Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer
File:                     1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer (raw, json)
Hash identifier:          /ia5t3Mzv3cJiFtBJM7oQHb001zF/JvwMbTYHpSnDKE=
Subject key identifier:   3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858440EC8182B38D3735799775E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 30 Nov 2023 08:03:37 +0000
Certificate not after:    Wed 04 Mar 2026 08:03:37 +0000
Subordinate resources:    IP: 23.145.136.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0e:c8:18:2b:38:d3:73:57:99:77:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 30 08:03:37 2023 GMT
            Not After : Mar  4 08:03:37 2026 GMT
        Subject: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:90:89:aa:16:0a:82:0b:15:07:81:3b:7e:d0:
                    d1:82:a4:90:6f:a2:fb:7f:4c:31:e7:f6:3c:74:d0:
                    43:66:bf:a1:89:8f:48:b0:58:f4:82:0b:a9:7b:74:
                    39:f4:ab:cd:83:22:4e:e3:9d:b8:9c:35:22:e1:91:
                    78:6e:bf:74:7d:46:21:42:b8:b9:51:b5:88:a5:9d:
                    2f:3c:48:06:f6:e6:c6:18:7a:f1:0c:ac:86:0c:9e:
                    65:1e:f5:74:a6:76:87:6a:06:88:35:3c:3f:ee:2f:
                    60:b6:69:df:5b:25:3d:37:56:80:a3:34:5e:96:5f:
                    a1:8d:bf:94:df:0c:3d:86:d1:68:10:f9:c1:80:e1:
                    99:7e:6f:c6:2c:2a:8f:38:0e:ef:e3:b3:11:f5:61:
                    09:fd:57:42:c3:48:e4:47:bf:db:fd:11:79:e2:85:
                    5f:4a:89:f3:c2:c2:bf:0f:a2:9e:f2:26:ac:84:1f:
                    c7:59:d1:a8:52:60:9f:40:46:9d:23:9e:cc:d3:f5:
                    ab:af:e2:c3:2f:62:e9:fc:a9:7f:ee:6a:0f:c1:0b:
                    8f:fc:a2:57:1d:d4:51:ec:bd:69:e9:09:5e:5e:f4:
                    57:14:63:75:08:04:e4:ad:ed:1a:b7:f9:38:1a:f8:
                    5c:29:21:f3:c4:02:15:a9:73:e9:0e:63:90:40:85:
                    73:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:5e:89:a0:af:42:09:f5:e8:97:fd:a9:27:a5:d0:ac:c5:66:
         1d:f5:2c:a9:cd:9c:89:49:05:7b:73:38:6b:91:b5:a6:26:32:
         6f:d9:be:f8:b4:71:d7:68:fb:32:b9:b5:b4:47:0a:25:9a:ec:
         b4:93:73:10:28:e1:08:b8:37:e4:b6:65:29:08:d9:f5:51:a2:
         f3:fa:5f:45:c3:af:d3:0e:e5:6c:22:92:7e:40:59:35:17:06:
         40:cc:fd:10:62:0a:6b:5c:fe:fb:06:7a:06:8a:39:eb:ad:ab:
         29:04:90:63:0f:aa:f6:05:4a:f7:8c:a4:fa:fa:4f:0b:f4:dd:
         78:bc:50:05:5c:85:91:06:e2:e9:97:49:0c:58:9d:31:27:c9:
         0c:45:15:62:5b:90:71:53:97:83:93:46:29:c3:82:91:ec:31:
         ec:1d:6d:41:0e:01:8e:8e:63:58:3f:7d:1d:d1:d7:79:ea:34:
         54:43:c5:ca:8b:d2:f2:d6:bb:af:25:06:0b:8e:b5:d5:7b:3c:
         dc:c1:51:11:99:4a:20:f8:f3:48:de:7e:80:57:cc:33:ec:21:
         f0:d0:a5:05:7b:74:83:96:79:a8:eb:2c:a0:c5:e9:f6:b7:56:
         4c:27:6e:21:c1:dd:00:85:be:4d:b6:3f:75:84:5c:09:93:66:
         f7:6d:3a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----