Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747.cer
File:                     3905609c-39ed-4063-a3a8-68871c079747.cer (raw, json)
Hash identifier:          J4WhZ14aUoAWZCwgtmjyEgujOX1MA0u2SuRS37CWRow=
Subject key identifier:   BA:BC:F1:0A:4F:A5:AA:08:87:E1:FE:1D:E1:F4:24:F3:3E:86:35:DC
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858440CC12BFC37B1B4460272B000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 29 Nov 2023 14:38:03 +0000
Certificate not after:    Tue 03 Mar 2026 14:38:03 +0000
Subordinate resources:    IP: 216.245.146.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0c:c1:2b:fc:37:b1:b4:46:02:72:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 29 14:38:03 2023 GMT
            Not After : Mar  3 14:38:03 2026 GMT
        Subject: CN=3905609c-39ed-4063-a3a8-68871c079747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:3e:52:dd:89:c4:bb:e3:bb:6b:96:06:04:
                    73:b3:7c:1b:1c:83:8a:57:95:52:78:9a:25:a0:67:
                    84:4f:06:cd:65:a3:f8:2e:2f:18:5e:3b:56:64:e3:
                    f3:54:5c:93:b1:e5:f1:8c:f7:3d:73:74:ea:98:0c:
                    3b:5a:4e:9d:ec:83:d9:b5:ae:7b:60:ea:be:d1:22:
                    c1:9c:12:99:69:01:00:fb:13:a7:07:20:2f:c0:a1:
                    f8:05:79:72:07:c3:33:00:99:17:94:c7:92:fc:9a:
                    25:2d:61:f6:91:3c:f1:5f:b4:fc:dc:3f:74:fc:6a:
                    08:f7:bc:12:41:c7:a9:db:0a:37:18:0e:df:40:81:
                    c5:06:b2:8c:59:a8:00:c3:89:55:6c:37:42:9e:c1:
                    47:79:40:7a:8c:f6:a4:e0:2c:9b:db:64:22:e0:de:
                    ab:b8:17:cd:a4:d6:37:19:9f:69:45:53:fd:fe:67:
                    db:7b:14:91:96:55:39:b6:48:f7:8d:9a:e7:cc:a1:
                    7e:82:45:dd:46:48:73:77:75:e7:76:a7:99:03:16:
                    1b:d8:14:f6:dc:76:4c:c5:cd:9b:de:c8:c4:c3:c5:
                    06:e0:26:5c:b2:ff:28:74:76:2e:5a:3a:61:99:fd:
                    57:2b:04:73:82:c3:b1:cb:23:c6:5c:96:35:54:a7:
                    58:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BC:F1:0A:4F:A5:AA:08:87:E1:FE:1D:E1:F4:24:F3:3E:86:35:DC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.245.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:48:cd:8a:fb:35:0c:dd:3a:c6:52:6a:60:7c:2a:20:2e:cb:
         f2:13:38:60:81:b2:d6:62:af:0e:16:6d:76:14:97:e2:3f:23:
         90:20:08:2d:e9:d3:6b:38:f6:4b:85:1d:b3:af:e1:56:8e:97:
         8a:b9:72:91:2b:d2:7c:4a:32:b0:ea:d1:4b:8e:a9:f8:15:2f:
         b8:f9:cd:99:a4:99:86:5c:46:59:68:27:54:a8:a0:02:62:e6:
         1c:b6:4a:24:00:39:20:8f:27:13:47:75:8e:3e:33:ff:40:47:
         5e:ec:e0:a0:09:3e:d0:e3:04:c1:a8:04:3b:a4:dc:92:08:8b:
         3e:69:fc:5e:b1:0c:0f:6a:a4:c5:f1:80:b1:90:c3:9e:c8:39:
         f6:31:3e:66:b9:bb:48:13:b9:77:bd:59:9b:c9:4f:67:c4:fb:
         0e:6e:b4:2b:ec:94:96:2b:da:66:a0:1a:60:cb:ee:2e:60:4c:
         02:3c:f8:d6:f6:d7:b6:c5:da:9b:2f:6c:a2:1e:ef:ca:99:aa:
         28:ae:b5:31:5b:a5:0f:c5:7c:c6:fd:4d:32:af:49:39:50:74:
         83:89:25:ea:2e:14:c2:00:ee:e9:31:68:c2:82:64:fe:f9:e1:
         05:25:46:26:65:ca:49:d5:98:21:e1:b9:ff:9c:29:e6:0a:87:
         dc:81:0c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----