Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce.cer
File:                     605ef18e-eb43-492e-a589-20f12375c0ce.cer (raw, json)
Hash identifier:          TOrTMjOx+ZcxQLerhGtF1ljO3g3+XP7YCIDCUhBE9bI=
Subject key identifier:   E1:35:66:D1:EB:AB:AF:F9:00:4E:D5:E8:19:12:3D:95:42:12:5E:45
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285844F47FF9A674C7022724C5A200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/605ef18e-eb43-492e-a589-20f12375c0ce.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 20 Feb 2024 14:54:14 +0000
Certificate not after:    Mon 26 Jan 2026 03:56:07 +0000
Subordinate resources:    AS: 40785
                          AS: 40840
                          AS: 46813
                          IP: 23.163.72.0/24
                          IP: 163.165.0.0 -- 163.165.191.255
                          IP: 2607:7040::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:7f:f9:a6:74:c7:02:27:24:c5:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Feb 20 14:54:14 2024 GMT
            Not After : Jan 26 03:56:07 2026 GMT
        Subject: CN=605ef18e-eb43-492e-a589-20f12375c0ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6f:70:0f:e4:15:1c:81:97:a2:80:93:d1:47:
                    75:da:be:75:04:c9:82:8b:93:d7:ea:0c:9b:45:55:
                    75:83:ec:d9:1b:c1:a1:94:d5:83:de:ac:c1:ad:5e:
                    ed:eb:8a:4d:f3:d4:d2:cb:a5:99:87:39:20:0c:0e:
                    35:25:c4:2c:31:62:34:0e:22:17:f4:30:6c:94:72:
                    82:24:22:ea:ae:e6:66:09:4c:70:db:60:0e:04:d2:
                    f4:94:2a:52:f2:f1:4e:28:e7:af:ef:d5:01:a0:f6:
                    d2:47:24:e0:e0:ad:fa:4f:48:33:9b:4a:af:a7:d1:
                    86:9b:66:c3:b2:58:b7:23:09:de:03:c4:b8:78:1f:
                    fc:15:ae:ef:49:fb:d2:44:54:37:0a:95:aa:47:91:
                    2e:97:79:c8:63:50:0d:18:13:f2:21:bb:31:38:20:
                    41:35:a6:f7:97:6d:c3:10:26:39:35:ca:be:10:52:
                    bc:ce:01:0d:0c:13:5e:98:ec:84:97:83:07:d0:fb:
                    36:68:d7:19:65:96:6f:5b:31:92:8a:5d:e2:80:78:
                    4e:16:50:02:ac:de:89:8b:e0:76:21:24:f2:66:fc:
                    73:31:3e:e6:e2:ac:82:c5:c9:3a:d6:9e:4e:0c:5b:
                    3b:67:6f:4e:53:bd:fc:4f:f7:2d:1e:35:3e:63:67:
                    f4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:35:66:D1:EB:AB:AF:F9:00:4E:D5:E8:19:12:3D:95:42:12:5E:45
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/605ef18e-eb43-492e-a589-20f12375c0ce.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.72.0/24
                  163.165.0.0-163.165.191.255
                IPv6:
                  2607:7040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40785
                  40840
                  46813

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:dd:9b:b8:b3:31:f0:31:b6:80:f8:af:b6:d5:9c:75:2c:8a:
         34:c8:aa:98:5c:ed:54:c7:7d:00:8d:80:01:23:95:5d:fb:a0:
         b1:43:03:27:e5:7b:56:e8:02:5f:ad:16:50:e2:ae:d5:45:82:
         ec:ec:ba:af:9d:7f:c2:7b:be:10:92:74:4e:53:2f:b0:be:f0:
         04:6a:43:8c:7a:ae:54:5e:4c:53:ff:ab:75:ae:65:a2:8b:b8:
         17:b5:47:ab:f6:b3:5a:57:55:47:35:60:5b:f2:4f:b2:8e:91:
         2a:18:9c:60:4c:95:5a:c9:2e:10:60:3e:b9:55:36:01:ac:09:
         08:2a:c0:e8:ed:11:fa:ea:a1:a1:5c:75:a1:90:62:76:6e:cf:
         e5:50:81:cb:47:20:b2:58:34:34:c0:35:6e:8c:e9:42:70:22:
         11:24:4b:23:84:06:3d:ec:01:2f:48:04:46:c2:be:10:7f:35:
         12:cb:7b:47:1d:cb:15:82:6f:90:ca:54:fd:06:c6:e5:b9:84:
         2e:58:df:d1:42:d1:c2:40:ca:9a:80:8f:3c:cd:43:74:d1:87:
         51:cf:d9:03:f9:5d:90:bc:fa:04:95:53:f2:ae:a0:6e:7d:3d:
         ef:5c:c1:4a:4d:cd:2d:71:83:d1:1c:66:6d:74:43:b4:80:58:
         82:c7:c4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----