Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339.cer
File:                     b67bd843-21be-45d4-8f47-607465f96339.cer (raw, json)
Hash identifier:          9D+u1iaT1J9z4LMXzhyMDE2IMJ2akuZUWO+aOYPKoEY=
Subject key identifier:   41:FB:14:8B:8D:51:1A:08:6E:4D:EA:94:E4:E1:6D:9F:B8:D4:AA:F1
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285843FD4C35AE5DAE6050D873B5E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/b67bd843-21be-45d4-8f47-607465f96339.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 24 Nov 2023 01:45:16 +0000
Certificate not after:    Thu 26 Feb 2026 01:45:16 +0000
Subordinate resources:    IP: 170.76.231.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:fd:4c:35:ae:5d:ae:60:50:d8:73:b5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Nov 24 01:45:16 2023 GMT
            Not After : Feb 26 01:45:16 2026 GMT
        Subject: CN=b67bd843-21be-45d4-8f47-607465f96339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f2:ae:a8:2d:eb:21:d8:a1:58:60:ed:3f:ef:
                    54:1b:6d:c7:88:26:e2:a2:d2:76:61:79:9c:d2:23:
                    7a:4f:cf:36:2c:fb:de:3e:11:d1:76:05:20:1b:b1:
                    b5:43:58:3d:87:0d:40:3e:78:a5:56:43:e2:3c:eb:
                    29:e7:c9:be:89:95:b5:ef:d4:5b:b3:97:33:89:58:
                    e8:fc:5e:88:d6:b1:3d:78:ed:02:72:e1:3b:31:46:
                    60:3b:7b:83:28:b0:1d:ea:ea:4a:b9:71:1e:40:cc:
                    0f:fe:6b:d8:55:0e:e2:59:a4:24:d9:88:71:36:91:
                    3c:43:47:49:a7:72:20:f8:60:26:f1:ff:a6:e9:a5:
                    57:9d:21:17:0f:c0:ed:2d:49:a4:30:67:db:0b:ce:
                    79:45:9a:bb:7c:9c:8c:97:c1:45:d1:a6:d3:aa:05:
                    d0:b0:18:57:b8:e6:87:05:a1:7e:02:5d:ad:38:06:
                    99:ef:a6:bd:34:25:be:48:f7:f5:4c:7c:7f:30:27:
                    10:50:83:af:94:e3:26:c9:bb:91:5c:b9:d7:e8:c9:
                    db:2e:31:62:b6:0e:4a:20:c9:24:c2:8f:b4:92:93:
                    15:41:8b:0a:58:c3:12:c8:99:ab:84:50:61:09:3e:
                    4b:04:91:c7:ba:95:ec:ff:5c:25:a8:4a:91:ed:f3:
                    3f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FB:14:8B:8D:51:1A:08:6E:4D:EA:94:E4:E1:6D:9F:B8:D4:AA:F1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/b67bd843-21be-45d4-8f47-607465f96339.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.76.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:0a:8e:47:6a:2f:4d:12:26:46:bd:d6:2e:af:f1:fb:54:9e:
         a3:77:ca:01:d1:e7:74:1c:ee:91:ef:41:20:37:71:3f:ed:a1:
         3a:44:c2:b8:32:4d:fa:38:b0:b9:e7:02:c6:73:11:28:6d:f5:
         b6:f3:d4:3f:cd:83:da:c3:b8:c1:64:79:d7:5c:a3:6f:fa:cb:
         67:30:84:0a:5d:5e:d1:36:da:e9:fc:fa:80:54:b8:e8:86:9d:
         39:b4:9c:c8:ee:2a:c0:71:e7:23:3b:7d:af:87:70:d5:3b:65:
         cc:95:bd:5b:0f:62:72:73:7c:17:37:a2:7e:74:56:8e:d0:ad:
         61:75:84:38:f7:e2:37:e1:2c:21:72:d1:c2:97:08:d4:15:19:
         08:19:a7:11:67:67:bf:f2:a2:1a:0d:40:c3:ce:4a:47:c4:e0:
         23:71:c5:ab:80:db:e4:bd:b4:73:2f:26:4e:6a:7f:dc:76:e0:
         2b:27:0b:bb:0d:4d:a8:56:d5:4a:c6:2e:a4:d2:cc:87:df:d8:
         1f:3b:68:65:eb:79:eb:5b:54:9e:c8:a8:51:c3:14:d4:0d:7d:
         7b:57:79:9d:fd:16:8d:e8:d0:43:2b:e9:d6:97:44:aa:22:b4:
         61:de:cc:6d:d4:e3:07:3f:5f:e7:b6:36:34:72:c9:c3:80:0c:
         1c:09:63:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----