Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243.cer
File:                     69074f8b-bb58-4f2e-b2c3-2f7de91f9243.cer (raw, json)
Hash identifier:          uUxD4/3OgAQQH5lVlx6caGirgQZztKPk0fF1iFVh24k=
Subject key identifier:   48:BF:36:FF:4E:11:29:7B:66:1B:71:7E:BA:DE:00:D8:15:78:27:C1
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584436E1E208B7E22433190BEB00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243/69074f8b-bb58-4f2e-b2c3-2f7de91f9243.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 14 Dec 2023 16:47:55 +0000
Certificate not after:    Wed 18 Mar 2026 15:47:55 +0000
Subordinate resources:    IP: 216.176.40.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:36:e1:e2:08:b7:e2:24:33:19:0b:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec 14 16:47:55 2023 GMT
            Not After : Mar 18 15:47:55 2026 GMT
        Subject: CN=69074f8b-bb58-4f2e-b2c3-2f7de91f9243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c9:f3:ee:bd:b4:a6:de:a8:ce:8e:a1:2b:26:
                    72:b9:c8:08:47:22:f6:6e:61:ce:47:c5:fa:46:23:
                    c7:67:95:f5:7a:5a:f1:81:8a:a8:5c:6d:17:47:59:
                    e7:b4:93:36:2d:fd:79:9a:b3:22:76:bd:c8:07:e0:
                    06:d5:5f:ca:ad:82:01:ed:13:0b:0e:34:fa:aa:84:
                    b6:56:80:31:9b:6d:c4:a6:89:87:1e:c0:bd:e6:fd:
                    c9:5d:ee:26:2b:58:66:0a:0b:7e:a3:d1:06:d8:7c:
                    92:14:ad:89:b5:af:5a:a9:d8:87:a6:d7:56:d2:2f:
                    f5:10:3f:58:b1:08:3a:43:67:8a:1e:7c:90:70:35:
                    32:e0:ee:0b:10:ca:27:da:98:b5:41:8b:d0:f0:9d:
                    22:1b:8d:62:09:59:90:78:a9:db:f5:10:a4:41:ca:
                    db:53:49:ac:78:2e:2f:7a:da:e3:c6:51:79:9a:4c:
                    0a:22:c4:fb:52:f7:0c:6a:6a:ed:e3:b3:f2:5f:3d:
                    ec:68:6d:a7:e3:6e:85:52:03:d4:b0:5a:52:7c:0f:
                    0c:88:f2:31:4a:82:3c:31:bd:66:d7:8a:b9:a5:ad:
                    4b:e5:d5:69:df:7a:57:33:94:5f:78:f6:75:b9:15:
                    12:38:33:a4:c9:43:47:d1:07:33:2a:f5:06:e1:48:
                    a5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BF:36:FF:4E:11:29:7B:66:1B:71:7E:BA:DE:00:D8:15:78:27:C1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243/69074f8b-bb58-4f2e-b2c3-2f7de91f9243.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.176.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:31:78:c4:67:33:ad:84:62:d5:5a:74:2e:7a:ce:f9:79:90:
         a2:33:fd:35:0a:a4:cc:81:74:43:12:dd:46:34:76:c9:2b:fc:
         fa:02:1d:85:1e:df:ca:64:54:77:60:32:32:9a:ee:57:dc:59:
         67:47:21:cd:93:ce:2c:8e:6c:f0:d4:cf:63:29:42:8e:1b:94:
         cd:12:fa:a6:51:fb:b6:a7:32:a7:a0:45:96:46:d3:3c:97:66:
         38:53:bc:f5:6f:ca:42:d5:29:8d:06:b7:d2:05:da:0b:d0:e2:
         b6:3d:f8:5b:4e:c3:d8:1b:ff:4f:bd:71:a4:44:f7:9d:ed:31:
         6c:89:4a:6a:b4:09:82:af:60:82:34:8c:2b:64:e2:5e:72:e0:
         aa:0d:99:5f:07:9f:6c:60:f4:5a:bb:97:09:69:6d:7c:2d:01:
         0d:52:b7:67:82:eb:49:11:c5:e6:a9:6b:89:24:69:34:ca:1c:
         11:77:c3:1f:8c:a5:87:14:b7:e3:c2:d8:11:73:46:78:d3:eb:
         06:94:24:b9:3d:88:56:89:fb:03:c4:20:f3:9d:cf:63:37:58:
         d5:52:2b:d7:a1:9d:f3:a2:26:2c:f9:16:a5:f6:fa:ed:78:f2:
         b1:98:dd:b5:3a:a6:e7:b4:df:36:e6:14:c8:99:b7:26:2a:31:
         82:00:01:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----