Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a.cer
File:                     f8c8c076-f01a-4032-b27d-2c8117227f2a.cer (raw, json)
Hash identifier:          ISfRzuyNvzhjgtzGIHTbmo8WP3F9nQucgDuMcHGBxT0=
Subject key identifier:   E2:F9:A8:6F:E7:F0:F9:B7:71:AC:2E:54:9D:CF:7F:B8:39:81:77:C5
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843B0047F723513AD3BA53ABA40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/f8c8c076-f01a-4032-b27d-2c8117227f2a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 27 Oct 2023 09:23:32 +0000
Certificate not after:    Thu 29 Jan 2026 10:23:32 +0000
Subordinate resources:    IP: 216.120.131.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:b0:04:7f:72:35:13:ad:3b:a5:3a:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 27 09:23:32 2023 GMT
            Not After : Jan 29 10:23:32 2026 GMT
        Subject: CN=f8c8c076-f01a-4032-b27d-2c8117227f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:23:8e:75:20:c4:bb:7d:54:4b:cf:df:7b:
                    b7:eb:af:1a:82:87:c3:94:cd:83:e6:f6:02:b4:a6:
                    b2:aa:1e:79:c7:43:1a:2e:6e:5c:09:f9:7e:13:cc:
                    e4:32:2a:45:51:a9:9c:99:d2:20:7d:eb:23:ac:b1:
                    d9:49:39:6f:5b:bb:8e:e3:00:6f:c1:c1:ff:8a:a1:
                    eb:ef:55:2f:9b:16:cb:34:32:a9:cb:b8:94:a9:9f:
                    74:8e:96:fd:a8:e6:d8:67:3d:0f:59:95:d0:21:1b:
                    ac:01:39:c9:14:f9:b6:a5:52:15:f4:84:55:b4:bf:
                    de:f3:b9:51:97:26:f8:c5:22:21:78:2b:fd:65:95:
                    1c:d3:55:b9:0f:64:1f:2b:9e:b7:f4:56:49:92:51:
                    1f:6f:4a:c5:13:e8:d4:7e:19:87:3a:08:4a:fa:74:
                    d8:68:b0:3b:ab:82:8e:e4:55:5e:82:a7:ca:cd:b5:
                    cd:53:4b:44:71:7d:b9:e2:87:69:68:0c:28:70:3e:
                    62:73:d4:4f:b4:f0:e2:56:01:ac:5f:e4:44:c2:41:
                    51:7a:b7:e9:9c:b7:99:ef:07:b1:94:fa:5a:5a:19:
                    24:6a:76:a3:d2:8d:68:80:ee:37:bb:ed:a4:df:10:
                    31:f2:86:f8:2f:7a:8d:f5:02:b9:b7:af:3a:73:86:
                    aa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F9:A8:6F:E7:F0:F9:B7:71:AC:2E:54:9D:CF:7F:B8:39:81:77:C5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/f8c8c076-f01a-4032-b27d-2c8117227f2a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:15:7a:90:47:e5:31:83:5f:7a:f7:e3:85:52:89:02:42:77:
         bb:28:13:47:43:ed:05:b4:c7:5a:04:8b:c2:b7:da:24:2a:0d:
         d5:1a:c4:1d:58:9d:76:91:76:65:17:89:8c:98:91:7c:65:19:
         24:9c:ed:36:56:21:d7:31:59:79:c7:2c:69:c4:1a:81:5e:6e:
         1c:5f:f9:25:96:7f:da:57:c9:3a:34:2c:a7:f9:33:3c:a6:9f:
         06:bd:68:f2:39:01:83:29:b9:a3:6c:f7:26:3c:85:03:e3:03:
         16:86:57:45:d7:96:4b:62:23:88:7b:d8:39:af:0d:da:80:6b:
         04:c9:8a:18:2e:2a:00:d6:3f:2b:a9:3d:f2:5b:87:f2:57:3c:
         c4:aa:f0:e9:cc:36:3e:20:6a:3c:e1:54:84:bf:c7:0d:66:62:
         b8:53:45:22:46:b0:b9:a0:b5:e1:4a:2d:d9:22:14:bd:ba:6d:
         57:0c:00:23:af:16:35:b0:1b:ab:db:d6:50:15:78:52:2a:13:
         ff:34:18:76:8a:72:81:f3:f0:55:c5:e3:69:a8:30:bb:48:70:
         76:7b:f3:e1:d3:7c:ed:d7:73:72:b6:d0:a5:4e:a2:47:38:90:
         8d:1b:13:ac:66:bc:2b:01:25:ed:55:83:61:d0:ec:af:2e:44:
         b2:df:ae:eb
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEOwBH9yNROtO6U6ukAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTAyNzA5MjMzMloXDTI2MDEyOTEwMjMzMlowLzEtMCsGA1UEAxMk
ZjhjOGMwNzYtZjAxYS00MDMyLWIyN2QtMmM4MTE3MjI3ZjJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXojjnUgxLt9VEvP33u3668agofDlM2D5vYC
tKayqh55x0MaLm5cCfl+E8zkMipFUamcmdIgfesjrLHZSTlvW7uO4wBvwcH/iqHr
71UvmxbLNDKpy7iUqZ90jpb9qObYZz0PWZXQIRusATnJFPm2pVIV9IRVtL/e87lR
lyb4xSIheCv9ZZUc01W5D2QfK5639FZJklEfb0rFE+jUfhmHOghK+nTYaLA7q4KO
5FVegqfKzbXNU0tEcX254odpaAwocD5ic9RPtPDiVgGsX+REwkFRerfpnLeZ7wex
lPpaWhkkanaj0o1ogO43u+2k3xAx8ob4L3qN9QK5t686c4aqmQIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFOL5qG/n8Pm3cawuVJ3Pf7g5gXfFMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m
OGM4YzA3Ni1mMDFhLTQwMzItYjI3ZC0yYzgxMTcyMjdmMmEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2Y4YzhjMDc2LWYwMWEtNDAzMi1i
MjdkLTJjODExNzIyN2YyYS9mOGM4YzA3Ni1mMDFhLTQwMzItYjI3ZC0yYzgxMTcy
MjdmMmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADYeIMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASxV6kEflMYNfevfjhVKJ
AkJ3uygTR0PtBbTHWgSLwrfaJCoN1RrEHViddpF2ZReJjJiRfGUZJJztNlYh1zFZ
eccsacQagV5uHF/5JZZ/2lfJOjQsp/kzPKafBr1o8jkBgym5o2z3JjyFA+MDFoZX
RdeWS2IjiHvYOa8N2oBrBMmKGC4qANY/K6k98luH8lc8xKrw6cw2PiBqPOFUhL/H
DWZiuFNFIkawuaC14Uot2SIUvbptVwwAI68WNbAbq9vWUBV4UioT/zQYdopygfPw
VcXjaagwu0hwdnvz4dN87ddzcrbQpU6iRziQjRsTrGa8KwEl7VWDYdDsry5Est+u
6w==
-----END CERTIFICATE-----