Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3.cer
File:                     63772934-17e5-40fe-9a28-6fe830808dc3.cer (raw, json)
Hash identifier:          pPv05IzlFNcgEHaIsJ9iFyL2f+0rxxhJRGEjyr2PMrE=
Subject key identifier:   51:4A:90:E0:DD:A7:03:EA:3B:D9:C4:E2:08:CE:A5:09:8D:F6:10:FB
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584389A1C173755DAAAC6BBE1AA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/63772934-17e5-40fe-9a28-6fe830808dc3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 13 Oct 2023 15:23:52 +0000
Certificate not after:    Thu 15 Jan 2026 16:23:52 +0000
Subordinate resources:    AS: 398264
                          IP: 161.38.184.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:89:a1:c1:73:75:5d:aa:ac:6b:be:1a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 13 15:23:52 2023 GMT
            Not After : Jan 15 16:23:52 2026 GMT
        Subject: CN=63772934-17e5-40fe-9a28-6fe830808dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c3:db:5b:46:bb:ce:30:75:f4:ca:67:be:8a:
                    8f:9d:7a:23:03:b9:cb:7a:67:00:68:b5:40:f3:bf:
                    41:c6:4e:cd:cb:79:16:b2:9a:4b:a0:b0:bb:5b:bd:
                    7f:62:d4:de:2b:8c:2c:bd:cc:28:37:b0:49:25:b6:
                    09:09:13:13:db:f1:fe:2c:28:95:ed:19:b3:12:01:
                    11:1f:9f:f5:40:c6:1b:74:b9:dc:a3:d5:49:a4:3d:
                    cb:1e:df:94:a9:3b:3c:67:ac:0b:a3:45:8c:1c:b5:
                    e6:33:68:7e:ee:25:0c:c9:e2:23:69:2e:97:48:07:
                    11:e3:2f:34:5a:bf:58:80:40:c3:23:e8:b3:5d:bf:
                    34:da:ea:b1:51:34:79:d9:56:48:ae:e4:6a:4a:c8:
                    e1:42:83:4e:5c:a4:4d:e6:dc:bb:b4:24:ef:aa:c6:
                    1d:7f:1f:1d:ff:22:30:9a:a9:c8:c1:c4:9a:2a:6a:
                    fc:63:99:db:c7:5e:1b:03:11:79:36:9c:61:76:93:
                    a0:cf:18:08:a8:a3:52:08:15:80:95:31:59:db:2e:
                    d5:1b:0e:1b:62:6c:b1:0b:66:4d:8c:0c:54:2f:5f:
                    4a:2a:9c:8b:a2:18:88:24:da:be:9f:64:16:8d:c1:
                    7d:04:1c:c6:c2:0d:fa:a7:13:c1:76:48:85:71:56:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4A:90:E0:DD:A7:03:EA:3B:D9:C4:E2:08:CE:A5:09:8D:F6:10:FB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/63772934-17e5-40fe-9a28-6fe830808dc3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.184.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398264

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:90:06:bc:44:b1:f5:04:5d:0c:5f:85:33:77:92:4d:32:7d:
         22:55:f2:35:50:ca:6e:63:f1:1e:d9:60:5d:86:b1:e0:b4:bd:
         b9:c1:46:4f:46:17:f4:fd:ee:f0:31:7e:51:1e:74:5b:61:cc:
         0e:32:cd:6f:d3:4d:02:25:6c:d5:22:36:cf:1a:02:45:d6:66:
         aa:9a:73:bf:a2:59:4d:ad:ff:46:37:0a:11:20:6b:45:d3:e5:
         34:51:35:d8:6f:6a:18:1d:7b:4f:c7:48:71:02:d8:8f:7e:dd:
         b9:a8:ac:63:c9:2d:19:6c:b0:ac:67:2d:b7:35:85:80:36:ca:
         b1:84:e3:f8:72:51:5b:27:8f:27:83:bf:71:af:3a:29:66:33:
         50:1c:51:13:d8:24:1d:0b:99:d1:85:69:67:55:87:16:41:19:
         1e:f4:f9:61:ee:9f:ac:4a:c9:41:56:97:10:6c:a4:58:6a:eb:
         dc:85:a9:34:bb:bd:41:60:12:5c:6d:40:91:2f:df:69:70:35:
         d7:d7:5b:49:d9:50:f2:b5:0e:f6:8d:47:9e:9e:90:ed:fa:c4:
         7e:e0:fe:de:da:aa:f0:2a:fd:68:b2:31:59:c9:81:a8:c9:e8:
         6c:f0:84:ef:09:f2:11:e5:57:d9:25:11:26:88:d5:45:2b:c9:
         c0:fe:70:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----