Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer
File:                     f8920ef3-7d53-43c3-8266-318adf8495b4.cer (raw, json)
Hash identifier:          cFvGuqRlSvLjlCOGsCxfQFGX+H4x6KKcCoqpmG+JxL8=
Subject key identifier:   E0:94:12:C0:8B:ED:44:F8:DD:AC:A3:DE:2F:C3:89:02:68:20:D4:FB
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584381C8D7EA2552AA321F518453
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 10 Oct 2023 19:56:09 +0000
Certificate not after:    Mon 12 Jan 2026 20:56:09 +0000
Subordinate resources:    AS: 46869
                          IP: 199.7.208.0/22
                          IP: 2604:1400::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:81:c8:d7:ea:25:52:aa:32:1f:51:84:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 10 19:56:09 2023 GMT
            Not After : Jan 12 20:56:09 2026 GMT
        Subject: CN=f8920ef3-7d53-43c3-8266-318adf8495b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8d:39:8e:e3:73:fd:bb:8e:63:42:14:34:4f:
                    5d:70:8a:f7:b1:12:56:23:3c:45:ea:db:f0:03:a7:
                    ed:18:e7:12:f1:18:b2:80:dd:cf:38:88:2d:95:da:
                    69:3a:b7:29:b7:f6:57:cb:16:1a:74:df:b0:b7:68:
                    a0:81:03:fc:74:12:17:90:76:2e:44:88:d1:bf:6c:
                    c2:b2:58:84:56:f4:cb:c9:7e:eb:c0:6a:70:b0:9f:
                    d1:bd:2c:b4:36:66:6e:16:bb:42:97:fd:f8:db:88:
                    80:d3:8e:a1:01:71:49:20:30:c9:c6:13:fc:b2:5e:
                    fc:d7:30:b4:eb:96:8c:70:5f:f8:3b:fd:b8:14:59:
                    bd:d4:8b:79:eb:f0:69:39:81:e5:c2:38:25:d1:0d:
                    89:22:ed:04:5c:ef:2b:00:b2:fe:a6:6f:ad:c4:d3:
                    15:0d:2e:e4:be:52:a4:45:6e:67:90:a1:14:ec:b7:
                    f6:9d:ca:44:df:2b:e5:bb:51:38:c8:ec:f7:37:63:
                    cc:85:a7:85:65:2c:80:e4:5e:45:b8:f1:44:95:8d:
                    b2:2d:b0:ca:c9:25:bb:11:13:e8:2a:af:74:3b:92:
                    31:d6:00:e4:cb:b4:0b:c2:6f:c9:d9:a0:90:7b:45:
                    77:d5:ea:6d:2b:38:a1:d5:62:ca:0e:a8:6a:0d:eb:
                    33:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:94:12:C0:8B:ED:44:F8:DD:AC:A3:DE:2F:C3:89:02:68:20:D4:FB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.208.0/22
                IPv6:
                  2604:1400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46869

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:8b:45:56:f5:84:8e:06:97:5f:b5:00:f9:11:14:20:50:41:
         83:15:e3:19:a7:20:2f:1e:b5:13:aa:08:80:2f:e3:3e:14:0b:
         50:27:be:a4:18:81:5b:0a:a4:77:cb:40:14:8a:fa:66:ff:29:
         fe:12:6c:2e:14:66:17:be:76:0f:0c:f5:9d:70:e7:c4:0f:2b:
         48:97:d9:02:bd:21:8a:92:81:1d:e6:6e:46:bd:98:1c:f6:aa:
         7f:79:d0:23:a9:d8:4f:c2:f7:00:07:78:d1:ba:5c:01:77:fb:
         10:28:05:af:31:6c:04:6b:d7:bf:06:4c:98:4f:eb:9b:e1:ff:
         cd:69:50:99:25:7c:73:54:5d:bf:4a:d8:f3:a6:0f:e4:b4:6e:
         f7:cf:53:a1:25:6d:53:ea:f4:bd:5e:06:cf:1b:3d:1c:c7:87:
         8a:cb:23:8f:dc:b4:9c:72:cc:af:86:04:b2:c4:c9:c6:af:17:
         e4:2d:6e:76:c7:9b:ef:6b:12:b3:1c:41:46:02:4e:ae:06:49:
         2d:3e:91:c1:d0:49:e6:88:4d:43:06:bb:44:61:45:71:18:da:
         1e:50:4a:6f:d4:31:61:78:35:61:d5:7f:c7:2a:b8:a0:5b:1b:
         56:7c:8b:54:b5:b9:fb:44:50:84:bf:68:4e:40:06:4c:b0:8d:
         9c:15:75:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----