Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
File:                     706d4f00-fa89-4b22-8684-b968d577fab7.cer (raw, json)
Hash identifier:          Ewf76BBCduWYScV4syZmI6Ab86aaY5YF8Ia8nE0SQrc=
Subject key identifier:   28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584426184C53A2965C73A0CAD800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 08 Dec 2023 16:28:49 +0000
Certificate not after:    Thu 12 Mar 2026 15:28:49 +0000
Subordinate resources:    IP: 2610:20::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:26:18:4c:53:a2:96:5c:73:a0:ca:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec  8 16:28:49 2023 GMT
            Not After : Mar 12 15:28:49 2026 GMT
        Subject: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:57:8d:60:9d:6f:e7:29:6d:0a:8b:6a:20:18:
                    99:e6:ce:e8:a5:fe:2e:71:0d:d4:25:31:18:e7:8c:
                    65:e9:32:ed:9a:09:39:9a:2f:b3:f7:da:52:c0:a4:
                    8c:de:c0:93:56:2a:b7:a2:43:f5:3a:ad:52:72:bd:
                    6c:3a:91:50:e6:72:9f:e7:e1:ad:8b:2a:7b:05:09:
                    77:31:2b:75:5e:e6:9b:89:ae:67:91:51:c8:ad:3b:
                    3a:8c:7b:19:9f:25:58:8b:47:c5:0b:73:82:de:da:
                    36:d7:9d:ef:7a:68:83:f5:b6:97:6b:00:d9:b4:6c:
                    6d:04:12:68:5b:9c:c8:49:a5:e5:23:42:5a:64:f8:
                    6f:44:a2:75:21:39:18:c9:b9:4f:f8:6a:a1:9c:2b:
                    6d:96:6b:28:38:f1:8b:41:49:3c:a3:54:d4:8c:41:
                    12:cf:b0:f3:ae:bf:ec:9b:76:24:6f:9e:70:1c:e9:
                    3c:a4:cc:25:ff:d4:6c:70:e1:6f:62:e3:c7:3f:a4:
                    fb:88:5d:e5:86:f2:b3:f7:92:4a:03:35:60:ad:b1:
                    93:69:27:b3:80:13:21:65:dc:9f:4b:2b:26:da:6e:
                    82:2f:19:44:25:12:d8:8b:ea:f0:2c:74:ef:cc:ea:
                    e3:50:ac:74:88:35:7a:8b:bf:7f:03:34:27:c6:6f:
                    f3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c8:cd:56:08:d5:d2:f5:95:20:d3:2d:af:19:e3:e9:90:b9:
         23:39:f8:92:ab:f2:c0:0e:fe:3e:c4:35:00:f4:86:87:90:e7:
         f9:d8:56:a2:55:37:d8:5c:e5:cd:5e:37:73:c6:8d:7d:78:70:
         f8:bb:b3:2b:1c:42:6e:92:03:f1:d5:d7:a1:08:9e:1f:f5:62:
         51:1d:f6:6e:c3:32:d8:39:42:d8:f9:5e:4b:93:9f:73:a8:99:
         4d:ba:98:bb:3f:7c:8b:bb:9a:42:b8:bf:86:a4:61:25:ac:3a:
         8f:f8:cb:c5:04:de:18:27:94:fb:99:0f:b8:5a:22:b3:41:2b:
         d4:58:0f:4d:38:59:94:22:93:d8:6e:2d:9b:61:9d:0e:73:b2:
         36:1e:90:40:58:92:36:71:f8:c3:2f:79:e5:10:5d:35:a1:e4:
         c0:30:68:db:3f:9c:95:f8:ba:bf:a9:a7:c2:41:f2:46:42:74:
         f9:d3:44:38:c6:be:6d:3f:da:14:43:17:cb:01:c4:c2:19:88:
         74:8c:b6:58:f9:c0:22:4c:70:97:7c:2b:05:0c:66:c6:90:97:
         26:22:0d:89:86:85:8a:b0:01:4c:c9:a2:7c:a1:03:cf:6d:d5:
         49:46:18:b3:bd:e2:e8:d5:19:72:f0:d2:33:40:e5:12:52:88:
         c0:86:0e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----