Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
File:                     f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer (raw, json)
Hash identifier:          LOgp8hmFInVHMF3aRI/r/WpycO7plrroVdG9wmna3aU=
Subject key identifier:   EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858440D90A52333905D774DB22100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 29 Nov 2023 21:36:05 +0000
Certificate not after:    Tue 03 Mar 2026 21:36:05 +0000
Subordinate resources:    AS: 400544
                          IP: 104.156.128.0/22
                          IP: 2607:76c0::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0d:90:a5:23:33:90:5d:77:4d:b2:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 29 21:36:05 2023 GMT
            Not After : Mar  3 21:36:05 2026 GMT
        Subject: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:bf:58:86:8d:fe:8f:ed:c0:98:4b:20:b4:
                    db:c0:6d:70:eb:5f:f3:04:c2:37:cf:2f:6f:db:ac:
                    f8:88:b9:c9:f4:15:3e:4b:01:e3:41:60:72:2e:87:
                    82:31:c3:91:88:11:82:31:9e:f9:60:f1:ee:06:58:
                    29:10:1f:6a:22:cf:40:57:a6:b8:67:b6:bf:3e:27:
                    57:54:9c:2b:39:26:8f:8e:ce:5b:1e:44:d2:1c:49:
                    64:ff:83:4f:c6:af:81:d6:30:97:08:1d:a2:7f:f5:
                    c0:36:8b:76:b4:b8:34:3f:99:87:bd:2f:b5:cd:8b:
                    74:3a:9e:5c:d6:61:fd:e5:59:ad:86:09:33:30:4f:
                    b2:07:93:ea:9e:4c:94:13:c9:8d:79:62:0c:4a:cc:
                    57:6f:12:55:50:58:af:04:28:0e:c6:4e:92:f3:91:
                    cb:6f:76:16:d4:f5:30:a5:33:5b:af:52:d5:f3:d9:
                    94:49:b5:40:21:4c:36:4a:fa:be:d2:d9:4b:c1:f1:
                    f4:b2:62:32:a6:aa:1c:86:0a:a3:a8:c9:b5:ae:92:
                    4e:43:97:d1:f0:b5:97:cf:e8:ad:7f:f4:d5:a6:49:
                    7a:2a:5c:d0:df:a1:64:0b:bd:0c:60:e9:c6:b5:fc:
                    92:6d:1b:9c:49:c4:d8:03:c4:44:db:46:9c:d7:59:
                    de:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.128.0/22
                IPv6:
                  2607:76c0::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400544

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:9d:b3:65:cb:17:67:1a:a4:fa:d8:7e:7e:c6:11:82:a0:91:
         b4:5a:28:eb:15:d5:3a:74:7e:10:1e:5d:b3:8d:5f:7f:0c:9c:
         a2:2f:58:2c:ee:87:f1:0c:80:49:72:62:9e:db:e9:60:bc:c4:
         59:03:68:ef:6d:01:94:02:ba:ec:74:fb:bd:2a:07:d9:89:2b:
         c4:17:2a:d5:58:dd:7b:02:28:69:bd:ed:8e:6d:25:7e:07:c4:
         6e:47:94:82:6a:f6:4b:1b:70:76:2e:54:f5:9f:a2:b1:c5:18:
         f5:0b:93:b8:85:b9:ac:52:36:3e:73:1d:64:6e:17:8d:30:9f:
         fd:be:83:91:80:43:44:b3:0e:f2:23:2a:8c:9f:01:6e:2e:43:
         25:d1:3e:57:83:99:b8:11:8b:d8:48:e5:bb:a0:3c:f2:07:85:
         a2:29:42:db:86:cb:a7:b6:3c:09:45:88:f7:a1:44:76:a0:fb:
         4e:43:fb:f9:6e:7c:46:86:21:ce:ca:11:e1:38:21:21:b8:f2:
         6a:0f:b7:4b:9b:59:1c:e7:b4:1d:29:e9:1d:9c:0f:96:5f:39:
         b9:ab:61:d8:74:19:53:4b:9d:18:29:b7:d8:a0:b6:7b:53:41:
         81:f6:60:4a:75:0f:d3:a9:43:5b:c3:5e:a4:2d:1a:98:04:bd:
         2b:2f:c5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----