Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
File:                     007561fe-4b04-417a-b423-349b8b4b047d.cer (raw, json)
Hash identifier:          IPyqYKAhA5Dat7f3eQ/0YbUgrPElkm5mxT+oC+UqOEw=
Subject key identifier:   6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584439B42AD1280A4DE03F4D9B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 15 Dec 2023 17:03:14 +0000
Certificate not after:    Wed 11 Feb 2026 04:39:11 +0000
Subordinate resources:    AS: 19651
                          IP: 23.168.8.0/24
                          IP: 2602:f9ec::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:39:b4:2a:d1:28:0a:4d:e0:3f:4d:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec 15 17:03:14 2023 GMT
            Not After : Feb 11 04:39:11 2026 GMT
        Subject: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b6:25:70:d5:66:d0:74:2e:81:3c:ce:a2:45:
                    93:cb:8c:a1:bf:93:aa:58:11:43:28:b2:0a:99:62:
                    11:3d:17:e4:98:80:0b:78:b7:36:24:e5:50:ac:eb:
                    0e:cd:01:05:44:cd:c3:2c:93:c9:78:1e:6f:d6:d3:
                    22:b7:34:fc:23:b9:98:94:c4:26:d1:ff:e6:2b:94:
                    78:d0:2f:2c:de:fb:c8:a3:55:66:96:f8:4d:25:e1:
                    e1:d0:27:04:6f:71:01:ad:61:c7:8d:4c:22:74:94:
                    0a:4e:ee:40:cd:e2:53:61:e4:22:05:0a:6d:18:f5:
                    29:f5:4b:bc:d4:c9:28:aa:76:d1:8c:e4:13:74:ee:
                    64:2e:35:4f:cc:f8:a2:53:01:64:12:a9:41:05:e0:
                    0e:b2:ea:ac:aa:a9:33:19:fc:7e:27:d9:ca:e2:59:
                    43:74:33:59:ec:2e:ed:70:e6:2b:d4:78:3e:24:e7:
                    0e:14:78:4e:77:5f:c7:f9:6c:7e:d4:1a:87:75:25:
                    c6:28:cc:7f:f0:4b:86:82:ce:70:c9:cd:7e:9a:b9:
                    09:ef:06:ae:c9:6b:df:16:2d:06:02:2c:a7:1f:28:
                    bb:ad:15:8f:21:71:5b:b8:d6:37:1e:1c:b7:11:70:
                    97:90:e8:d6:2a:a2:d4:af:a6:fd:ca:59:a9:58:6a:
                    7d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.8.0/24
                IPv6:
                  2602:f9ec::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19651

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ad:90:99:0d:fc:2b:b5:54:12:14:8e:ab:61:f6:da:23:76:
         dc:cf:25:c5:86:f3:04:95:31:72:ad:0f:11:cc:ef:f5:88:53:
         61:17:7e:9f:b6:1d:c2:5c:f8:d2:ad:05:6c:5e:ce:dd:d7:e0:
         86:11:57:7b:47:36:ef:6a:11:99:d8:97:37:e4:7b:23:41:31:
         16:df:97:4f:da:9c:1a:01:71:fc:67:0e:d2:e3:fc:6e:98:60:
         ce:c7:74:88:63:78:63:42:ec:4d:e4:ce:11:d6:97:bf:a6:d2:
         7d:d6:5b:ea:5d:99:38:bb:ff:b9:0e:c8:1a:51:a0:28:c7:78:
         89:66:f3:18:a1:6d:8d:e3:c5:65:ca:64:d7:e0:dc:c4:16:8e:
         b0:ce:24:65:23:08:e1:87:80:74:d0:cb:4a:af:97:e7:2b:1a:
         66:e6:c1:da:d7:5b:cc:d0:50:ee:79:a5:19:05:53:a1:87:96:
         79:e1:2f:0e:1d:8c:d5:c4:52:e6:c8:e2:49:bd:3c:31:b2:ee:
         1c:74:fa:90:24:2a:56:e9:aa:b3:d3:0d:61:f9:21:59:9d:33:
         18:59:99:f4:5e:53:85:39:8c:a7:42:0b:27:12:d7:7a:b7:bf:
         59:fa:83:00:ec:41:f8:48:0f:d7:8c:d0:0d:20:03:46:29:b7:
         39:68:e4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----