Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
File:                     6511a5cc-df0b-4c6e-a228-2902fbea4263.cer (raw, json)
Hash identifier:          L7i1+vpCbhN3SF2zQxxM2KNWhVa121RvO31N86EYKZs=
Subject key identifier:   ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843954C6F341C0A990B49881F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 17 Oct 2023 19:41:39 +0000
Certificate not after:    Mon 19 Jan 2026 20:41:39 +0000
Subordinate resources:    IP: 140.98.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:95:4c:6f:34:1c:0a:99:0b:49:88:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 17 19:41:39 2023 GMT
            Not After : Jan 19 20:41:39 2026 GMT
        Subject: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:05:ff:67:92:e3:8f:52:8f:69:f4:59:5b:62:
                    85:fa:79:0c:7e:d5:63:22:04:21:2b:42:8a:8c:4c:
                    cb:65:2c:ae:d1:ea:d7:34:0c:08:97:68:7d:f1:eb:
                    7e:14:40:07:74:09:20:21:e0:66:e9:c3:85:32:01:
                    73:ad:2a:07:28:fe:b5:84:d9:5a:22:25:c5:2f:60:
                    3b:3e:d3:10:b5:34:e9:b7:18:f0:b6:19:8e:0c:ea:
                    3c:e8:52:8b:40:3e:ed:59:11:11:ad:3a:23:19:d5:
                    55:a8:f9:9f:d2:fe:00:0c:8e:40:91:51:e3:4d:b6:
                    1e:77:ad:8b:d2:9f:0a:75:d9:7b:15:81:5f:3f:83:
                    ce:b5:ac:84:a8:00:d3:53:9a:69:4b:db:0f:f1:5e:
                    57:cb:d6:87:7d:62:76:44:d4:72:16:22:b2:50:13:
                    92:2d:5b:8b:24:3f:08:9b:0c:db:07:68:28:5e:26:
                    1a:5e:da:21:13:cd:b2:92:16:dc:b9:ae:5a:54:12:
                    19:96:58:92:7c:a4:d3:00:e8:78:43:41:a4:5d:de:
                    04:1e:44:e1:9a:c2:0b:8b:b2:85:ff:9d:af:1a:ac:
                    4b:23:0a:a0:ca:d4:28:69:eb:bf:fd:59:84:c8:98:
                    f3:ca:52:76:a9:b9:48:b4:30:48:6c:00:dd:cc:c9:
                    02:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.98.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:4b:10:64:5c:47:5f:5b:d2:6c:ff:be:97:56:0e:ed:6e:92:
         e8:47:cd:e2:f9:62:3e:6a:2d:0b:1c:90:c0:6d:5a:f0:fd:e5:
         94:d6:c1:7e:8f:ca:d0:32:17:58:f7:75:60:47:1e:79:30:75:
         7a:41:70:52:5b:60:da:ae:31:06:29:4b:59:c9:cc:fe:82:c2:
         db:81:c6:40:29:22:75:68:b5:bb:53:73:7a:20:c5:59:05:c5:
         3e:db:91:37:42:40:1e:6a:59:2b:56:ed:c8:20:9c:f8:d0:4b:
         ea:a0:a8:39:d1:1d:3a:9d:62:1e:91:43:45:6e:94:c5:3c:81:
         d2:f9:f9:2e:e9:5e:29:8f:02:33:15:00:60:2f:c2:54:01:ea:
         0d:10:1e:ea:66:43:89:9d:c6:d8:f9:6c:23:d3:ec:97:60:1c:
         5d:60:1a:99:64:a0:69:42:57:b4:08:f1:ec:4f:12:db:f7:a3:
         ec:41:71:f2:d8:73:1a:47:ab:a9:4d:32:63:9f:b6:9e:13:04:
         06:87:df:3a:60:2d:91:e5:67:9d:1c:16:88:8c:04:a3:07:40:
         5a:2d:76:a9:e2:67:aa:52:2d:25:52:9c:5a:44:9b:5d:00:ce:
         84:da:59:54:b0:b8:89:31:72:29:90:e0:d7:8c:02:ec:03:a4:
         cf:f1:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----