8f:af:69:b5:b9:f2:3d:f2:18:7b:d9:a3:5c:
                    8e:ab:69:b7:48:ab:a9:ea:2b:9e:70:c5:00:54:06:
                    08:36:3f:3f:18:0e:e8:14:fc:c9:12:07:c6:44:da:
                    73:69:c3:e5:c9:74:9f:3a:4f:07:fd:92:f4:19:50:
                    ce:ef:03:66:a4:ff:66:00:d9:59:56:a0:c9:96:13:
                    25:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1D:16:6F:94:C7:F0:16:F0:03:C8:56:35:8D:D4:E1:67:F2:BC:35
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.233.162.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20230

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:1c:af:33:21:e6:20:34:4f:98:0d:71:1c:1e:02:f8:11:75:
         21:45:46:eb:a1:8b:f7:6a:53:13:20:8b:6f:f3:dc:9a:fa:e5:
         99:9d:b6:ec:cf:46:4a:7b:b0:b9:2c:bd:ab:98:3e:38:fe:b7:
         6e:12:d7:cf:93:44:30:ff:97:2f:f3:dd:bc:b4:72:ed:5a:aa:
         93:f2:b2:99:3a:4b:70:5d:c1:e7:43:5b:45:20:02:66:b2:58:
         7e:3d:93:46:12:0f:c2:f7:51:c8:89:26:8d:0c:2a:80:4a:fd:
         e5:da:bf:f3:17:8e:47:c2:dc:b8:dc:b8:83:30:2e:4b:40:94:
         69:5e:14:35:51:2b:ae:be:b3:02:88:1d:f8:58:dc:84:ce:f1:
         70:1c:b5:05:0d:75:ea:24:c4:32:c6:fc:1e:9b:8d:3e:09:0c:
         10:ce:88:c9:21:55:b2:ab:6c:46:db:f3:1c:f9:a9:e4:48:b5:
         82:d4:3c:dc:8d:e8:1e:f9:ff:ef:5a:f6:f7:59:6b:e2:74:f7:
         1c:54:2c:62:14:20:60:92:77:47:59:12:a6:02:23:47:7b:49:
         64:7d:21:0e:a7:85:7e:99:55:72:38:da:ba:48:44:1f:ea:ca:
         c9:3e:42:ff:1e:4d:18:81:48:2c:80:c3:3c:2e:2b:3f:23:7f:
         d6:9b:ca:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----