Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
File:                     0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer (raw, json)
Hash identifier:          Ndt1NtsAE4MV6hGFe4Tc3if3xlpZTpfNPriRk/p1RX4=
Subject key identifier:   75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858434FB22A98CCF03F52C9A9A880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 22 Sep 2023 21:20:03 +0000
Certificate not after:    Thu 25 Dec 2025 22:20:03 +0000
Subordinate resources:    AS: 26455
                          AS: 395250
                          IP: 158.117.0.0/16
                          IP: 2620:197::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:4f:b2:2a:98:cc:f0:3f:52:c9:a9:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Sep 22 21:20:03 2023 GMT
            Not After : Dec 25 22:20:03 2025 GMT
        Subject: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:db:ca:ba:76:33:61:02:08:ad:8f:eb:c3:98:
                    15:47:cf:be:5b:8f:a3:74:84:60:ba:df:28:74:02:
                    f4:1a:05:22:63:65:20:99:77:3b:a0:69:97:5d:6f:
                    18:4c:54:27:fc:b5:3f:e6:52:36:f6:30:cd:d7:33:
                    85:f1:9a:92:4b:b8:e6:bf:3a:15:b2:29:6f:a8:9e:
                    5e:f2:54:75:9c:bc:2c:f6:e1:8d:e1:0e:01:ee:14:
                    66:d3:5f:d5:eb:42:ff:b3:3f:2b:85:01:96:8f:eb:
                    27:b5:9e:dc:9d:8c:3c:ab:08:dc:51:76:77:d8:bd:
                    79:ff:ab:b6:f7:af:d3:5d:77:69:ea:31:15:c8:a2:
                    00:a4:1a:0f:8a:5b:de:7c:ee:f9:14:b1:19:5a:d0:
                    4d:81:4c:22:8f:8f:4a:38:2e:02:ab:9c:10:e4:b3:
                    97:0f:6e:bf:3f:77:17:4a:c3:c7:be:46:ba:0b:24:
                    d2:f3:7c:da:74:4a:3f:6e:1e:fd:43:3b:92:55:1a:
                    7b:8b:a4:13:b4:22:a9:b2:63:ae:56:15:4e:67:99:
                    e6:7a:d0:1f:a4:f8:50:81:6c:2f:02:ad:92:b4:80:
                    dc:e8:cf:81:af:f1:a0:e4:c6:4c:c9:bc:ff:99:e0:
                    6c:10:3f:be:c1:16:c9:77:59:9b:33:12:aa:db:79:
                    2d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.117.0.0/16
                IPv6:
                  2620:197::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26455
                  395250

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:fc:c2:c7:bb:c7:37:0d:81:ad:c7:2e:90:a2:ed:50:bf:92:
         88:50:67:52:b8:70:cc:a9:3f:71:a3:1d:71:46:bd:d6:a1:56:
         2e:c5:09:e7:5f:70:3e:f9:44:48:35:1e:40:71:7b:5c:c2:df:
         cd:57:63:fb:5e:4c:7c:82:fd:3a:73:da:f2:8d:f1:e5:db:05:
         7f:ea:3d:08:fc:2e:d7:37:4c:9e:21:4c:57:7d:c6:1d:a0:e4:
         87:56:40:a9:6b:38:db:88:3d:11:6b:91:79:5f:cc:3a:b8:09:
         75:aa:87:e6:ef:d9:f1:90:69:66:e1:d9:2a:57:63:e6:d6:8d:
         77:df:4d:37:02:58:2f:cf:8b:73:84:ea:da:54:65:b6:47:8d:
         e8:92:7d:29:64:bb:e0:e5:1c:f8:e8:ee:ab:e1:8d:36:73:74:
         2a:02:f2:52:20:e4:ed:e6:88:fd:a9:57:f0:1d:48:f2:92:1d:
         12:a5:f6:46:75:8e:c5:bf:46:93:03:11:50:c8:9a:30:12:d3:
         f1:76:5b:99:c5:ac:50:bf:a6:85:ca:04:65:ee:0a:cf:2f:76:
         58:22:be:a0:80:24:1a:7b:f9:3c:66:b6:12:c7:6e:12:74:44:
         4c:81:48:7e:4a:5c:5d:bf:05:e8:24:aa:fc:3a:f7:bf:2b:b0:
         e4:73:a1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----