Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089.cer
File:                     11b225f7-40bc-41c6-8ed3-2e2845094089.cer (raw, json)
Hash identifier:          luiNdx26QnTobYPgavJIfdtQkv66AdcfqScxtozpLoo=
Subject key identifier:   E6:83:88:DD:0C:19:63:A6:36:CA:34:51:29:66:1C:2C:AE:0C:B5:33
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858439A6053CF34F37E77911EA500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/11b225f7-40bc-41c6-8ed3-2e2845094089.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 19 Oct 2023 15:20:46 +0000
Certificate not after:    Wed 21 Jan 2026 16:20:46 +0000
Subordinate resources:    AS: 46763
                          IP: 66.45.59.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:60:53:cf:34:f3:7e:77:91:1e:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 19 15:20:46 2023 GMT
            Not After : Jan 21 16:20:46 2026 GMT
        Subject: CN=11b225f7-40bc-41c6-8ed3-2e2845094089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:68:37:b8:90:6b:84:f1:65:c0:fa:d3:84:97:
                    33:9f:e9:20:6a:a7:47:fd:65:d8:f7:99:2a:d3:af:
                    e0:b3:bb:4b:b1:5b:d8:41:98:64:93:53:bb:15:25:
                    0f:7b:cc:69:eb:f7:18:08:79:0d:88:30:94:42:13:
                    ef:63:78:ba:e0:f1:05:e5:09:fb:09:ed:15:51:07:
                    d9:d9:30:16:a7:b7:c5:14:52:47:b2:f4:16:e4:14:
                    95:5e:00:d3:0f:9f:ee:ef:37:29:3a:c6:08:b1:3b:
                    e1:ff:2b:15:24:19:cb:92:79:94:70:da:c9:58:b3:
                    df:37:6d:cb:19:58:61:bc:f3:2e:c4:fe:57:fc:89:
                    8d:a3:b0:bc:48:62:64:f6:04:30:53:a9:b7:11:8a:
                    4b:b7:52:10:8d:d7:04:52:0f:66:03:b5:0b:fc:06:
                    38:d9:37:7c:dc:4f:83:0d:d0:51:0d:89:69:9d:07:
                    08:5f:41:14:b5:a5:f2:5d:6e:10:f1:a0:81:36:d2:
                    6f:e7:6a:7a:e0:90:d9:b0:98:f9:cb:cb:ab:5a:cf:
                    b0:42:3d:ab:d7:74:82:47:58:83:d6:d5:1c:3c:2d:
                    e2:ba:bd:1f:7a:08:14:e3:bc:fd:7c:1a:48:28:b5:
                    e4:4b:82:ad:a4:f2:a9:88:a5:00:51:fa:73:83:3b:
                    bb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:83:88:DD:0C:19:63:A6:36:CA:34:51:29:66:1C:2C:AE:0C:B5:33
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/11b225f7-40bc-41c6-8ed3-2e2845094089.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.59.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46763

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:31:1e:e8:53:89:3f:06:3c:9e:06:5f:f9:13:b5:e7:8b:a6:
         1d:45:57:be:d7:63:8c:b7:fa:66:5f:57:ec:b1:1d:71:06:af:
         17:1f:4e:b6:29:be:d3:a6:e7:11:fe:1e:cc:62:cd:23:1d:1b:
         82:25:d3:74:0e:16:4a:f8:43:ed:8b:ab:fc:46:48:e5:ad:4c:
         28:fc:06:d1:2e:86:e5:1e:fd:d0:a2:08:b3:75:d0:7a:5a:55:
         3b:4c:f6:59:0b:88:8b:f0:fa:54:19:c7:a5:fa:02:f4:ae:d2:
         15:46:5f:c6:b6:dd:91:3b:27:cc:21:11:d1:95:80:a2:4a:f0:
         fc:a0:e6:70:ab:d1:fb:ff:42:a8:7e:54:f4:b3:95:96:31:e5:
         35:3f:eb:cd:4d:8e:d9:67:54:72:2c:2a:89:eb:8e:f6:d4:f2:
         71:61:de:87:36:ea:57:4c:0c:5c:87:92:4b:d6:1f:51:44:02:
         14:87:d5:1a:be:d8:e8:34:62:59:db:13:68:82:63:b1:05:4d:
         43:f7:fe:00:ae:06:d2:56:80:db:5c:16:db:e0:78:11:b2:a3:
         7b:1f:01:1a:89:48:b8:b5:b8:0d:10:e5:b1:db:10:2b:e9:6a:
         56:04:00:ac:e7:a0:4f:2a:c4:80:4e:e2:6c:81:7c:1a:a9:19:
         80:38:df:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----