Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/148ebbeb-181b-4ab5-a52f-06d2e140e40a.cer
File:                     148ebbeb-181b-4ab5-a52f-06d2e140e40a.cer (raw, json)
Hash identifier:          Bs3m0y32NnV/+yWcoJdoNROqIan39bUZW/zta1tLjkY=
Subject key identifier:   DC:77:F9:BD:7E:33:CC:59:10:6A:58:2E:0A:B8:5B:74:16:8B:65:7F
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843E8AEBD6B68850494F8C51900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/148ebbeb-181b-4ab5-a52f-06d2e140e40a/148ebbeb-181b-4ab5-a52f-06d2e140e40a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/148ebbeb-181b-4ab5-a52f-06d2e140e40a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 16 Nov 2023 16:31:49 +0000
Certificate not after:    Wed 18 Feb 2026 16:31:49 +0000
Subordinate resources:    AS: 54060
                          IP: 2620:a2::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e8:ae:bd:6b:68:85:04:94:f8:c5:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 16 16:31:49 2023 GMT
            Not After : Feb 18 16:31:49 2026 GMT
        Subject: CN=148ebbeb-181b-4ab5-a52f-06d2e140e40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d0:e0:d7:69:21:2a:46:91:25:0b:a1:e1:69:
                    a9:bc:c2:11:5b:9e:5c:cf:61:b3:7d:01:11:e0:e9:
                    32:0a:6c:ea:45:aa:26:a3:88:ed:35:88:1b:5f:09:
                    c9:22:07:60:f8:cf:cd:31:2d:44:d3:25:cf:53:78:
                    01:49:a8:23:95:41:04:4c:af:78:d7:b7:e6:0a:c6:
                    51:f1:e8:05:7c:d6:88:50:4e:e6:10:cb:ad:67:c5:
                    09:ff:5f:01:f8:8a:0e:90:13:6f:d9:04:44:80:42:
                    a7:32:78:ce:a5:07:ff:92:20:0b:14:39:65:a7:01:
                    24:63:78:b2:70:4e:e9:fb:40:d1:ad:55:c1:74:f8:
                    ea:21:29:f0:bc:a1:8e:b5:a0:52:90:3c:ca:1e:f0:
                    04:b9:61:15:6f:7b:af:4c:59:1e:d4:b2:d9:59:3b:
                    eb:f7:d8:ab:84:37:df:80:ff:86:61:8d:0f:cb:49:
                    92:d3:97:09:f2:7e:06:bb:dd:3d:4c:d6:2a:2b:0c:
                    51:81:73:b3:e4:41:95:99:5f:24:42:48:55:a8:1a:
                    8f:4b:62:c5:fe:7b:d8:fa:1b:da:fd:ce:18:ca:27:
                    25:a7:63:a1:cc:c4:3e:78:ac:41:a5:5e:d3:50:1a:
                    06:93:19:1a:ec:59:1f:3f:97:25:b9:59:5e:96:6d:
                    14:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:77:F9:BD:7E:33:CC:59:10:6A:58:2E:0A:B8:5B:74:16:8B:65:7F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/148ebbeb-181b-4ab5-a52f-06d2e140e40a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/148ebbeb-181b-4ab5-a52f-06d2e140e40a/148ebbeb-181b-4ab5-a52f-06d2e140e40a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a2::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54060

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ec:d1:22:8f:8e:b6:fc:2f:1b:55:6b:b4:15:14:d6:9b:f4:
         10:0d:f6:14:38:3e:0e:be:53:78:71:a2:a9:7e:95:36:b4:a5:
         ca:13:4c:47:a6:2a:cd:40:1d:32:48:7f:e5:d6:98:49:5c:a5:
         35:9a:72:12:c6:47:04:19:ad:a0:8c:c5:df:12:68:d5:ec:a0:
         3c:15:bd:ad:d1:ec:90:24:a3:24:6a:d0:c6:be:dc:b4:12:9e:
         9b:27:6c:e3:e2:73:79:0c:02:c8:36:01:e9:ab:56:9f:92:04:
         37:d7:95:22:f4:3a:d3:5c:97:82:9a:f6:2f:d6:fa:a5:88:bb:
         91:91:5f:91:50:bb:cb:60:97:76:4b:02:71:56:52:f9:80:3c:
         9c:3a:8a:da:2c:96:9d:c2:a4:d9:29:d7:ee:bf:05:a3:3b:cc:
         c5:03:f3:74:f5:29:aa:5c:80:81:91:2b:52:2f:ea:6e:6f:f3:
         31:f7:81:72:d2:a4:e3:7a:bf:28:c7:a8:0d:5c:75:71:c2:98:
         ec:84:7e:6a:33:79:42:3d:38:2a:d2:24:48:be:31:c7:a5:2a:
         2c:7d:7f:ef:e6:ec:6d:c9:cd:77:f5:c4:11:9e:10:71:7a:00:
         d6:25:93:09:ad:d5:26:9c:85:3d:7f:27:43:91:f9:05:9b:85:
         8c:3a:73:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----