Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
File:                     706d4f00-fa89-4b22-8684-b968d577fab7.cer (raw, json)
Hash identifier:          pLaXqlaKbSzL7NakhwJO/lryrDlEOO9B2VUR6WK+GDQ=
Subject key identifier:   28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285847D01F15BECC1BB6BF606C4580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 08 Nov 2024 16:30:43 +0000
Certificate not after:    Thu 12 Mar 2026 15:28:49 +0000
Subordinate resources:    IP: 2610:20:: -- 2610:20:5fff:ffff:ffff:ffff:ffff:ffff
                          IP: 2610:20:7000::/36
                          IP: 2610:20:a000:: -- 2610:20:ffff:ffff:ffff:ffff:ffff:ffff

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d0:1f:15:be:cc:1b:b6:bf:60:6c:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov  8 16:30:43 2024 GMT
            Not After : Mar 12 15:28:49 2026 GMT
        Subject: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:57:8d:60:9d:6f:e7:29:6d:0a:8b:6a:20:18:
                    99:e6:ce:e8:a5:fe:2e:71:0d:d4:25:31:18:e7:8c:
                    65:e9:32:ed:9a:09:39:9a:2f:b3:f7:da:52:c0:a4:
                    8c:de:c0:93:56:2a:b7:a2:43:f5:3a:ad:52:72:bd:
                    6c:3a:91:50:e6:72:9f:e7:e1:ad:8b:2a:7b:05:09:
                    77:31:2b:75:5e:e6:9b:89:ae:67:91:51:c8:ad:3b:
                    3a:8c:7b:19:9f:25:58:8b:47:c5:0b:73:82:de:da:
                    36:d7:9d:ef:7a:68:83:f5:b6:97:6b:00:d9:b4:6c:
                    6d:04:12:68:5b:9c:c8:49:a5:e5:23:42:5a:64:f8:
                    6f:44:a2:75:21:39:18:c9:b9:4f:f8:6a:a1:9c:2b:
                    6d:96:6b:28:38:f1:8b:41:49:3c:a3:54:d4:8c:41:
                    12:cf:b0:f3:ae:bf:ec:9b:76:24:6f:9e:70:1c:e9:
                    3c:a4:cc:25:ff:d4:6c:70:e1:6f:62:e3:c7:3f:a4:
                    fb:88:5d:e5:86:f2:b3:f7:92:4a:03:35:60:ad:b1:
                    93:69:27:b3:80:13:21:65:dc:9f:4b:2b:26:da:6e:
                    82:2f:19:44:25:12:d8:8b:ea:f0:2c:74:ef:cc:ea:
                    e3:50:ac:74:88:35:7a:8b:bf:7f:03:34:27:c6:6f:
                    f3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20::-2610:20:5fff:ffff:ffff:ffff:ffff:ffff
                  2610:20:7000::/36
                  2610:20:a000::-2610:20:ffff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:af:a1:a3:99:f8:0a:eb:bd:56:37:fb:5b:6d:cf:e3:76:fb:
         ee:f7:04:47:28:48:e4:b5:f4:89:79:cd:d7:6e:54:fb:68:96:
         ae:26:e4:0e:77:d0:aa:45:d8:22:de:aa:2d:b1:d2:ec:b4:79:
         c6:9c:be:10:bb:e7:25:8c:61:7f:bd:c2:ff:6a:b0:72:b6:5e:
         7b:bb:83:ce:cd:f1:f1:5f:e8:80:0a:b8:aa:31:6f:a3:f4:f8:
         0d:a5:f3:5b:04:fc:ad:27:f8:c3:50:54:7b:0a:f1:6e:7d:1f:
         3c:8d:db:89:af:f0:38:04:fa:9b:cc:ab:5a:42:e0:15:62:e4:
         47:b1:00:f7:a5:0b:c9:4f:b5:22:c4:96:31:98:d9:2a:c0:73:
         89:3c:61:3c:e7:dc:ce:88:1c:0d:9d:dd:e7:b6:ca:e0:8a:07:
         46:3f:d3:07:e9:7a:d1:70:9b:b9:55:9a:73:c1:59:a5:96:27:
         c5:09:5f:a9:f6:a6:07:98:80:de:d8:ac:e5:f7:5b:a0:ce:e7:
         94:38:26:4d:32:96:a8:5b:aa:dd:fe:a1:71:83:d2:1b:c4:90:
         3e:5a:3d:8c:a5:35:4d:de:69:6a:be:4b:e4:09:3e:13:54:02:
         69:d5:e1:a6:e0:f5:8e:8d:48:cd:c1:8f:58:66:00:4a:78:cc:
         95:5c:64:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----