Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/55db2859-2229-4006-88d8-ea1e403453ee.cer
File:                     55db2859-2229-4006-88d8-ea1e403453ee.cer (raw, json)
Hash identifier:          qjaPaJhC+fvrlouSGzxhghNU6MbK0DEW3ljOil/obhU=
Subject key identifier:   98:39:58:A2:0F:65:F2:52:59:33:AF:FF:BF:69:BC:A0:69:5C:E8:9D
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843573013A816478A9CEC2FDD40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/55db2859-2229-4006-88d8-ea1e403453ee/55db2859-2229-4006-88d8-ea1e403453ee.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/55db2859-2229-4006-88d8-ea1e403453ee/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 25 Sep 2023 13:44:24 +0000
Certificate not after:    Sun 28 Dec 2025 14:44:24 +0000
Subordinate resources:    AS: 31995
                          IP: 208.90.116.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:57:30:13:a8:16:47:8a:9c:ec:2f:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Sep 25 13:44:24 2023 GMT
            Not After : Dec 28 14:44:24 2025 GMT
        Subject: CN=55db2859-2229-4006-88d8-ea1e403453ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c0:1d:4a:72:82:b4:00:0b:b2:8c:ae:63:ed:
                    da:36:0f:58:ec:db:78:66:03:a9:2c:67:c2:e2:82:
                    18:34:1e:56:8c:c4:b9:04:83:3e:b1:ae:c7:53:f1:
                    12:09:1a:6c:0f:d3:d0:25:8f:f1:29:50:09:b6:37:
                    70:df:a7:8e:00:7e:0e:f9:1c:f0:ce:3a:d3:cf:87:
                    c6:07:a0:d6:9b:62:63:87:f2:78:a0:60:10:ed:50:
                    30:da:65:8d:b2:48:ab:52:2e:42:02:24:f6:4a:cd:
                    6a:5b:1c:75:ef:3f:10:18:03:9b:b6:9c:a5:b0:d4:
                    fd:96:fe:be:45:1a:8c:24:4d:b1:79:06:82:a9:02:
                    52:25:a2:bc:01:20:8b:fa:23:82:62:25:fa:5c:34:
                    9a:d3:58:52:72:66:41:db:ab:50:48:94:79:06:a8:
                    b8:41:5a:f0:0e:e4:90:96:01:6f:c1:be:07:3d:76:
                    8a:60:82:47:e6:7a:fb:0f:39:63:c1:bc:fb:cf:a5:
                    2d:73:dd:ad:a0:23:e7:42:a5:c1:e7:19:f0:85:34:
                    cf:24:0f:bf:c1:ba:3a:e0:37:9d:ed:53:3b:78:23:
                    f4:09:4e:1e:9f:1c:af:5f:a3:bd:e9:d7:e6:42:65:
                    32:48:fe:63:26:40:2b:20:61:21:bc:e2:18:74:08:
                    f5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:39:58:A2:0F:65:F2:52:59:33:AF:FF:BF:69:BC:A0:69:5C:E8:9D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/55db2859-2229-4006-88d8-ea1e403453ee/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/55db2859-2229-4006-88d8-ea1e403453ee/55db2859-2229-4006-88d8-ea1e403453ee.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.116.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31995

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:4a:fb:55:49:ed:58:ac:44:fc:34:6d:fa:f5:fe:39:8b:72:
         4e:19:7b:a7:3a:b6:c6:76:cd:f0:1b:fc:86:aa:92:d5:42:13:
         32:70:03:f7:5b:c2:0e:95:7c:b3:be:45:57:11:14:6d:c1:ff:
         97:41:6f:00:5d:30:1b:d6:2a:90:49:21:35:25:95:3d:3b:52:
         aa:2e:22:72:b9:e6:f2:84:29:99:ea:d8:72:7f:d6:6d:73:ad:
         db:24:99:33:3d:df:6f:10:e0:7b:2f:2e:ab:e9:e3:2d:2e:5c:
         13:f6:9c:27:13:15:82:e6:7c:9d:96:f1:ad:ea:b9:32:35:a7:
         19:b9:4a:34:ac:65:27:ec:fd:70:48:74:34:d0:12:05:c4:0f:
         92:8b:3f:27:98:a8:0d:c3:6f:b2:00:fa:6a:45:e2:f8:c7:94:
         0e:dd:ab:b3:22:3e:83:fc:5b:6c:eb:d7:36:71:d1:ae:93:3b:
         eb:d7:51:70:c4:17:8e:fb:0e:56:f9:7f:01:53:d0:c6:92:f9:
         d9:ad:8e:35:80:ab:7a:90:db:87:ce:38:2b:27:3b:e6:0e:0a:
         4e:40:aa:28:94:e1:0a:e3:39:08:e7:d7:2a:4a:2f:33:63:11:
         cc:bd:3b:06:38:4d:94:24:15:45:de:d0:73:30:ff:b6:3e:97:
         a8:a6:a0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----