Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee111e64-77c7-486e-9426-d5bd060576a6.cer
File:                     ee111e64-77c7-486e-9426-d5bd060576a6.cer (raw, json)
Hash identifier:          67IGeT0YYAlCX1XS1I2wyBKPbHclgxpXEqUGY1vWmQI=
Subject key identifier:   F0:CF:EF:D8:6A:71:B4:EA:57:E8:3C:F1:7F:A9:54:0C:26:AB:CE:5A
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843846CE48DBF0B433E8E92E0C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee111e64-77c7-486e-9426-d5bd060576a6/ee111e64-77c7-486e-9426-d5bd060576a6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee111e64-77c7-486e-9426-d5bd060576a6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 11 Oct 2023 18:38:18 +0000
Certificate not after:    Tue 13 Jan 2026 19:38:18 +0000
Subordinate resources:    IP: 151.161.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:84:6c:e4:8d:bf:0b:43:3e:8e:92:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 11 18:38:18 2023 GMT
            Not After : Jan 13 19:38:18 2026 GMT
        Subject: CN=ee111e64-77c7-486e-9426-d5bd060576a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:28:46:c4:8f:a6:ca:dd:7b:e4:fb:02:18:76:
                    6b:62:e0:67:da:1d:f0:1c:92:36:b2:af:31:69:41:
                    00:10:b2:ed:e2:21:94:a9:e3:d2:48:8a:82:bc:aa:
                    cc:7e:3d:94:f7:6b:a4:93:c8:db:6e:86:e8:1b:2e:
                    58:f5:07:04:f0:45:c4:5b:09:3e:df:7f:1a:37:9e:
                    4f:46:64:15:4b:62:7e:21:dd:fd:1a:32:98:d7:31:
                    ec:4c:7f:19:44:2b:04:51:85:34:3e:5e:1a:81:36:
                    4e:d5:58:cb:f7:06:bb:36:8d:ec:52:2d:7a:44:97:
                    2f:00:d2:c8:fe:06:ec:1e:9f:78:02:9c:79:cd:e2:
                    5e:3f:5b:10:8c:a9:b5:ef:9e:60:9d:dc:60:cd:ce:
                    7e:cc:fb:7d:78:0e:8e:85:cf:b1:15:4d:c6:e2:f1:
                    23:21:da:83:8c:99:ed:fc:e5:8a:98:ca:b6:d1:72:
                    41:4c:ed:92:ce:69:48:c5:c4:f0:ec:9c:7f:ac:28:
                    07:49:8c:11:ed:68:99:5f:f3:e5:43:b1:28:5f:ee:
                    55:d6:7e:c9:22:4e:b3:70:19:35:81:7d:ba:9a:6d:
                    75:80:ae:94:b0:e6:9b:0d:bd:47:f6:5c:5d:9c:f6:
                    6c:71:a1:e3:38:04:db:c0:8a:0d:22:11:9b:cf:45:
                    cd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CF:EF:D8:6A:71:B4:EA:57:E8:3C:F1:7F:A9:54:0C:26:AB:CE:5A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee111e64-77c7-486e-9426-d5bd060576a6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee111e64-77c7-486e-9426-d5bd060576a6/ee111e64-77c7-486e-9426-d5bd060576a6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:43:1d:41:19:6e:19:95:75:05:9b:e3:cd:69:45:0a:5d:68:
         f8:7b:b2:91:90:24:fe:72:4f:11:5f:b6:fe:f2:73:4f:5c:52:
         35:d9:81:2c:a9:e5:eb:62:e1:50:0a:90:1d:28:49:49:1e:c7:
         e2:ee:c8:da:11:20:86:d6:c2:df:2a:16:39:bc:42:12:9e:2d:
         d9:c1:d8:79:1f:b6:94:70:fe:cd:d9:9c:4e:8e:93:96:b3:19:
         6b:e9:b5:57:b0:e1:36:bc:48:d2:07:02:76:4d:27:57:af:e0:
         dd:9b:ba:46:44:79:8c:c6:2d:5b:33:f9:9e:82:6c:cf:74:e3:
         78:37:a2:45:0d:56:a9:30:e3:97:06:19:c9:2e:c0:75:a2:ef:
         8f:27:f0:9b:d3:0a:a1:23:ea:86:d2:0e:e8:48:27:b4:9e:b4:
         5b:c6:57:68:f1:ad:24:1a:46:0b:cc:8e:2f:03:a5:9f:d1:36:
         91:c1:33:4e:8a:cf:d8:2c:4b:61:77:41:90:44:57:0c:58:0d:
         9c:6a:b0:71:68:87:57:e9:f3:4f:87:33:fb:f6:e6:c5:c5:77:
         8a:4d:5c:42:25:33:83:0b:2c:19:c0:3b:2b:8d:a4:16:8c:56:
         e5:0a:ca:0d:4b:e2:46:6f:f3:c5:ef:e7:0e:d1:9c:81:f9:ac:
         84:9c:09:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----