Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
File:                     b9b79447-da88-4528-8ff7-0d367d2d76e8.cer (raw, json)
Hash identifier:          dIdfm/hPR1W875WWNIOq0JXYc/H1t4ChWKQPrRyK8nk=
Subject key identifier:   1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584398ADCBFC059160F5497E5200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 19 Oct 2023 00:45:15 +0000
Certificate not after:    Wed 21 Jan 2026 01:45:15 +0000
Subordinate resources:    AS: 397960
                          IP: 161.199.128.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:98:ad:cb:fc:05:91:60:f5:49:7e:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Oct 19 00:45:15 2023 GMT
            Not After : Jan 21 01:45:15 2026 GMT
        Subject: CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c4:ce:55:1a:2b:29:23:e1:66:6d:b3:67:61:
                    f1:ee:55:7d:1a:c0:5d:c4:74:af:33:b6:10:08:87:
                    61:bb:29:77:ab:e7:37:59:8a:44:e1:61:30:06:27:
                    4f:22:86:c7:a3:b3:75:b8:b6:13:6a:4b:d1:a9:42:
                    df:3c:45:bc:ae:15:0f:eb:2b:c4:0b:89:fe:8f:ac:
                    e6:fb:e6:25:fe:bd:fe:98:00:ea:f9:16:6a:ed:34:
                    8a:41:27:99:5e:b6:42:d6:71:56:1e:f7:23:0f:a6:
                    2b:7c:09:52:c9:ff:b8:21:05:e1:c2:f0:fd:c5:61:
                    c4:e7:ed:65:3f:a4:40:90:b6:d7:27:3b:19:73:2a:
                    81:d2:ae:ac:2a:e9:ff:0f:ec:1a:03:80:a7:f3:60:
                    df:c5:e1:ef:6d:25:4c:a3:94:79:d2:76:a9:35:20:
                    26:3b:d2:5d:42:6e:ea:cc:b5:61:a9:0a:6a:47:45:
                    0d:63:70:a1:e0:e7:cc:6b:73:63:c0:6e:5c:63:44:
                    d3:83:2d:5f:ed:05:9b:a2:ad:b6:b1:4c:e2:3d:42:
                    21:f8:a7:35:55:7d:0d:87:7e:0d:9f:3c:c1:ba:c3:
                    f0:ba:22:a6:1b:3c:67:11:5a:c7:db:ef:9c:6b:23:
                    06:d2:3c:19:c2:1f:ec:56:eb:38:85:fd:50:a1:00:
                    28:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.128.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397960

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:31:61:21:60:07:01:9a:82:84:5e:94:11:c6:a1:a5:76:1d:
         88:dc:fd:94:50:cc:45:3f:55:72:58:51:7c:99:98:9e:23:e8:
         b7:c9:a6:f3:99:28:4e:46:c7:48:e9:4f:87:63:8b:3a:9d:7f:
         99:f9:42:63:e5:6a:0a:c3:d3:fa:62:20:cb:53:43:04:bf:16:
         ab:92:ee:b3:a6:27:e2:59:64:8b:e7:a7:e1:5c:f5:e6:28:c7:
         68:33:23:29:4b:81:e1:85:bf:97:f6:78:23:20:0f:63:68:14:
         6d:3c:c9:cf:58:7c:18:de:2e:53:3c:cf:b2:c6:db:80:23:d0:
         d3:45:f8:24:eb:52:12:f8:46:f7:d0:52:64:82:61:fd:38:71:
         46:f3:59:ed:08:e7:1d:85:75:7f:e0:9b:18:92:09:e0:b2:3d:
         3d:e9:cf:cc:91:65:90:a4:41:30:f4:13:47:39:c4:e3:48:7d:
         66:08:3d:1f:83:f4:f6:c2:c6:09:02:bf:10:f7:43:0e:0f:52:
         c7:ec:68:8e:64:0a:32:24:62:a6:8b:cd:6d:aa:c7:25:32:4f:
         24:7e:07:36:6c:e0:cc:d9:8b:71:eb:37:61:e8:7d:e6:52:99:
         5b:a3:73:1f:74:53:8d:b3:cd:4b:83:4f:6a:da:ff:88:40:fb:
         13:f3:0f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----