Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1.cer
File:                     4007d5dc-09bf-4465-b6ab-84a07635a5a1.cer (raw, json)
Hash identifier:          Izxstxj3WHYqjIgJvw81c2aS6sjc93ITO4OwiICN/8k=
Subject key identifier:   AF:A9:A2:EA:B1:C7:9E:19:3A:5F:09:05:4E:1C:11:6C:E5:24:50:4D
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285847F3F731A23389FAD87802B0A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/4007d5dc-09bf-4465-b6ab-84a07635a5a1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 21 Nov 2024 12:39:27 +0000
Certificate not after:    Wed 08 Apr 2026 18:18:03 +0000
Subordinate resources:    AS: 16808
                          IP: 192.197.250.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f3:f7:31:a2:33:89:fa:d8:78:02:b0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 21 12:39:27 2024 GMT
            Not After : Apr  8 18:18:03 2026 GMT
        Subject: CN=4007d5dc-09bf-4465-b6ab-84a07635a5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:aa:d5:dc:bc:59:12:71:bf:3b:04:d9:a4:cd:
                    8c:72:6c:cb:46:d1:43:b5:fa:42:4d:6e:ff:8f:10:
                    24:be:21:d1:22:1a:9e:19:13:c5:ff:b2:b9:aa:67:
                    e6:23:4a:a6:84:b3:b7:b3:e2:10:5c:f0:5e:66:7a:
                    1d:38:55:74:60:b0:a4:c2:12:21:47:e0:81:72:99:
                    61:81:f3:63:4e:87:02:d9:1a:76:c1:ce:94:70:c4:
                    ed:6d:65:6a:01:ac:5f:08:07:8b:53:9f:dd:d0:70:
                    5f:b9:a0:2b:71:a8:75:d2:e6:66:5e:a5:8b:07:1f:
                    dc:81:f3:19:50:c2:23:de:93:8d:8f:b3:b5:28:67:
                    ed:b6:7c:ec:50:b3:d6:c7:d9:9b:0c:5e:28:e5:3c:
                    af:24:fc:0d:3a:9f:b1:fb:e7:bc:eb:e4:39:54:0c:
                    17:ff:ec:fd:cf:f5:71:83:8f:8d:0b:9e:25:4c:1c:
                    68:72:52:88:9b:0f:2a:b3:4c:96:dc:c0:9a:a2:1d:
                    89:fc:a2:6b:78:87:3d:9c:b5:b9:d6:16:78:92:83:
                    9f:32:3b:06:0c:e5:e1:2d:7a:68:5c:ae:ba:f3:24:
                    7d:eb:03:b6:07:f3:40:03:ee:72:b3:52:ca:31:11:
                    42:1a:e8:e3:90:17:fc:6a:28:75:c3:f1:7f:b1:6f:
                    2b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A9:A2:EA:B1:C7:9E:19:3A:5F:09:05:4E:1C:11:6C:E5:24:50:4D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/4007d5dc-09bf-4465-b6ab-84a07635a5a1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.250.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16808

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:dc:d7:37:1c:35:5a:90:c3:ff:7a:b4:85:1d:bf:6e:1a:e2:
         5a:14:d1:44:36:87:d9:e6:8c:e9:38:d8:f0:36:d7:7a:27:df:
         20:9c:d3:2a:f1:2d:fd:02:32:86:ee:03:55:0d:ae:cd:d1:9a:
         f7:af:b1:54:bb:20:b0:71:34:d7:f0:a5:f9:11:c4:4f:4d:e8:
         e2:18:82:90:ff:e6:f5:42:79:36:26:61:74:0d:86:82:a6:29:
         4b:4a:ab:10:f5:5b:3d:ad:e7:d2:89:41:73:95:4c:0f:6e:bd:
         35:fc:4e:ab:02:99:3e:3b:58:fa:41:de:68:a2:d9:e1:30:4f:
         31:15:fd:3b:bf:b8:74:6e:aa:f0:c3:55:e4:7f:70:0c:b6:1e:
         11:66:f2:57:98:7d:cf:4f:f0:71:75:01:9e:53:1d:a1:2a:33:
         1b:ce:06:7b:db:5a:f0:92:cf:99:ae:b3:46:34:b4:85:75:56:
         f8:e2:88:ef:cc:31:4a:eb:6e:d2:d7:35:65:da:31:52:57:26:
         2f:92:dc:33:a3:22:3e:82:8b:2c:0a:3c:e5:d8:97:9c:6f:a4:
         64:ab:6c:51:cb:63:a6:83:c3:38:9b:b7:78:f1:80:20:c0:20:
         f6:cf:81:d7:76:8e:31:b6:9d:a5:e5:85:21:d1:16:52:0c:1f:
         4d:7d:82:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----