Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46.cer
File:                     15a1c5cd-d60b-4670-ad8d-21856855ee46.cer (raw, json)
Hash identifier:          j4bi5HHnJ7fodb9fflYND+u+Mpk5+gdKkWyl9h/3BZU=
Subject key identifier:   A0:09:A6:B2:B2:82:AE:6A:B6:40:79:2F:94:99:80:AC:9D:61:89:F3
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843E6C07EEFDBF0AA0DCECC6660
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/15a1c5cd-d60b-4670-ad8d-21856855ee46.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 15 Nov 2023 23:55:59 +0000
Certificate not after:    Tue 17 Feb 2026 23:55:59 +0000
Subordinate resources:    AS: 400164
                          IP: 65.75.212.0/22
                          IP: 2606:8ac0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e6:c0:7e:ef:db:f0:aa:0d:ce:cc:66:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 15 23:55:59 2023 GMT
            Not After : Feb 17 23:55:59 2026 GMT
        Subject: CN=15a1c5cd-d60b-4670-ad8d-21856855ee46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:69:8f:9d:e4:7d:10:dc:40:1d:f1:b8:bf:
                    6b:f4:9d:7c:9e:2e:d7:68:20:cb:ca:67:c1:e1:8e:
                    10:bd:55:e7:5e:6d:3b:33:37:aa:4f:80:45:27:3f:
                    ab:ba:35:e5:9d:1e:82:57:18:70:29:2e:d1:75:45:
                    fd:db:c7:cc:65:e9:af:e0:69:00:24:bd:fd:63:81:
                    d3:da:34:64:dc:41:4c:c2:bc:9f:bb:46:ca:93:41:
                    eb:45:6f:19:06:c3:69:d2:a1:73:0e:74:ba:3b:91:
                    16:5e:7c:5a:55:1c:c4:c9:fa:13:b4:48:18:30:50:
                    ae:84:44:92:ea:c4:b8:fe:4f:77:69:de:51:3e:10:
                    f1:96:b2:43:ff:fe:7a:e0:d5:cb:bc:b6:11:b1:5c:
                    1b:62:29:d4:85:49:c5:75:ba:89:35:b7:31:b0:ba:
                    f6:82:c0:72:f9:27:88:24:d2:ad:30:96:c0:fd:73:
                    dc:b4:c6:a0:d5:1e:4f:7c:5c:67:02:b8:72:8f:fb:
                    8c:93:c3:3d:f6:e5:67:36:21:11:1b:34:36:fd:61:
                    36:00:bd:55:c0:70:c7:6d:3d:f5:fa:26:84:76:1b:
                    48:9a:68:e7:25:5a:e2:6a:3d:ed:93:ed:e0:5f:b4:
                    5b:0f:6c:13:08:9b:af:e1:09:9c:f1:17:86:14:dd:
                    b4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:09:A6:B2:B2:82:AE:6A:B6:40:79:2F:94:99:80:AC:9D:61:89:F3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/15a1c5cd-d60b-4670-ad8d-21856855ee46.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.212.0/22
                IPv6:
                  2606:8ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400164

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:d1:ad:9b:28:62:91:66:f3:22:2f:2b:86:78:48:b6:72:20:
         3f:43:80:50:78:8e:52:d7:f0:9e:83:cf:e4:99:91:75:c2:f7:
         36:aa:44:66:d6:ba:61:35:2e:03:ce:d4:59:dc:12:51:62:4e:
         71:17:3a:93:ab:0a:6d:89:06:e7:6c:81:39:85:30:50:cd:f4:
         0e:a3:2a:b1:e6:37:66:98:52:1d:04:23:38:36:3d:2f:b7:59:
         8d:e4:a7:97:fe:f2:43:e0:b9:d0:3a:59:98:dc:58:3f:e4:89:
         52:e4:99:86:7d:40:98:9a:1c:22:6a:31:ad:2f:e3:33:50:c3:
         4a:61:2c:ee:fa:81:d8:25:9d:5f:1f:5f:ff:b7:47:f5:24:34:
         7f:fe:18:fb:9f:c1:c2:e3:1a:fe:52:28:b2:02:ff:79:a9:1c:
         8d:77:29:64:f8:72:3f:7b:20:d6:35:a8:64:c7:2d:0c:15:b5:
         82:c2:06:b1:c9:92:d8:68:83:80:ee:b3:8e:3a:97:24:b9:15:
         02:a9:3e:a6:a7:2e:13:4e:94:3c:4b:45:7a:31:e0:27:42:eb:
         47:5b:75:ed:83:40:96:e7:39:87:55:2d:17:53:ac:73:76:74:
         1f:be:93:73:7f:f9:5b:6f:09:34:a7:3f:a0:15:3f:b4:df:e2:
         cf:0f:19:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----