Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3.cer
File:                     1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3.cer (raw, json)
Hash identifier:          kfl09HGVqpcx27fqxXckJ93A1fewxFdTMp0AHbdBokw=
Subject key identifier:   F6:6D:E5:BA:E9:79:27:A3:36:56:95:B1:80:7B:AA:91:04:C3:FA:47
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858445B3A03B93499074561C8C5A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 27 Dec 2023 17:14:35 +0000
Certificate not after:    Tue 31 Mar 2026 16:14:35 +0000
Subordinate resources:    AS: 15199
                          IP: 2620:b8:8000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:5b:3a:03:b9:34:99:07:45:61:c8:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec 27 17:14:35 2023 GMT
            Not After : Mar 31 16:14:35 2026 GMT
        Subject: CN=1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f0:92:f0:1f:42:02:25:fa:9b:a7:cf:60:ac:
                    67:39:54:85:1c:5d:04:11:4b:c7:6e:b0:18:eb:31:
                    b8:74:bb:1d:cc:53:05:37:2d:7e:ca:9e:60:26:8c:
                    0e:d7:d8:41:ec:71:0e:5e:81:5b:b7:7c:fd:28:5c:
                    2f:dc:16:90:b7:f5:f8:1f:02:de:6a:1d:b5:e1:a9:
                    03:f0:d4:56:c2:2e:c4:0f:97:3e:5c:f8:6a:7a:c2:
                    58:e0:6a:2e:32:cd:ed:44:39:cb:bf:c8:01:4f:7c:
                    f9:78:e3:9b:75:c7:bb:f4:d1:a5:ca:06:bf:8a:8e:
                    93:46:4f:94:f4:38:1d:88:9b:51:f1:4a:be:4c:ae:
                    a8:67:47:11:02:d4:be:61:5f:47:e6:95:84:16:87:
                    e6:fb:44:7a:04:73:9f:6f:da:2e:ca:11:be:24:5c:
                    fd:a5:c4:a3:11:49:93:af:78:7b:af:c0:26:52:fb:
                    ae:9a:55:35:a8:1f:01:35:4b:51:72:a0:22:0a:aa:
                    41:c5:e0:6b:73:47:5c:35:58:af:b0:9b:a9:a5:63:
                    e4:02:66:b8:a9:34:b2:77:9f:a2:95:8b:76:09:d2:
                    34:0f:f2:d6:32:b1:b6:29:ba:db:6f:07:bf:7d:1a:
                    a3:82:f4:e6:46:0b:0e:a3:36:3d:18:60:3f:70:8a:
                    7e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6D:E5:BA:E9:79:27:A3:36:56:95:B1:80:7B:AA:91:04:C3:FA:47
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b8:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15199

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:99:19:43:14:79:56:04:af:a8:54:bb:2d:91:e2:f8:cc:4c:
         95:81:cd:0a:ee:fc:30:04:24:e4:a2:05:67:cb:0e:66:f6:e2:
         56:17:28:0a:b1:b2:8e:e1:cb:67:d0:ae:73:22:d1:52:00:c2:
         60:d4:d8:c2:da:6d:17:9a:f6:0b:33:6f:9b:d2:bb:da:09:e5:
         75:14:a3:01:aa:72:95:4c:8b:bb:d5:00:b1:56:72:f5:67:17:
         50:9c:41:ec:29:4c:f1:e0:3e:42:43:90:6c:4d:b9:94:12:ec:
         06:7a:27:dd:d7:e9:4d:8f:68:e4:59:84:6b:08:cc:db:eb:96:
         33:2f:34:8a:01:39:5c:72:72:41:8c:70:51:9b:31:78:e9:7c:
         43:d4:30:5b:7a:ef:00:8a:34:58:87:ee:eb:0c:91:0c:96:bd:
         3a:7e:e6:69:fd:cb:0a:f7:a3:06:85:65:0e:cb:25:45:0f:76:
         cd:d7:cc:ff:cf:24:83:36:8b:5a:0d:8c:bb:12:88:ea:79:92:
         b3:c0:e9:05:83:83:0a:ed:ea:c5:36:aa:35:ee:2a:ac:c6:6d:
         e6:46:0d:f4:58:27:be:ba:77:38:5f:64:67:02:14:e8:28:2c:
         bf:e1:ae:a8:d1:fe:ac:2c:d9:49:cb:f5:1e:8e:72:eb:d5:07:
         4e:06:87:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----