Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ce822dd-dd88-4381-acda-09d512c55efa.cer
File:                     5ce822dd-dd88-4381-acda-09d512c55efa.cer (raw, json)
Hash identifier:          tPzhe9ds3id0F8KmIMSSZ6U0q4jNcmcqyvSSeTVc47c=
Subject key identifier:   71:AA:8E:78:CD:67:8C:EA:93:E9:2B:91:DB:91:EB:CB:4C:4B:C4:E3
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843FCBD28478C3C5F7E80C6C880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ce822dd-dd88-4381-acda-09d512c55efa/5ce822dd-dd88-4381-acda-09d512c55efa.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ce822dd-dd88-4381-acda-09d512c55efa/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 23 Nov 2023 20:57:02 +0000
Certificate not after:    Wed 25 Feb 2026 20:57:02 +0000
Subordinate resources:    IP: 205.237.78.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:fc:bd:28:47:8c:3c:5f:7e:80:c6:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 23 20:57:02 2023 GMT
            Not After : Feb 25 20:57:02 2026 GMT
        Subject: CN=5ce822dd-dd88-4381-acda-09d512c55efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:90:f6:d7:10:5f:ac:e8:a4:74:3f:ed:29:30:
                    63:1d:66:03:cc:af:92:5a:ed:23:6a:36:7c:79:e9:
                    d1:43:36:94:ab:10:8b:29:7a:34:b3:9a:55:53:68:
                    2b:cf:b4:49:5b:b7:d9:ec:0f:4a:10:d8:f7:ac:36:
                    c8:9a:21:2f:d3:57:2f:c2:1f:3a:af:d9:31:a9:88:
                    f7:9c:3d:df:7f:33:ef:23:ad:e1:f5:d3:50:53:c6:
                    03:3a:0c:1e:ce:df:e4:29:64:ae:a3:ed:c1:0d:f5:
                    f7:7f:6d:99:5a:e3:07:0c:09:9f:1b:91:12:0b:71:
                    eb:28:1e:5f:ae:a2:95:6f:10:c9:68:66:b2:64:de:
                    c1:4c:bc:14:f5:52:d4:09:d5:e6:22:5e:91:13:6b:
                    74:5b:22:c7:25:29:36:a9:5f:ae:2a:b5:ca:3d:9d:
                    75:5a:d7:31:19:5c:83:f3:50:27:af:70:44:25:37:
                    bb:8d:8d:35:f4:e6:0e:bb:5e:b6:48:57:5e:82:78:
                    cd:cd:fa:05:1d:6b:43:f8:03:3e:15:36:b8:70:ee:
                    a6:a3:6d:4c:bb:16:16:29:03:e3:37:3b:f9:09:fd:
                    9c:81:d7:aa:32:57:48:3c:9f:6e:92:b0:55:d9:a0:
                    ce:06:dd:f4:d4:27:24:e0:e6:a7:9a:8b:23:b2:87:
                    2b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AA:8E:78:CD:67:8C:EA:93:E9:2B:91:DB:91:EB:CB:4C:4B:C4:E3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ce822dd-dd88-4381-acda-09d512c55efa/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ce822dd-dd88-4381-acda-09d512c55efa/5ce822dd-dd88-4381-acda-09d512c55efa.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ca:1c:11:7e:b9:37:48:37:37:23:3f:96:47:99:3a:6e:1f:
         6d:22:60:c6:85:8d:f9:64:80:32:50:7e:a6:55:5b:95:5b:f2:
         7b:0d:01:6c:64:dd:a9:7f:c4:86:87:c2:9f:81:70:25:d2:50:
         f7:f9:15:e5:4e:83:d1:66:1f:3a:a5:d8:ab:eb:38:dc:b9:af:
         c9:87:23:62:25:9e:ef:dd:db:3a:ed:4b:18:e0:53:6e:84:8e:
         5e:35:49:14:3e:d9:ce:4b:70:a3:f1:f8:28:b0:64:bc:37:35:
         40:06:3f:c0:db:8d:c9:5b:0f:53:61:1e:2a:1f:90:3d:5f:75:
         12:54:01:75:9e:53:7f:e9:fe:1b:32:1d:ac:75:d9:25:32:be:
         69:bf:c5:45:a0:cd:0a:65:9f:ae:d0:f8:a7:54:45:22:12:3e:
         6b:0e:6c:6e:9b:e2:27:09:ce:aa:4e:f2:9d:0c:5f:1a:c3:20:
         4c:67:9c:c6:f0:e8:6a:08:92:0d:77:8f:09:09:1d:5b:9d:14:
         6f:54:d9:42:0a:94:38:03:d8:e1:45:77:bd:7e:66:c2:28:bb:
         17:36:9e:4a:63:2f:23:66:b8:1b:fa:40:fe:43:65:e5:5c:de:
         7f:62:5a:2f:be:04:e6:d6:8a:f5:25:f8:fd:71:0f:c4:51:f1:
         a3:f9:99:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----