Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4b309bb0-253a-43d9-a33b-3be17a27116e.cer
File:                     4b309bb0-253a-43d9-a33b-3be17a27116e.cer (raw, json)
Hash identifier:          u6uq0+1iUKDo1/2k+4l9Yws8uA32s4XCJ6a0Pn9xt1A=
Subject key identifier:   D8:A4:1C:06:49:1B:37:83:1C:A2:EB:FB:AA:BE:70:59:C8:42:43:7E
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858436350CF28B8AB632744ED8FC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4b309bb0-253a-43d9-a33b-3be17a27116e/4b309bb0-253a-43d9-a33b-3be17a27116e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4b309bb0-253a-43d9-a33b-3be17a27116e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 29 Sep 2023 22:00:03 +0000
Certificate not after:    Thu 01 Jan 2026 23:00:03 +0000
Subordinate resources:    AS: 46744
                          IP: 2620:1e:c000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:63:50:cf:28:b8:ab:63:27:44:ed:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Sep 29 22:00:03 2023 GMT
            Not After : Jan  1 23:00:03 2026 GMT
        Subject: CN=4b309bb0-253a-43d9-a33b-3be17a27116e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:39:27:57:c1:c4:14:07:f6:99:25:5c:20:54:
                    a8:13:ef:ad:c3:13:9e:cd:ff:56:ab:b3:80:c8:88:
                    0d:61:1e:6b:6a:e4:31:21:a5:be:3f:c0:03:75:0a:
                    a6:60:05:d4:08:3c:eb:12:1c:be:18:c7:1e:c5:69:
                    95:58:38:e4:14:50:2a:a4:cd:7c:dd:d2:80:a2:23:
                    b7:b3:9c:e1:4a:c1:65:14:23:e5:6d:ca:b1:76:f3:
                    cb:c2:b4:5d:55:40:df:a2:50:c4:d2:07:05:12:db:
                    56:fd:df:af:ba:bd:2c:fa:36:07:7d:ed:d1:6c:4c:
                    16:6e:0a:92:f7:f0:5b:f2:3a:37:e4:ae:af:9a:cc:
                    ef:0b:6e:9d:5a:86:d0:e9:8c:38:db:12:a8:88:11:
                    cc:29:71:56:e3:d2:69:cc:fe:ec:1b:85:17:2b:62:
                    8c:7b:ab:22:d5:e2:ad:a3:10:cc:45:36:bb:f0:77:
                    1d:4a:51:9f:d2:71:29:bf:b5:39:a2:24:33:7b:34:
                    21:c5:7f:db:5f:1f:43:a3:f3:27:b8:bb:18:73:a2:
                    ce:a3:b2:04:c7:e5:b3:b3:83:42:30:55:24:a2:bb:
                    78:d8:33:8b:c6:24:6c:14:ce:a7:f2:67:bc:cb:44:
                    19:e7:e0:02:b5:f9:58:af:68:ef:27:99:01:ec:75:
                    0f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A4:1C:06:49:1B:37:83:1C:A2:EB:FB:AA:BE:70:59:C8:42:43:7E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4b309bb0-253a-43d9-a33b-3be17a27116e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4b309bb0-253a-43d9-a33b-3be17a27116e/4b309bb0-253a-43d9-a33b-3be17a27116e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1e:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46744

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:92:d8:2f:23:85:7c:a0:c6:0b:67:dd:55:77:fa:0d:75:e9:
         21:7f:5f:6f:84:9d:94:5d:e0:0b:9d:65:0e:ba:3d:d3:ee:a7:
         78:0a:ae:07:73:3d:fd:a8:80:be:be:ce:5c:88:a3:7f:a4:0e:
         f4:00:b8:e6:fd:ae:18:ff:f7:2e:8a:1f:d0:89:3e:5d:e6:c6:
         c9:22:3b:a8:bb:a8:64:9c:3e:fb:ab:35:36:c2:dd:ce:fe:3f:
         25:fb:4a:8b:21:73:30:6c:68:60:16:24:6e:71:2a:53:61:b6:
         e1:a0:00:36:46:66:00:de:c2:c7:a3:0b:a2:ae:40:d6:be:cf:
         e0:8a:cf:4b:40:3d:1f:11:49:a7:68:c6:f7:90:6f:ce:8d:94:
         de:3d:26:b4:be:d3:fa:62:be:b2:e9:8c:b4:8b:3e:53:a6:34:
         39:4f:b0:ca:00:b4:5a:7b:62:19:c6:86:8d:46:4f:d1:2b:92:
         c6:12:09:6e:ea:69:8b:03:1e:c0:18:ff:62:97:de:03:57:a9:
         a8:e2:13:c1:f1:26:f4:fb:c4:7c:6e:98:e3:7f:1f:81:b3:87:
         60:da:7a:7c:f3:68:f1:06:51:ac:87:03:0c:b6:6e:9d:c1:ad:
         c8:97:f8:38:65:d9:6d:2f:ba:4b:53:53:b2:e5:4c:d6:be:0a:
         7d:a4:3f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----