Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207.cer
File:                     6a90d484-8cf5-4f91-8c7a-469325853207.cer (raw, json)
Hash identifier:          GM3tAz1WeAkHazyk7MnnXgzc7sMMGoAksntOYUXpUrQ=
Subject key identifier:   12:9B:D9:B8:55:06:FC:3A:7A:B0:26:41:F8:6A:0E:D6:26:39:BB:18
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584473280AD72B0479F8ED836240
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/6a90d484-8cf5-4f91-8c7a-469325853207.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 05 Jan 2024 06:57:47 +0000
Certificate not after:    Thu 09 Apr 2026 05:57:47 +0000
Subordinate resources:    IP: 23.168.232.0/24
                          IP: 2602:f9af::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:73:28:0a:d7:2b:04:79:f8:ed:83:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan  5 06:57:47 2024 GMT
            Not After : Apr  9 05:57:47 2026 GMT
        Subject: CN=6a90d484-8cf5-4f91-8c7a-469325853207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9d:12:15:c9:72:e9:24:23:b3:90:26:c8:04:
                    3a:3b:81:0e:36:f0:e8:5f:b3:72:a3:d0:1f:b6:a1:
                    5f:76:fe:40:6b:ef:3c:63:90:0f:ea:06:bd:3b:2c:
                    91:c6:7c:ea:24:98:a3:2d:4b:ed:d8:58:28:70:02:
                    75:60:9e:a6:0a:91:63:53:ac:4c:4d:30:d0:fb:ff:
                    6b:16:25:ae:12:c1:ed:96:4c:f4:ba:47:b6:5d:f9:
                    00:7d:c4:69:4e:cc:95:45:35:55:a0:91:01:d1:ae:
                    71:a4:1e:ab:e4:8e:6f:7c:d9:12:64:6d:3a:69:e9:
                    f3:61:92:35:17:38:b5:e8:1a:cb:92:1e:41:76:f5:
                    37:23:9f:c7:17:4e:b8:fc:9e:7b:68:9a:6f:b1:a8:
                    26:ed:5d:24:d2:8a:8f:9e:db:f7:03:08:bc:1f:71:
                    e2:78:6b:53:16:c6:4f:1f:da:bf:5a:f8:0b:1c:ab:
                    f9:62:83:90:e2:7a:cf:da:bd:5f:63:93:41:70:15:
                    46:f3:6a:57:c9:b4:70:a5:dc:bb:0e:0d:4b:79:42:
                    e9:ef:00:01:73:e3:b7:65:4e:91:24:08:cc:a9:81:
                    95:58:4e:1c:6f:85:36:e3:0e:82:f5:32:c3:56:c6:
                    c7:b0:c8:19:92:1b:5b:8d:ed:af:84:f3:f8:bb:f8:
                    79:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9B:D9:B8:55:06:FC:3A:7A:B0:26:41:F8:6A:0E:D6:26:39:BB:18
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/6a90d484-8cf5-4f91-8c7a-469325853207.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.232.0/24
                IPv6:
                  2602:f9af::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:7b:9b:66:b3:7e:f1:74:cc:5a:c5:6b:57:bd:09:2e:53:5d:
         fd:56:66:20:ae:fa:28:62:e2:68:27:17:c8:b0:9a:56:5d:f9:
         95:88:0c:9c:9f:48:05:60:ed:55:f3:e7:ae:07:55:c1:ff:c0:
         fa:5e:7d:8a:fe:50:ab:45:5f:45:ea:df:a1:12:bc:3c:bd:3d:
         f6:25:6a:f3:42:47:85:67:cb:e8:cf:08:14:ad:d2:49:cd:b2:
         89:82:7b:29:c2:c4:fd:5d:84:ff:d7:da:62:14:85:b5:b2:cf:
         e2:d6:b8:fa:78:0b:3a:fb:8e:5a:6e:9a:a9:93:0c:dd:58:65:
         71:d0:e3:2d:67:1b:70:65:2f:b0:f2:a8:86:bf:56:e6:40:1d:
         1a:06:ec:9e:43:19:35:03:b2:01:90:86:57:6a:e8:3b:f5:ca:
         ea:c7:0b:23:53:4d:9c:b0:67:fe:a3:51:07:12:d3:75:6e:76:
         b0:a1:1f:d1:7a:55:02:1d:80:cf:60:e9:9c:10:7a:04:8f:ea:
         ab:22:cb:50:bc:89:1a:eb:ae:43:d3:ee:0e:7c:fc:46:23:ae:
         45:2e:ae:b5:43:a9:47:3c:9f:21:8b:8f:94:d1:f7:fe:c0:5b:
         37:20:98:e0:4f:d1:85:54:3c:4a:d5:5c:7a:12:3d:e5:63:7e:
         b4:a4:9c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----