Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f.cer
File:                     77a14fd5-2a53-4594-81f4-ea694254c36f.cer (raw, json)
Hash identifier:          uPVnJ5mQjc/fA9TrB/u7ZxT6Zw2WZXdWa6l3HH3lC2A=
Subject key identifier:   1E:A1:64:80:57:A3:9C:6A:BF:A1:D3:AE:CC:2C:22:50:5E:97:90:6A
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858446F357C458DE357D4A3595840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f/77a14fd5-2a53-4594-81f4-ea694254c36f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 03 Jan 2024 21:01:38 +0000
Certificate not after:    Tue 07 Apr 2026 20:01:38 +0000
Subordinate resources:    IP: 69.12.106.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:6f:35:7c:45:8d:e3:57:d4:a3:59:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan  3 21:01:38 2024 GMT
            Not After : Apr  7 20:01:38 2026 GMT
        Subject: CN=77a14fd5-2a53-4594-81f4-ea694254c36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ee:c3:d1:bc:10:36:9e:87:ae:0d:a5:57:03:
                    08:38:44:5c:f0:a8:6a:a6:ae:ec:8f:87:ee:30:bc:
                    5c:d5:15:e0:1e:6f:2b:fb:c6:6d:59:08:74:6e:50:
                    4a:9a:9b:89:d8:7e:ed:c1:34:40:ec:0d:cc:7e:9c:
                    b7:98:eb:e9:94:45:4a:88:7c:47:e9:17:05:86:fa:
                    d4:e3:c2:cd:9f:b3:1c:12:34:ed:9f:bc:f2:84:a0:
                    cc:c0:de:53:93:84:88:f6:b6:b7:a1:da:06:af:98:
                    1e:45:4b:cf:b6:74:89:1b:7e:8c:33:3b:1c:ff:fb:
                    a0:a4:98:5d:08:01:31:bd:fe:a9:18:f0:de:ec:96:
                    dc:48:1f:8e:be:93:84:7f:fe:46:5e:66:97:e3:0d:
                    0a:5e:b9:4a:9c:60:53:fa:ba:c3:fa:a6:f4:b6:0e:
                    39:60:ff:dc:75:2b:20:4f:95:17:e8:ee:05:50:55:
                    ec:63:f4:3f:87:f1:9b:e5:c4:7f:90:63:8b:6e:60:
                    8c:65:bd:a2:f1:c8:d1:98:b9:6f:23:e7:2a:30:ae:
                    cd:fe:8e:c9:21:c3:de:9b:ec:ee:e1:b5:8b:cf:55:
                    c4:43:e2:84:7b:f4:c8:90:d0:73:0e:1f:a2:14:bd:
                    a6:50:ad:06:4e:f6:3a:59:43:95:05:15:f0:b9:09:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A1:64:80:57:A3:9C:6A:BF:A1:D3:AE:CC:2C:22:50:5E:97:90:6A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f/77a14fd5-2a53-4594-81f4-ea694254c36f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.12.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:92:83:66:9f:c2:b3:de:41:11:9d:b0:07:00:72:16:3d:47:
         7a:3a:44:32:81:be:d6:f8:c8:85:77:99:81:24:7f:59:a2:5b:
         0f:3f:da:6b:5a:61:d3:e1:88:42:71:01:40:90:04:49:44:6d:
         15:fd:5f:93:d6:f3:bf:d6:b4:72:af:30:43:e4:4b:de:8e:89:
         a0:b3:15:08:5c:7f:f7:e5:36:e3:fd:ca:e5:6a:8a:7e:e9:58:
         33:1e:45:fc:93:de:db:21:9d:2a:a7:23:d4:95:62:56:39:61:
         d0:25:d3:88:64:eb:8b:87:ea:03:57:b4:eb:50:30:0f:c5:a0:
         90:42:fd:93:bb:e1:f4:fb:75:d6:8e:e5:35:94:53:37:c6:ef:
         25:50:66:91:a0:4e:34:f4:bd:90:da:c3:b2:27:8d:9e:aa:fb:
         53:5a:96:d2:3f:c5:c9:d3:38:a5:99:18:60:aa:14:56:48:27:
         da:e0:2b:d0:4f:01:0f:3d:e2:b5:c2:d4:7d:06:67:a5:03:b0:
         0e:5d:5b:3b:a9:1d:73:a0:48:ae:4c:17:be:0b:df:1c:d1:f4:
         9a:6b:91:57:2e:9c:66:ca:6a:cf:b5:48:9f:8b:12:96:26:fb:
         f6:74:f1:7a:a7:0e:1f:26:20:aa:d8:e9:61:c9:16:87:da:aa:
         4e:24:28:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----