Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af.cer
File:                     1dc788a1-457a-433f-af51-0da74008d8af.cer (raw, json)
Hash identifier:          PqKWm1WM2Ubf8vY0/VH6XZo/f3JpYQ/G7wiYfztCWRU=
Subject key identifier:   9A:BF:69:62:4E:C1:EF:B5:92:7D:86:F4:71:F3:B6:02:2D:42:A6:41
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843C3DEA4D3142A6F3416B164F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/1dc788a1-457a-433f-af51-0da74008d8af.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 03 Nov 2023 12:03:26 +0000
Certificate not after:    Thu 05 Feb 2026 13:03:26 +0000
Subordinate resources:    AS: 53974
                          IP: 50.93.192.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:c3:de:a4:d3:14:2a:6f:34:16:b1:64:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov  3 12:03:26 2023 GMT
            Not After : Feb  5 13:03:26 2026 GMT
        Subject: CN=1dc788a1-457a-433f-af51-0da74008d8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:75:76:33:b0:2a:86:3d:5a:e3:d8:74:27:5a:
                    12:51:93:b1:66:a4:e6:6b:cc:4d:17:da:1f:0b:04:
                    8b:17:85:09:ef:9b:8f:ca:96:bf:d3:fa:de:71:e7:
                    fc:69:a9:bc:1c:95:d7:84:9f:f4:4f:65:72:55:1f:
                    eb:cd:8c:ca:c0:f6:9a:02:52:ba:61:f0:3b:a0:d4:
                    3b:39:57:31:69:30:44:84:a4:6f:a0:a5:b5:db:c1:
                    85:28:56:85:5f:7b:a3:f6:af:6c:aa:35:a7:4d:38:
                    95:da:49:c6:f3:71:c9:c1:2f:af:7a:15:a0:ec:b0:
                    d5:ee:33:8a:16:6d:f5:21:cb:ba:49:4f:1e:3c:0f:
                    8b:58:ec:3c:e3:b4:e3:22:fb:f8:b8:cd:2c:c0:8a:
                    53:9d:78:d5:e6:40:2a:cc:61:16:49:2c:25:e5:e4:
                    ca:78:9f:d2:5b:d0:94:6a:80:c4:6c:8b:e1:53:9e:
                    9b:21:33:96:cb:ba:cd:bb:9c:36:1f:31:8a:59:46:
                    6f:10:2b:30:97:41:6b:6e:ff:8d:8d:c0:91:0c:e7:
                    a6:cc:d5:41:90:f7:4c:e0:11:6f:70:f9:fe:d5:72:
                    99:88:2e:b9:b3:49:ad:7b:ae:52:78:65:ef:4d:51:
                    90:94:5a:f4:b8:36:8a:4c:75:75:df:6c:84:71:96:
                    a8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BF:69:62:4E:C1:EF:B5:92:7D:86:F4:71:F3:B6:02:2D:42:A6:41
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/1dc788a1-457a-433f-af51-0da74008d8af.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.93.192.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53974

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:46:1d:2d:dc:57:98:1e:5d:23:3c:a9:c9:99:5c:c3:f8:19:
         5e:ef:78:c5:d0:8a:a8:71:a9:3e:66:f2:40:7b:ba:2a:46:53:
         c0:82:e0:a1:6d:12:f6:dd:bc:cb:64:67:48:e7:2d:d7:a7:0b:
         2b:e5:da:41:8b:c6:81:0c:b6:d6:cb:10:8c:31:65:ca:ec:75:
         85:e3:f0:29:6e:6f:ef:95:b7:10:18:f3:09:cc:a8:03:ee:c9:
         89:eb:49:c9:a2:d7:4b:58:8a:ae:61:7c:48:bf:d2:67:0a:9a:
         0a:59:89:ea:7e:7b:27:b1:0c:e8:e0:57:80:bc:db:a3:ec:b0:
         b1:d7:dd:67:eb:e8:bf:09:27:91:b4:6c:b6:89:36:70:e8:5b:
         96:fc:79:ad:6d:bc:80:08:43:37:bd:37:bf:6c:dc:25:c3:ec:
         35:60:c7:91:8f:47:a3:b6:2b:2f:99:c2:db:91:03:d8:74:a0:
         88:a3:c1:c3:71:71:d6:1a:2b:d8:7e:30:b3:1b:c8:72:75:fd:
         01:f7:c8:c2:77:7a:72:ed:e8:a2:e5:dd:c7:c9:98:17:f3:bc:
         45:e5:ed:06:2d:da:3e:d5:b9:4c:e3:ea:90:71:48:dc:63:3a:
         25:9e:70:aa:c2:d6:a6:f7:f0:66:1e:20:3d:a8:62:ab:1d:1f:
         24:20:db:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----