Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
File:                     e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer (raw, json)
Hash identifier:          I5QdOJCvJwwNvwzbmMw7lAg3TmuiYYgKbXA2KZxV09w=
Subject key identifier:   0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843ADB665AD0DE7512B0ADF8780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 26 Oct 2023 13:34:33 +0000
Certificate not after:    Wed 28 Jan 2026 14:34:33 +0000
Subordinate resources:    AS: 19471
                          IP: 198.245.44.0/22
                          IP: 199.47.112.0/22
                          IP: 199.68.160.0/21
                          IP: 208.99.16.0/22
                          IP: 2606:6b00::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ad:b6:65:ad:0d:e7:51:2b:0a:df:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 26 13:34:33 2023 GMT
            Not After : Jan 28 14:34:33 2026 GMT
        Subject: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:64:ad:db:57:e0:bf:14:38:34:b2:a5:f5:da:
                    00:b9:73:e0:08:81:fa:87:23:d1:a2:38:42:d2:ad:
                    0a:9e:7f:c0:ad:07:0e:bd:2b:4e:8d:dd:d4:57:c5:
                    2d:0b:6a:dc:36:4f:20:2a:f1:cd:67:7b:a5:25:c6:
                    d2:8b:66:99:f6:e5:4c:34:6b:27:63:93:ac:e7:20:
                    8e:d9:33:44:37:83:d6:67:5d:46:68:b0:c8:4f:d1:
                    7c:92:9b:8d:5e:f5:d4:9a:2e:6d:c9:d2:73:3a:8c:
                    d9:1a:b8:ba:c4:e0:6f:9b:fd:2c:89:67:ea:28:21:
                    ed:a3:fe:f2:39:f5:af:75:e4:3c:24:c7:91:f1:4c:
                    72:7a:31:b0:34:04:2c:6b:43:48:f8:92:00:66:2b:
                    6a:a1:b8:5c:f3:b5:0f:92:c7:e2:50:88:6b:5b:e7:
                    25:e5:40:e8:6f:e0:d4:64:61:0b:e4:61:06:8d:98:
                    69:4a:c6:b6:a2:62:44:dc:0a:b7:97:c0:b3:8d:f0:
                    14:bf:66:0d:73:1e:be:58:56:eb:dc:98:f7:e9:24:
                    e4:4f:30:b9:23:ae:cc:8c:09:41:38:4b:b9:a6:e6:
                    d8:04:c5:31:e5:a0:70:f8:6b:a3:d3:cf:72:e7:c1:
                    b0:26:3f:60:95:3c:97:f1:cb:f8:10:a3:b5:9d:72:
                    c1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.245.44.0/22
                  199.47.112.0/22
                  199.68.160.0/21
                  208.99.16.0/22
                IPv6:
                  2606:6b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19471

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:9f:62:00:9e:9b:bc:39:78:0b:f5:a5:43:2e:dd:23:5d:38:
         a8:37:8a:cd:18:4c:77:43:71:7c:27:e7:85:a8:bc:11:70:22:
         6b:f1:04:de:93:34:a7:39:e0:ee:c2:3b:b3:18:c0:d8:5e:b6:
         75:e7:77:f3:37:2b:0a:df:ad:4b:72:46:40:8e:03:4a:af:04:
         8c:67:27:52:f4:b3:da:0d:d7:b0:10:d7:a5:35:74:4f:58:9e:
         fe:25:b5:95:5d:d4:0b:04:2d:76:70:dd:68:65:e4:76:a4:4c:
         90:e6:5b:36:f4:35:ce:a1:02:4a:bb:21:24:b9:8b:5a:f7:c9:
         6f:ba:e7:30:b8:1a:d6:24:2f:3a:8f:0c:9d:77:d6:73:58:ae:
         94:68:ec:28:20:02:89:d0:1b:04:ae:6c:57:9e:1c:19:61:32:
         c6:7d:60:06:4c:16:61:5b:cd:25:5f:bb:8b:3e:0d:a6:8c:a0:
         9b:92:27:22:12:99:7a:fd:ed:ae:ee:dd:4c:84:ff:9b:0b:c7:
         48:11:ec:43:7e:30:88:11:42:b7:8f:13:1c:39:e7:a6:d1:f7:
         3f:35:f3:f1:8a:44:fd:45:a2:f8:9a:33:01:6e:99:cc:d1:d0:
         64:4f:52:f2:a5:05:e4:dd:0c:c3:96:57:65:f4:cc:ed:b9:ac:
         23:24:15:bf
-----BEGIN CERTIFICATE-----
MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEOttmWtDedRKwrfh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTAyNjEzMzQzM1oXDTI2MDEyODE0MzQzM1owLzEtMCsGA1UEAxMk
ZTQ5ZWFhMDctOTNiZC00ZjJiLWI5YzYtYWMxZDQxMDZjNWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WSt21fgvxQ4NLKl9doAuXPgCIH6hyPRojhC
0q0Knn/ArQcOvStOjd3UV8UtC2rcNk8gKvHNZ3ulJcbSi2aZ9uVMNGsnY5Os5yCO
2TNEN4PWZ11GaLDIT9F8kpuNXvXUmi5tydJzOozZGri6xOBvm/0siWfqKCHto/7y
OfWvdeQ8JMeR8UxyejGwNAQsa0NI+JIAZitqobhc87UPksfiUIhrW+cl5UDob+DU
ZGEL5GEGjZhpSsa2omJE3Aq3l8CzjfAUv2YNcx6+WFbr3Jj36STkTzC5I67MjAlB
OEu5pubYBMUx5aBw+Guj089y58GwJj9glTyX8cv4EKO1nXLBbQIDAQABo4IEOzCC
BDcwHQYDVR0OBBYEFA05XOMNH722eYodUGDs/GJXQ4A1MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l
NDllYWEwNy05M2JkLTRmMmItYjljNi1hYzFkNDEwNmM1YjAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2U0OWVhYTA3LTkzYmQtNGYyYi1i
OWM2LWFjMWQ0MTA2YzViMC9lNDllYWEwNy05M2JkLTRmMmItYjljNi1hYzFkNDEw
NmM1YjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwQAYIKwYBBQUH
AQcBAf8EMTAvMB4EAgABMBgDBALG9SwDBALHL3ADBAPHRKADBALQYxAwDQQCAAIw
BwMFACYGawAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICTA8wVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFp9i
AJ6bvDl4C/WlQy7dI104qDeKzRhMd0NxfCfnhai8EXAia/EE3pM0pzng7sI7sxjA
2F62ded38zcrCt+tS3JGQI4DSq8EjGcnUvSz2g3XsBDXpTV0T1ie/iW1lV3UCwQt
dnDdaGXkdqRMkOZbNvQ1zqECSrshJLmLWvfJb7rnMLga1iQvOo8MnXfWc1iulGjs
KCACidAbBK5sV54cGWEyxn1gBkwWYVvNJV+7iz4Npoygm5InIhKZev3tru7dTIT/
mwvHSBHsQ34wiBFCt48THDnnptH3PzXz8YpE/UWi+JozAW6ZzNHQZE9S8qUF5N0M
w5ZXZfTM7bmsIyQVvw==
-----END CERTIFICATE-----