Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer
File:                     e0016267-dc0a-4a90-a925-951bf1a98788.cer (raw, json)
Hash identifier:          Z7OHPI0oR4wCdTssWiGJRpbqaIWHorud3ClaYl2aTGg=
Subject key identifier:   66:23:7B:02:0A:2F:12:7A:B9:C1:CD:B7:FA:A4:D8:AD:57:87:76:03
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843A8A9C11CA8B9B962A4C099A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 24 Oct 2023 18:10:02 +0000
Certificate not after:    Mon 26 Jan 2026 19:10:02 +0000
Subordinate resources:    AS: 18907
                          IP: 104.219.144.0/22
                          IP: 162.249.36.0/22
                          IP: 2605:2880::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a8:a9:c1:1c:a8:b9:b9:62:a4:c0:99:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 24 18:10:02 2023 GMT
            Not After : Jan 26 19:10:02 2026 GMT
        Subject: CN=e0016267-dc0a-4a90-a925-951bf1a98788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:62:8d:33:f1:db:cd:45:44:38:21:5f:f0:
                    ff:5f:92:b9:a1:cf:ec:65:03:83:78:26:21:18:35:
                    27:43:33:43:56:e9:d3:29:19:54:cc:63:72:a5:50:
                    6c:c1:2e:84:39:3b:1a:8e:4d:f1:ca:9e:52:e2:1c:
                    57:48:de:e5:59:7e:b4:2f:4c:97:2b:5b:fa:37:22:
                    b4:60:8f:c8:de:70:13:68:b8:43:a9:7a:6f:93:5e:
                    62:7e:58:c1:1f:b3:34:55:03:11:c9:20:6d:81:d0:
                    29:b0:ed:9b:a4:fb:e5:5e:ec:8c:df:d7:52:07:0a:
                    c1:ea:66:b7:f4:0a:1a:b4:30:0e:40:b6:22:ea:bb:
                    5c:ef:74:21:bd:ff:38:66:ca:2b:41:c9:50:5c:cd:
                    23:95:a3:f0:94:30:c0:59:81:37:51:90:b8:70:0a:
                    c3:d6:4d:30:78:82:36:a7:f1:74:a4:54:3e:31:33:
                    a9:ca:0b:93:9c:7f:2b:2b:42:45:13:f0:ee:8c:11:
                    c6:de:ac:a3:c5:29:5e:c6:c6:10:e1:9b:80:ae:11:
                    f9:7d:93:46:6a:3a:3e:61:6d:ee:de:3b:e3:b4:0a:
                    ed:40:e6:02:4e:a2:af:a6:8f:8a:58:61:7e:9f:b6:
                    41:57:7c:7d:e1:52:a0:2c:18:d2:bb:41:bd:e6:05:
                    21:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:23:7B:02:0A:2F:12:7A:B9:C1:CD:B7:FA:A4:D8:AD:57:87:76:03
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.144.0/22
                  162.249.36.0/22
                IPv6:
                  2605:2880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18907

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:60:85:60:fe:9a:e7:21:3b:b2:24:94:5d:d8:d8:1a:cd:d6:
         95:85:a3:fa:25:8b:0e:10:29:1f:23:c5:0a:ae:69:ed:20:c1:
         1e:c3:b9:84:0d:21:d1:7f:b9:6e:68:60:a2:af:cf:76:b8:82:
         b8:22:ba:96:a2:0a:d9:7a:b0:36:75:f2:8b:05:41:37:d3:c3:
         a5:b4:cd:f6:df:36:5c:1e:35:d1:af:fd:dc:d8:23:7d:9b:10:
         c8:55:92:c5:37:d8:c7:09:1e:b8:74:4c:f9:df:a9:2d:3d:e7:
         c5:7a:51:b1:f5:18:f2:9e:51:02:ea:0d:a9:58:85:e6:c7:48:
         69:0c:93:dd:14:09:e9:15:49:78:63:e1:a3:08:4e:fc:fa:da:
         42:e1:bd:c6:7a:39:8a:1b:19:3b:77:10:14:b0:2f:51:04:a3:
         ff:ff:fb:b7:be:5a:66:71:69:a4:cb:d6:18:ae:69:ee:4d:2d:
         c9:b8:e3:8e:b0:11:2c:33:c4:d0:c3:6a:5f:9f:5c:9b:de:87:
         d1:b9:42:a0:12:c0:97:81:23:97:e5:fe:c4:79:a3:5e:b1:fc:
         dd:ac:29:ea:e1:d5:9c:55:17:c0:8c:89:89:c6:39:23:47:6a:
         b0:0b:1e:21:36:a0:d3:f8:dc:fc:f3:37:d6:fe:86:88:04:50:
         f7:a8:aa:2e
-----BEGIN CERTIFICATE-----
MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEOoqcEcqLm5YqTAmaQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTAyNDE4MTAwMloXDTI2MDEyNjE5MTAwMlowLzEtMCsGA1UEAxMk
ZTAwMTYyNjctZGMwYS00YTkwLWE5MjUtOTUxYmYxYTk4Nzg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqtijTPx281FRDghX/D/X5K5oc/sZQODeCYh
GDUnQzNDVunTKRlUzGNypVBswS6EOTsajk3xyp5S4hxXSN7lWX60L0yXK1v6NyK0
YI/I3nATaLhDqXpvk15ifljBH7M0VQMRySBtgdApsO2bpPvlXuyM39dSBwrB6ma3
9AoatDAOQLYi6rtc73Qhvf84ZsorQclQXM0jlaPwlDDAWYE3UZC4cArD1k0weII2
p/F0pFQ+MTOpyguTnH8rK0JFE/DujBHG3qyjxSlexsYQ4ZuArhH5fZNGajo+YW3u
3jvjtArtQOYCTqKvpo+KWGF+n7ZBV3x94VKgLBjSu0G95gUhkQIDAQABo4IELzCC
BCswHQYDVR0OBBYEFGYjewIKLxJ6ucHNt/qk2K1Xh3YDMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l
MDAxNjI2Ny1kYzBhLTRhOTAtYTkyNS05NTFiZjFhOTg3ODgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2UwMDE2MjY3LWRjMGEtNGE5MC1h
OTI1LTk1MWJmMWE5ODc4OC9lMDAxNjI2Ny1kYzBhLTRhOTAtYTkyNS05NTFiZjFh
OTg3ODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAJo25ADBAKi+SQwDQQCAAIwBwMFACYFKIAwGQYI
KwYBBQUHAQgBAf8ECjAIoAYwBAICSdswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAF2CFYP6a5yE7siSUXdjY
Gs3WlYWj+iWLDhApHyPFCq5p7SDBHsO5hA0h0X+5bmhgoq/PdriCuCK6lqIK2Xqw
NnXyiwVBN9PDpbTN9t82XB410a/93NgjfZsQyFWSxTfYxwkeuHRM+d+pLT3nxXpR
sfUY8p5RAuoNqViF5sdIaQyT3RQJ6RVJeGPhowhO/PraQuG9xno5ihsZO3cQFLAv
UQSj///7t75aZnFppMvWGK5p7k0tybjjjrARLDPE0MNqX59cm96H0blCoBLAl4Ej
l+X+xHmjXrH83awp6uHVnFUXwIyJicY5I0dqsAseITag0/jc/PM31v6GiARQ96iq
Lg==
-----END CERTIFICATE-----