Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.cer
File:                     7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.cer (raw, json)
Hash identifier:          9udtAyzbZaHjUsTY4XvRu04/fLQpF45nEirqZ3XswQ4=
Subject key identifier:   FA:37:7E:30:C4:98:61:DA:07:EE:89:10:AD:D1:05:C7:89:CF:E7:99
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858452C1C546CD38B8860E67BCF80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 11 Mar 2024 12:58:43 +0000
Certificate not after:    Sun 14 Jun 2026 12:58:43 +0000
Subordinate resources:    AS: 20091
                          IP: 23.132.64.0/24
                          IP: 2604:6c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:1c:54:6c:d3:8b:88:60:e6:7b:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Mar 11 12:58:43 2024 GMT
            Not After : Jun 14 12:58:43 2026 GMT
        Subject: CN=7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f1:b5:86:35:46:67:e4:3f:6a:ac:1f:1c:99:
                    1b:73:53:6a:35:ff:57:45:67:bf:97:f2:c1:97:83:
                    c6:a3:db:2f:fd:08:cd:d9:94:f6:33:7e:94:a6:c4:
                    29:a6:6d:a4:b9:10:40:13:6c:a1:27:97:fe:4f:2d:
                    bb:1e:6a:bf:44:58:e3:39:6f:e3:d0:4c:41:72:e5:
                    3b:d6:04:07:bf:aa:88:04:d1:ed:75:0b:9c:05:06:
                    2b:af:4f:0a:31:eb:83:cd:a2:6b:4b:ee:f8:d2:25:
                    b8:81:58:c9:52:77:79:5f:27:e0:9b:90:10:93:3f:
                    54:d8:4a:eb:f1:5c:ed:77:78:bd:3e:05:3d:34:84:
                    f4:3f:4f:ed:50:91:0b:1f:79:8e:3e:40:e7:f3:8a:
                    6c:ba:3b:8c:4b:84:2f:5a:2d:c6:e7:36:fb:98:cd:
                    d0:40:86:11:39:e7:ad:77:8d:3f:5c:b2:9c:9f:0e:
                    6d:f2:2d:2e:b0:a9:78:2f:2f:e3:2a:21:87:c5:6a:
                    34:a0:eb:b5:99:84:0f:1c:4a:e1:78:b7:67:51:cb:
                    f5:13:ec:5f:f3:ba:1d:bd:b5:01:ed:ad:85:70:47:
                    7c:6d:a6:6d:aa:43:af:88:2e:3e:33:2e:f5:f2:de:
                    94:86:ca:d9:a9:0c:f6:ec:ff:5e:05:ca:73:b0:b1:
                    08:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:37:7E:30:C4:98:61:DA:07:EE:89:10:AD:D1:05:C7:89:CF:E7:99
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.64.0/24
                IPv6:
                  2604:6c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20091

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:3c:7b:f8:90:44:a3:23:a9:3d:a8:08:6c:84:ac:64:e7:54:
         b7:66:c3:a1:70:c8:7c:5e:5d:3e:0f:b7:9e:33:75:a1:86:93:
         81:ce:69:1a:c0:ac:09:4a:7d:fa:04:ad:48:84:22:a6:c8:3a:
         43:c1:91:c5:03:ae:05:4f:80:2a:f0:0a:4c:8a:af:d8:d6:9b:
         00:43:ba:48:38:7e:4c:c5:eb:62:b5:d3:aa:ef:a1:77:35:5b:
         ea:49:91:33:18:28:f7:fc:91:1b:41:4e:60:39:aa:01:50:26:
         22:26:0f:29:60:0c:4b:95:6b:62:08:eb:39:3a:85:67:5f:fc:
         ca:cc:21:02:7a:de:05:72:bb:a0:43:75:00:39:f8:d0:08:19:
         4f:3e:3e:19:c3:e5:44:ef:b1:c3:42:84:30:83:7f:a8:e0:c4:
         20:fe:7e:1f:26:ad:af:da:dd:f8:99:bd:d3:ba:4f:e3:de:a5:
         ce:bb:ea:b6:3b:91:c5:18:2a:fd:17:b9:5f:38:82:65:00:90:
         ec:68:8d:64:34:48:1d:a1:7a:43:1d:47:30:b1:63:24:f7:30:
         ef:59:a7:3a:96:c1:b3:58:c3:31:62:24:0a:b7:fb:7d:2f:24:
         b6:24:ab:9a:ef:26:1e:0d:18:60:75:4c:0c:cb:53:a4:fb:8b:
         30:8b:ad:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----