Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer
File:                     5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer (raw, json)
Hash identifier:          PSuTH3hX61dDT57tBd5+7M5NMygxHLb87L2Ad6iDprQ=
Subject key identifier:   86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285844C023B634E13C4C3D60198080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 01 Feb 2024 20:46:18 +0000
Certificate not after:    Wed 06 May 2026 19:46:18 +0000
Subordinate resources:    AS: 14972
                          IP: 208.75.56.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c0:23:b6:34:e1:3c:4c:3d:60:19:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Feb  1 20:46:18 2024 GMT
            Not After : May  6 19:46:18 2026 GMT
        Subject: CN=5ed81a66-f49e-4a16-a647-f709e55cbdb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:90:fe:eb:9c:ab:c6:81:6a:4b:7c:69:d9:
                    2e:d8:be:ce:10:ae:8a:12:5d:ab:24:95:a7:59:e2:
                    26:c1:ec:e0:e0:d7:10:fd:c0:e6:77:28:7d:70:88:
                    6d:69:32:77:9a:51:d8:5c:3b:59:d5:d6:02:81:6d:
                    d5:0e:d7:dd:4a:f5:c8:b9:3e:47:f7:eb:07:7c:ac:
                    4e:a6:10:31:ee:63:10:1d:1c:b3:e5:66:3d:e6:b7:
                    54:d0:a2:2c:68:c1:e1:c2:43:fe:1a:b5:a6:3a:aa:
                    01:a4:db:27:d2:00:f7:53:2e:99:df:2c:5b:08:8c:
                    fa:32:5b:42:6f:94:00:9a:23:a2:a4:c2:db:25:3d:
                    e5:38:ca:7c:f9:ff:88:23:77:43:46:6d:e8:cb:f7:
                    ae:db:42:c4:ef:44:51:e6:f5:ea:79:8e:88:9c:bc:
                    18:f7:aa:9f:7f:78:93:61:ef:ee:f7:83:c6:b6:d0:
                    2b:b8:82:b9:b5:fa:44:00:98:b9:4e:17:d1:39:76:
                    58:ad:8d:3a:aa:28:db:34:a2:89:e7:bb:aa:b8:3c:
                    e3:63:c7:13:77:92:6f:fc:b6:c2:a6:e5:a7:0e:c1:
                    3c:af:19:b8:ef:c5:5d:16:6b:3c:5e:7d:4c:99:72:
                    4f:83:46:bc:b9:25:db:c2:8f:b1:e0:45:4f:1c:ef:
                    4b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.75.56.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14972

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:36:70:43:c9:ac:6b:2b:56:81:88:48:94:11:2a:c9:41:ce:
         f2:f7:59:a2:4e:ee:98:a0:5c:9b:c4:c6:91:f3:cd:92:56:f3:
         59:f7:fd:0e:c4:a9:18:8c:8c:c0:67:26:22:4d:8e:20:fb:37:
         b9:f7:65:ab:4d:86:b7:9d:2a:2c:84:67:a0:11:a7:66:5a:51:
         15:2e:b8:7d:57:25:89:b3:f2:b4:e3:97:16:11:a0:83:b0:2a:
         c8:71:f8:82:48:1e:83:ab:6c:d9:36:cb:0d:b9:82:f1:10:66:
         e2:03:70:8a:8c:0c:58:7e:4e:60:75:11:58:a6:57:36:ff:c3:
         5f:30:63:27:3b:c8:e1:a2:4f:2d:d5:18:f0:8a:68:d9:48:fe:
         ef:e0:9b:e6:29:29:75:c7:a9:83:55:a8:5b:a8:6f:1f:9d:b7:
         59:22:0e:06:3b:eb:bc:47:9c:6b:6f:7a:94:f0:9e:ea:76:78:
         51:d5:74:e7:71:c3:92:c4:8a:10:af:9c:1e:e3:b6:eb:77:0f:
         05:6c:1d:dc:7f:ac:38:76:8e:31:1f:14:3d:a0:d8:7d:c2:de:
         bb:12:d0:08:c3:79:d1:f8:ce:de:66:00:f5:f6:3e:cf:c3:bf:
         7e:ad:16:f8:2e:03:f6:d7:93:9d:24:ce:06:b4:42:17:0d:b6:
         52:71:b9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----