Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer
File:                     1f1cdae5-b041-4993-963d-6f855f74efa1.cer (raw, json)
Hash identifier:          siUmG5cL2or0pTX+tkCY9rYwlDY+d5lbvl+2nqbGj/Y=
Subject key identifier:   3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858444ABEBA224EC85C606DB2D780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 21 Dec 2023 19:33:15 +0000
Certificate not after:    Fri 06 Mar 2026 10:13:33 +0000
Subordinate resources:    AS: 54082
                          IP: 23.168.104.0/24
                          IP: 2607:8040::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:4a:be:ba:22:4e:c8:5c:60:6d:b2:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec 21 19:33:15 2023 GMT
            Not After : Mar  6 10:13:33 2026 GMT
        Subject: CN=1f1cdae5-b041-4993-963d-6f855f74efa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e0:ad:32:17:ab:9f:a8:4f:1a:1e:f1:65:7e:
                    6f:ce:8b:96:a3:64:81:fd:4f:e4:91:c8:74:2e:a4:
                    83:58:53:5c:cc:4c:2c:a2:22:5b:e5:f4:9a:06:d1:
                    81:28:dd:e8:69:5d:ba:41:36:f9:db:e7:2c:76:85:
                    aa:2f:9e:07:4d:72:4f:27:cd:f6:91:0b:a1:3b:4a:
                    00:b1:a4:b9:68:a8:be:e6:8b:c2:13:7a:6d:22:7b:
                    d0:19:0d:ba:b4:71:fa:32:08:ca:39:8f:b5:a6:6f:
                    c2:56:87:0c:6b:e5:99:f8:da:88:7c:91:f8:e1:bf:
                    b2:28:20:38:66:30:64:fa:ea:fe:95:02:02:ba:af:
                    15:3c:74:2c:00:51:05:99:76:62:b5:7c:d2:94:92:
                    42:e5:d6:16:c4:3a:50:46:7c:6a:2d:23:63:1d:5b:
                    7c:d1:2d:18:9e:34:02:a8:e6:e8:71:eb:b5:2d:8b:
                    c6:53:a8:46:8b:69:e6:df:a6:bc:11:03:84:7a:64:
                    50:a6:15:25:8d:d7:26:be:18:d2:db:bd:52:d5:95:
                    4a:50:ef:48:19:93:16:bc:6b:78:17:ea:70:ad:3b:
                    23:93:40:55:81:ea:de:b4:be:bd:1e:a4:51:cd:43:
                    12:c0:6e:68:8f:45:a6:97:1c:68:8c:6f:c6:39:8f:
                    ca:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.104.0/24
                IPv6:
                  2607:8040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54082

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ca:c3:3f:79:24:93:32:46:a7:50:d7:34:82:a4:68:82:1e:
         a4:06:09:8c:bb:0b:c4:b6:01:bc:39:ef:22:9a:6d:73:47:b6:
         6c:44:ec:46:3e:c2:e8:5a:01:82:d8:6f:df:2e:65:0a:59:b6:
         95:3c:3e:64:35:e9:9c:05:26:6d:d7:f5:72:4e:0f:0a:65:16:
         c0:bd:48:e4:12:61:3b:37:af:3c:0d:19:17:24:8e:8a:38:40:
         bd:de:b4:eb:48:72:ea:56:26:60:cd:90:4a:85:b8:71:a9:19:
         48:9f:4e:57:4a:66:29:7a:a0:5a:11:e6:ce:9e:c2:a0:3e:7b:
         17:0a:ac:5e:14:29:a1:3b:a7:aa:c9:71:f0:46:9d:64:48:2e:
         fb:f5:0b:d7:25:c0:9a:63:d3:2e:b6:e2:bc:9a:de:f7:c7:d7:
         92:4b:5c:f7:94:81:77:b0:95:43:69:c4:33:32:39:53:e6:58:
         3e:d9:c0:28:99:1d:33:72:00:6e:f9:39:7a:bf:50:f0:6a:20:
         35:97:1b:87:d6:34:a6:4f:57:72:40:e3:51:19:52:ea:c4:c7:
         a8:3b:a1:cc:35:80:92:49:40:ed:3b:c0:10:68:fd:71:88:c5:
         de:bc:82:70:a7:d6:04:c3:ea:4d:1a:8f:9e:f7:2c:b4:37:34:
         c5:63:19:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----