Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
File:                     391a6c01-da6c-449a-9b50-ba54fb84039a.cer (raw, json)
Hash identifier:          /gjBDoBq5vX7KBnhp1G+eho/7UbE0oAbgnxJEpU1jZ8=
Subject key identifier:   D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858440EC65A1CE12DB18DBA4F5300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 30 Nov 2023 08:00:07 +0000
Certificate not after:    Wed 04 Mar 2026 08:00:07 +0000
Subordinate resources:    IP: 23.145.232.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0e:c6:5a:1c:e1:2d:b1:8d:ba:4f:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 30 08:00:07 2023 GMT
            Not After : Mar  4 08:00:07 2026 GMT
        Subject: CN=391a6c01-da6c-449a-9b50-ba54fb84039a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0a:cb:53:78:90:21:40:1a:ea:1c:63:ff:6b:
                    0b:9f:6a:fa:5b:38:26:31:54:36:4d:36:c7:06:ca:
                    34:48:7b:5e:cb:48:b9:27:23:c2:5d:3f:ce:0a:d8:
                    92:20:0d:03:b7:3c:83:80:d4:47:36:d4:9d:0b:88:
                    78:3f:2d:f8:36:d4:c6:da:e7:55:89:34:63:1b:17:
                    9f:3e:08:2f:da:81:53:d4:01:93:0f:ff:fe:e4:3f:
                    e2:61:71:18:79:e0:31:cf:71:01:67:ca:4d:f4:31:
                    45:bd:d9:5e:19:18:9a:14:38:34:cd:f7:55:24:e0:
                    d7:59:6a:ba:56:99:7f:39:b0:ee:85:ad:91:ea:5e:
                    bc:4c:79:4e:36:c1:cc:3b:40:7a:3f:a2:cd:93:b8:
                    b9:ee:ad:9f:cb:75:d8:b0:ae:7b:df:4d:a4:eb:4e:
                    a4:00:28:2e:5e:e1:21:5f:75:2f:a8:6a:6c:d3:8e:
                    0b:22:75:5c:c8:6d:54:4a:7a:5e:90:0b:95:20:a0:
                    65:b2:64:46:96:2e:6d:81:b5:ec:4e:64:20:72:d9:
                    49:ae:30:94:c1:3a:10:cf:16:ef:3b:f4:f6:c9:17:
                    d9:94:34:b6:66:72:a1:01:51:a1:18:38:b6:7d:23:
                    95:2d:a3:fb:a7:4b:16:b3:ee:90:ee:3c:e2:c9:f1:
                    80:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b5:5d:a0:05:72:40:66:23:a2:a0:e2:13:c4:60:de:64:61:
         10:a7:6b:10:55:b7:c6:e9:af:7c:9a:de:83:d5:98:7d:90:c0:
         55:a0:8a:ac:2d:f8:f6:ad:ac:e4:1e:b6:43:41:76:c3:92:ba:
         bc:a7:20:29:b2:39:d3:5e:e2:94:14:cc:fd:ac:9c:f1:2f:3e:
         81:42:3b:48:66:e1:6c:2b:43:78:fd:9e:29:3a:80:89:47:e8:
         36:be:a5:f9:de:1a:bd:2d:02:c0:a5:e5:11:bc:5b:dc:23:60:
         29:6c:3f:93:80:7a:35:19:87:1d:08:02:da:4d:87:26:5b:c7:
         e6:7c:a3:cb:fc:8d:e9:2d:4d:61:a7:57:3c:6f:58:1c:66:e8:
         68:98:b0:99:20:9f:f4:95:d8:95:78:3d:2f:dd:13:6d:43:7e:
         c4:5e:43:1d:47:88:a8:ce:f8:3a:b8:08:05:89:00:b7:a7:a5:
         77:1f:d0:75:41:f5:20:2d:63:e5:9d:98:d6:b1:50:f8:d6:46:
         25:4c:13:88:82:52:e6:b5:5a:0f:96:8f:ec:0f:79:8f:1b:a7:
         25:ba:65:fe:b9:84:68:ab:34:19:75:0e:66:ee:5a:ee:cb:f3:
         a1:3b:59:2e:8e:77:17:99:f1:26:7a:87:d1:92:8f:49:f0:c6:
         46:08:17:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----