Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.cer
File:                     37bfcea0-cd68-469f-9e84-ccc3f1f40b42.cer (raw, json)
Hash identifier:          6v25JBpO2Z3N63Z5v/QjMFkzyt0I+WKxXK4aRwpRFUU=
Subject key identifier:   2B:91:ED:DC:2E:8C:FC:19:63:EA:4E:59:69:E8:3A:E9:AE:89:AB:B8
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858474DD8451B678C5FB8B1EE8500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 23 Sep 2024 00:32:57 +0000
Certificate not after:    Sun 27 Dec 2026 01:32:57 +0000
Subordinate resources:    AS: 31989
                          IP: 23.155.168.0/24
                          IP: 66.179.68.0/22
                          IP: 2601:f000::/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:d8:45:1b:67:8c:5f:b8:b1:ee:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Sep 23 00:32:57 2024 GMT
            Not After : Dec 27 01:32:57 2026 GMT
        Subject: CN=37bfcea0-cd68-469f-9e84-ccc3f1f40b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:06:74:dc:64:2b:ce:fd:0f:ea:0d:97:2f:4d:
                    fa:82:a8:7b:81:d8:46:40:d6:f3:1c:84:29:fa:78:
                    3d:fc:ed:7b:f8:be:6c:53:57:01:fa:48:c1:a2:d5:
                    c7:6b:ce:d3:1a:b9:40:61:c9:a5:91:d9:90:3c:0f:
                    b3:f4:f3:6e:4c:13:08:26:9c:de:95:2b:de:38:93:
                    c1:92:66:52:81:5e:5a:da:68:f3:48:b4:7c:7e:d9:
                    83:31:d2:82:51:0b:0c:ba:37:9a:7e:78:15:c7:0f:
                    d0:c3:94:63:9f:e2:8e:9a:f6:21:38:89:e7:a7:e8:
                    e8:c3:c2:d3:92:cf:e5:fd:0f:10:7f:ff:db:95:11:
                    44:5e:c1:5d:07:6d:dd:f1:2d:67:0b:22:33:d0:28:
                    08:36:8e:36:41:0a:c4:6d:f1:de:68:63:7e:5b:91:
                    d2:79:73:c2:c1:e9:a6:6f:ac:7b:30:9f:14:0f:71:
                    ef:aa:9f:0a:6e:90:fd:41:e7:87:47:41:f4:aa:7e:
                    e3:e1:2a:5e:05:17:ac:54:2f:13:8b:38:39:69:32:
                    d4:82:d8:d2:63:33:13:03:30:ef:ee:c4:25:2e:54:
                    02:87:0e:e4:d0:49:bf:ed:6d:71:d3:0d:25:63:28:
                    50:9a:f0:0a:a8:9c:93:50:ee:98:9d:50:b3:91:d6:
                    9e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:91:ED:DC:2E:8C:FC:19:63:EA:4E:59:69:E8:3A:E9:AE:89:AB:B8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.168.0/24
                  66.179.68.0/22
                IPv6:
                  2601:f000::/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31989

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:9c:1c:08:ea:a5:a7:b8:ea:61:23:3b:87:87:42:8a:7b:05:
         bb:c8:c1:76:93:b9:ab:f2:a5:87:d0:d4:e3:9f:93:14:7d:c6:
         24:14:71:dd:f7:f5:56:50:bd:f3:b3:f0:86:f9:4d:bf:84:88:
         b4:35:32:cb:67:4f:0c:60:44:d4:08:ee:3f:b7:72:df:19:a4:
         0c:8a:ff:b8:b3:23:3f:2f:f6:0b:a4:48:ab:56:a3:e2:85:20:
         ca:d6:d2:5a:4c:af:4f:e0:9c:f3:ca:fb:d7:ac:7d:5c:5e:87:
         c3:1d:d2:17:cc:43:00:80:8d:94:23:e2:32:ed:a1:56:8b:ef:
         4c:20:0d:d2:8a:f6:be:6f:a0:c2:4b:b4:c6:ac:44:13:72:85:
         b1:f1:6d:be:ef:9c:92:48:c1:7b:d4:11:d6:50:07:61:8c:35:
         3b:ff:0d:09:b6:75:62:9e:36:59:b1:cf:ce:9a:79:f6:df:52:
         b6:b8:86:ac:69:7c:70:ad:5c:80:29:d1:71:16:39:68:13:a2:
         19:eb:a1:05:c6:e6:4e:82:22:44:19:58:a3:c4:4f:09:27:13:
         c2:4f:53:88:96:86:3a:5e:b6:e2:f2:10:d0:e3:5d:3d:46:f7:
         67:72:e6:7f:5f:97:db:ae:a9:93:35:c2:dc:12:9b:a5:19:b4:
         c9:53:d4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----