Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30.cer
File:                     19dbf4a8-2a2a-4402-b66e-75dd65b4ef30.cer (raw, json)
Hash identifier:          jc2KJMg5hgTzkTRljStJFM+oq8vF4MiGOTI/VmR0bCI=
Subject key identifier:   88:27:1E:5B:E5:35:7B:34:A2:A2:BD:76:AE:CF:0F:5B:48:DB:6D:86
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858445DAAC8562BBD20DEC574D300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 28 Dec 2023 14:13:25 +0000
Certificate not after:    Wed 01 Apr 2026 13:13:25 +0000
Subordinate resources:    IP: 205.233.18.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:5d:aa:c8:56:2b:bd:20:de:c5:74:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec 28 14:13:25 2023 GMT
            Not After : Apr  1 13:13:25 2026 GMT
        Subject: CN=19dbf4a8-2a2a-4402-b66e-75dd65b4ef30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:36:5e:4b:76:17:89:ff:8e:11:f6:b4:39:
                    d2:8b:36:74:0a:68:03:be:1a:33:74:c6:6e:4a:ab:
                    4d:78:a2:f7:9c:98:13:1e:4d:2b:24:d2:a2:0a:4f:
                    f1:2f:37:28:f3:8f:45:fe:2d:98:4e:d2:ec:ae:27:
                    86:39:01:53:86:3b:84:c1:75:d3:ac:80:b0:cd:47:
                    99:44:ba:68:98:8c:d4:21:36:71:91:04:0a:76:f9:
                    a1:e3:54:bf:cd:81:35:d5:de:f1:ab:1f:87:b3:96:
                    e8:58:91:22:98:f9:9f:0c:38:24:2c:5c:6a:13:60:
                    cc:08:4f:f8:66:81:48:3a:df:78:8c:f1:87:e2:f1:
                    ad:68:3e:8e:f2:67:1d:5b:59:20:b2:e4:8f:d5:04:
                    4f:ea:76:d8:54:d5:05:ac:b3:ca:98:ff:6e:a3:d5:
                    e8:fa:b4:9e:e6:7c:fc:e1:f8:32:cc:70:44:ba:43:
                    e8:90:fd:56:2b:42:0a:bf:7c:ac:78:b4:ea:ea:49:
                    63:07:33:64:e3:e4:cb:e7:f1:ea:df:72:92:83:45:
                    18:01:02:0b:21:97:63:c4:ad:7b:9e:2d:cf:78:a0:
                    1a:6d:4c:b6:82:a0:e5:97:a7:cb:41:a3:95:d5:53:
                    14:0e:67:6d:31:98:a0:bb:81:f7:e5:10:a3:02:26:
                    ec:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:27:1E:5B:E5:35:7B:34:A2:A2:BD:76:AE:CF:0F:5B:48:DB:6D:86
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:3e:8c:74:2e:fb:8a:ad:af:80:c5:ec:ed:47:7c:04:0e:97:
         9d:ba:05:ac:18:0b:9a:f1:80:5b:d1:73:a7:bf:b7:57:4b:c2:
         63:69:00:bb:21:0a:96:21:14:cd:8f:6a:de:69:5a:94:8b:22:
         13:36:40:32:8f:a0:76:bf:65:6d:cb:a9:2e:b3:40:be:f8:bf:
         ce:13:89:77:0f:83:94:e1:33:35:5c:35:1b:9d:28:93:4d:cc:
         68:1f:a2:37:05:ae:b2:03:77:ba:3c:a7:98:de:c1:63:42:c2:
         39:7c:79:59:31:a9:e5:73:7d:75:e9:32:f5:81:cd:c4:7a:0f:
         ed:c4:31:18:a1:c7:e8:40:cd:13:9c:15:6f:67:4f:66:3a:89:
         5d:ca:d6:59:21:a1:39:d9:5e:36:fc:b4:86:7d:62:e8:f3:97:
         8c:6c:d5:b3:22:9a:b0:7d:6c:cf:62:c3:f4:59:68:d4:1c:ec:
         16:12:66:f2:bb:e8:a0:b9:73:45:e3:78:b8:1a:f9:ba:78:19:
         ac:0d:60:9e:05:7b:2e:b4:5b:61:df:0b:e8:88:0c:c6:2a:0c:
         3a:62:81:18:14:90:8e:07:55:5e:50:7e:c0:c1:6a:e1:18:fb:
         fd:69:9f:c4:d4:2e:41:38:e7:26:94:8b:d1:c8:35:68:c6:09:
         22:28:ad:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----