Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579.cer
File:                     dc3a2d18-b171-46fa-8693-0080d77f0579.cer (raw, json)
Hash identifier:          7G4O9k4tyQ7YrtLyvVUdT5p33tsFco9KxubIoZlf3vw=
Subject key identifier:   D4:85:C6:FD:B4:5A:7B:D6:6E:E5:30:4B:42:92:C0:89:A1:6C:B3:37
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584370AF1E751AB689ECAB17FB00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/dc3a2d18-b171-46fa-8693-0080d77f0579.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 04 Oct 2023 16:55:35 +0000
Certificate not after:    Tue 06 Jan 2026 17:55:35 +0000
Subordinate resources:    IP: 142.132.0.0/17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:70:af:1e:75:1a:b6:89:ec:ab:17:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct  4 16:55:35 2023 GMT
            Not After : Jan  6 17:55:35 2026 GMT
        Subject: CN=dc3a2d18-b171-46fa-8693-0080d77f0579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ea:d6:35:ae:ed:5d:d7:f7:a9:45:cd:b1:ac:
                    a5:ec:22:e3:34:6c:c4:ac:1e:fe:1d:f0:d5:2f:f4:
                    ec:d7:65:ef:6c:d3:4d:33:51:bf:96:16:2e:f6:07:
                    77:d0:46:ed:8e:38:66:ec:63:85:82:1e:d6:69:21:
                    d6:62:56:e5:b6:20:37:9b:dc:04:56:5b:87:67:01:
                    98:7f:92:23:57:04:88:3d:4a:ec:51:ca:17:85:51:
                    a4:db:90:26:fa:b3:98:e2:bb:0d:7a:d8:e9:30:c5:
                    9c:59:8e:24:c4:1c:6c:c2:7c:b4:74:a8:ba:1a:dc:
                    08:7a:49:6c:72:15:d0:32:83:73:1b:d6:06:90:58:
                    d8:43:32:95:2c:de:9b:6d:60:81:5a:f2:69:c1:7f:
                    dc:91:a8:41:d8:58:c6:44:83:d2:20:03:31:95:69:
                    08:ed:9b:e1:bc:7b:dd:79:4f:98:d1:a2:0b:6c:d9:
                    d6:02:2e:d0:0d:fa:f2:0b:a6:71:3d:2e:35:04:51:
                    83:c3:22:40:6b:84:8b:af:d6:9f:ce:e5:8c:35:b1:
                    94:8a:56:2a:90:03:46:cb:b1:6a:e3:b4:66:16:d3:
                    35:87:a3:a5:cf:16:75:af:eb:11:45:5d:8b:cb:9d:
                    4e:e3:44:b1:02:5f:56:94:f5:91:fb:af:44:56:a8:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:85:C6:FD:B4:5A:7B:D6:6E:E5:30:4B:42:92:C0:89:A1:6C:B3:37
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/dc3a2d18-b171-46fa-8693-0080d77f0579.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.132.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:7f:29:bf:a4:ef:c1:d4:73:0b:cc:66:5a:87:ee:95:60:bd:
         d7:be:6a:2e:35:9b:7f:65:7a:eb:89:87:20:20:cc:f0:3c:60:
         a6:c3:fc:db:46:2c:96:75:64:d1:91:d7:df:2e:f3:3b:b0:12:
         4f:f7:63:26:34:1e:a8:89:20:21:23:c4:f8:d2:94:38:51:da:
         19:90:fd:0b:83:4f:24:d5:c9:5e:89:0d:f0:14:6d:47:6d:29:
         12:0c:90:b4:9f:68:ca:f4:94:64:08:4c:47:03:86:20:cf:2a:
         54:5e:78:dd:de:c8:04:c8:3d:18:3b:57:c1:9b:d2:e1:0d:71:
         72:9a:8e:cb:e3:2e:37:05:27:9a:54:b5:25:8c:e5:a8:fa:4f:
         17:8c:35:1a:4e:b3:ec:58:e8:f1:38:f0:de:7f:a2:62:51:e6:
         35:4a:24:5e:59:7e:2a:9b:8c:97:bd:35:b2:89:55:46:ee:7f:
         75:fe:f9:58:6d:96:49:05:2a:e2:e7:4b:6b:7f:24:2a:8b:d1:
         90:ba:ee:48:f2:88:42:8b:70:ae:4f:48:13:dc:11:d0:be:b8:
         d5:c5:3c:5f:0a:6f:e7:60:d8:10:df:cf:33:8a:fa:23:5c:3b:
         61:a5:11:af:a5:15:30:21:f9:b5:d7:21:68:3f:22:33:1d:7e:
         04:ee:d4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----