Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11c334f7-44cd-44e0-b27a-eee4f9a87c83.cer
File:                     11c334f7-44cd-44e0-b27a-eee4f9a87c83.cer (raw, json)
Hash identifier:          zW6r6kp48Muz5+9/uVtyhDf38bsu0olE350MWh6n20w=
Subject key identifier:   37:63:27:47:C7:0F:E5:40:CE:69:7C:FA:B8:2A:71:AA:55:0D:64:A7
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843E6040758EE91A0A854D66C40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11c334f7-44cd-44e0-b27a-eee4f9a87c83/11c334f7-44cd-44e0-b27a-eee4f9a87c83.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11c334f7-44cd-44e0-b27a-eee4f9a87c83/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 15 Nov 2023 17:36:14 +0000
Certificate not after:    Tue 17 Feb 2026 17:36:14 +0000
Subordinate resources:    AS: 6954
                          IP: 207.166.192.0/19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e6:04:07:58:ee:91:a0:a8:54:d6:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 15 17:36:14 2023 GMT
            Not After : Feb 17 17:36:14 2026 GMT
        Subject: CN=11c334f7-44cd-44e0-b27a-eee4f9a87c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:77:df:54:4f:a6:4f:de:f3:9c:d2:61:4f:bd:
                    8b:e4:6b:c5:61:a7:3f:5f:b8:38:f2:3b:c6:1e:fd:
                    41:04:d6:ea:6e:cf:6f:7d:e6:aa:d2:f5:38:1c:64:
                    62:f8:1c:ed:de:bd:8e:ce:37:8e:f0:ff:b3:86:ac:
                    c3:42:97:26:5f:76:98:99:cd:12:e6:94:27:7d:70:
                    3b:7c:42:0c:78:2a:14:43:8c:47:f0:e9:8f:55:8f:
                    3c:67:d2:47:57:61:59:85:7f:b4:d1:82:73:68:94:
                    94:d1:6c:58:2f:f6:bf:8c:6b:ab:fd:e0:0e:b9:e0:
                    d8:ea:de:58:51:40:ea:aa:89:e5:27:26:29:da:b0:
                    10:68:78:03:b7:c9:13:cc:ac:f9:ce:e3:c3:85:53:
                    32:e8:23:a8:f0:a4:d7:2a:a7:42:75:50:f6:cf:9a:
                    50:0d:51:b8:22:c1:80:8b:c3:62:8d:ee:fd:de:52:
                    6d:9c:3e:3d:18:9f:24:e8:cf:b7:3b:b1:4a:63:c4:
                    20:03:57:1e:a5:a7:fb:ee:a9:9d:9e:41:f1:9b:5c:
                    75:66:86:1b:3f:3e:2c:44:49:22:fd:17:b3:a4:6e:
                    68:64:27:e5:30:65:92:fe:d2:75:42:c4:a3:90:c1:
                    d3:5f:61:83:95:c0:be:cc:fe:0a:be:dd:03:75:7b:
                    ca:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:63:27:47:C7:0F:E5:40:CE:69:7C:FA:B8:2A:71:AA:55:0D:64:A7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11c334f7-44cd-44e0-b27a-eee4f9a87c83/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11c334f7-44cd-44e0-b27a-eee4f9a87c83/11c334f7-44cd-44e0-b27a-eee4f9a87c83.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.166.192.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6954

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:70:78:a3:bd:ca:a4:31:5a:c5:e9:a6:f8:81:04:d9:01:7f:
         b2:88:8e:b5:b5:16:5f:7a:e0:d5:ce:76:a3:48:2e:8c:74:32:
         31:79:c0:f2:1a:5f:43:49:2e:f6:24:cc:b7:c2:1b:0c:2d:8f:
         1e:f8:92:20:3e:ce:3c:2b:8d:5b:90:de:cf:08:b5:35:90:e1:
         90:41:f0:b3:34:39:d2:50:6e:ac:33:b6:63:92:0a:82:cc:a8:
         13:b3:98:0e:09:30:f0:9b:bb:31:d5:35:97:6a:49:c4:60:05:
         ef:f6:49:84:ea:f4:47:56:09:df:55:a8:f0:44:03:4a:98:6d:
         41:fd:73:fd:44:83:24:0b:7d:d1:f4:d4:8c:92:58:c5:10:e9:
         a8:5f:f1:7c:99:03:a8:17:ba:11:24:15:cb:83:88:44:4d:52:
         54:2c:f9:78:62:79:9c:7a:d9:cf:5a:dd:df:4d:c6:2c:2e:10:
         1c:e1:67:5d:cf:88:13:44:d8:74:5f:d8:04:72:22:92:07:ba:
         3d:84:62:89:d9:f7:91:31:5f:88:27:b1:c5:c1:fe:fb:1c:93:
         e3:70:2e:60:f6:76:9e:e2:11:fa:54:7e:3c:e0:90:99:65:82:
         a0:63:f9:d0:6a:f7:45:03:91:fb:29:09:4c:6d:23:7a:dc:ba:
         bb:d4:5d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----