Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2263e0ff-dbcf-4412-972c-090f783da4c5.cer
File:                     2263e0ff-dbcf-4412-972c-090f783da4c5.cer (raw, json)
Hash identifier:          lH3YPZCvY9QCzLEqGbvJFGHv8tJGWlDDQqLYKDOLw8k=
Subject key identifier:   A8:25:7C:46:DC:91:C7:FE:2E:E2:7A:BF:2D:56:54:E3:7D:98:A4:16
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584436B6DD2A69E5496EC75DE8E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2263e0ff-dbcf-4412-972c-090f783da4c5/2263e0ff-dbcf-4412-972c-090f783da4c5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2263e0ff-dbcf-4412-972c-090f783da4c5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 14 Dec 2023 15:21:14 +0000
Certificate not after:    Mon 12 Jan 2026 20:48:32 +0000
Subordinate resources:    IP: 205.236.42.0/24
                          IP: 2620:68:8000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:36:b6:dd:2a:69:e5:49:6e:c7:5d:e8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec 14 15:21:14 2023 GMT
            Not After : Jan 12 20:48:32 2026 GMT
        Subject: CN=2263e0ff-dbcf-4412-972c-090f783da4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bb:9c:a0:4a:2f:1f:57:93:57:15:ee:58:14:
                    14:cf:92:08:f8:89:93:49:2d:e5:1c:ac:d8:39:8b:
                    5c:8e:43:2a:03:5c:e8:43:51:3e:67:57:69:5c:a7:
                    25:65:41:9c:78:26:d4:a3:6e:ad:27:98:cf:3c:5c:
                    62:4b:d4:9a:bd:3d:d5:c1:0c:c3:99:b0:48:38:27:
                    ef:c6:84:fc:45:1c:44:ef:1f:4c:c7:55:75:1d:91:
                    a2:51:aa:10:b7:d4:3d:72:03:29:a6:43:13:8a:86:
                    57:55:1b:5e:e4:c0:9b:61:22:9f:c2:a0:d2:ad:f7:
                    cb:e0:41:f0:f8:c0:41:69:ba:26:63:4b:c9:e9:f3:
                    b4:75:9d:9b:77:9c:be:eb:f1:8d:e2:f0:98:77:64:
                    df:0f:1f:e0:20:cf:f4:ac:25:95:a8:8c:69:e2:49:
                    ed:54:5f:f8:72:50:45:9d:f7:2a:3a:d1:cd:8b:87:
                    18:25:c8:40:84:9d:14:ad:08:9a:fe:96:2a:ea:c6:
                    bc:68:2f:01:80:00:4f:df:ba:bb:b6:fe:5e:34:e3:
                    8a:0e:df:2d:e6:b4:18:c7:b2:fe:29:d4:0b:da:e1:
                    81:03:a1:d2:92:06:f9:d3:b1:4d:f0:dd:80:a7:f5:
                    83:cb:d8:cf:a4:c3:ea:63:26:3b:a7:f1:17:d5:e1:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:25:7C:46:DC:91:C7:FE:2E:E2:7A:BF:2D:56:54:E3:7D:98:A4:16
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2263e0ff-dbcf-4412-972c-090f783da4c5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2263e0ff-dbcf-4412-972c-090f783da4c5/2263e0ff-dbcf-4412-972c-090f783da4c5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.42.0/24
                IPv6:
                  2620:68:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:5a:ab:bb:7f:eb:0f:45:70:89:2e:2c:f3:0d:a3:23:69:00:
         49:94:a0:3d:51:40:41:50:b9:bd:ce:05:49:97:af:60:17:02:
         8b:19:19:e3:f5:02:0f:1a:8c:23:e3:af:d2:e8:c5:8d:1d:04:
         f4:07:15:dd:ce:3c:9b:f9:7d:74:4d:99:fc:4a:4a:5f:f3:7d:
         e7:8c:43:83:64:5d:1d:b9:e3:41:ea:32:b3:1e:40:51:87:b6:
         20:90:a9:01:65:95:32:e0:97:08:27:b7:22:cc:56:f1:ed:19:
         d2:df:f3:4e:07:2f:d7:24:15:fd:2c:18:94:15:52:92:f5:09:
         2b:02:82:6e:d1:3b:c6:57:7a:02:2b:ba:f3:00:31:2d:3b:78:
         52:ce:fd:8f:5a:00:c5:bb:d4:52:e9:85:63:56:81:cc:15:19:
         7a:24:c6:d0:07:6e:11:4c:44:44:fd:49:9a:75:48:e2:0c:52:
         36:25:a8:87:d5:fd:8d:14:35:9b:98:f8:11:e1:9f:29:bc:a1:
         0e:c6:b4:97:65:05:e2:6a:a4:02:48:87:59:35:3f:46:87:7e:
         2b:fb:b3:cd:8c:28:fe:2d:0e:9c:98:fc:c3:7a:e0:26:dc:32:
         c0:38:ca:a5:8d:86:84:a2:1c:e8:2a:e7:28:5e:65:f6:b8:13:
         71:0d:f2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----