Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer
File:                     804758a5-8bfa-463f-a66c-d50aa7237fff.cer (raw, json)
Hash identifier:          ILcBNw6d7fCMiQUNuIFUEGitCIHf6J2oQITUmoKV+KQ=
Subject key identifier:   C5:AC:F5:21:04:22:63:10:CB:AA:76:9F:4D:D9:1D:6F:49:B9:93:8F
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843E00A9719A9ECCB5BF41DC178
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 13 Nov 2023 14:14:36 +0000
Certificate not after:    Sun 15 Feb 2026 14:14:36 +0000
Subordinate resources:    IP: 150.148.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e0:0a:97:19:a9:ec:cb:5b:f4:1d:c1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 13 14:14:36 2023 GMT
            Not After : Feb 15 14:14:36 2026 GMT
        Subject: CN=804758a5-8bfa-463f-a66c-d50aa7237fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:81:d0:f0:f9:1b:e0:9a:2d:07:6b:bc:fc:
                    e7:54:3f:1a:61:42:05:0b:ba:c1:57:23:ae:e2:be:
                    ef:af:ec:c8:20:87:34:aa:60:6c:87:95:fd:c7:29:
                    57:44:1d:9d:31:43:da:a8:39:af:20:9b:62:af:1d:
                    ae:e4:68:28:b2:80:fb:27:ac:9c:e6:16:52:4a:ef:
                    56:d6:6a:09:31:c5:6a:84:ff:45:6a:38:cc:72:28:
                    52:82:3d:43:ac:b4:ef:bd:b4:22:49:9b:7f:4a:e6:
                    96:50:74:bc:f1:84:8f:b4:20:1d:ae:5d:f0:bd:3e:
                    1b:f2:fe:5f:ec:e1:49:e4:81:57:59:58:b1:1c:28:
                    14:94:03:fe:3e:6d:6f:2a:7f:d0:51:f0:f6:00:c6:
                    58:fd:8b:29:80:25:6c:a5:8a:0d:db:34:82:ef:3b:
                    fb:b7:17:f3:69:ec:a3:20:f7:2d:d5:9f:62:5e:7a:
                    9d:09:be:79:ad:24:78:7f:a1:3f:24:1a:9f:1d:e5:
                    39:56:0c:00:bf:6f:4b:bb:83:a0:ac:ea:29:29:40:
                    e2:d7:b6:27:ef:3c:b3:ce:b6:bb:73:2f:eb:66:56:
                    db:1a:d4:5b:b3:46:db:c0:5e:cd:59:43:9a:e9:3a:
                    be:ae:6b:35:ac:68:63:03:ce:dd:e3:ee:a7:b3:fa:
                    6e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AC:F5:21:04:22:63:10:CB:AA:76:9F:4D:D9:1D:6F:49:B9:93:8F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.148.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:99:c7:4d:df:62:1d:8c:a9:7b:b2:5e:58:a8:4d:68:65:51:
         f6:27:58:a5:42:76:0e:95:bc:29:05:b3:28:66:07:f3:5a:8a:
         14:c6:1c:ad:89:94:08:40:65:a2:96:8d:1a:d4:2c:36:fc:f0:
         f9:42:4f:2d:3a:04:68:d9:3f:66:8d:6f:b5:4a:70:3c:a7:d0:
         6e:12:6b:5b:39:d4:26:c8:07:aa:94:84:45:18:ca:28:c2:d3:
         4a:71:6f:42:f9:52:49:43:bc:f0:6f:b1:51:8d:bf:c4:7b:7c:
         e8:12:52:2d:4b:ce:36:75:69:01:fc:74:5b:f1:b5:5c:1c:da:
         0b:5a:64:4a:8c:bf:29:db:0c:9f:60:23:2c:61:0d:f8:3f:4c:
         3f:bd:4f:aa:41:fb:c0:d2:f2:2b:39:75:03:67:75:15:2f:43:
         98:c9:79:7b:fc:08:47:7e:30:54:f9:08:59:cc:7e:e4:d9:56:
         a3:75:0f:14:09:95:45:d3:4d:db:20:d5:ee:77:02:e9:6c:2d:
         e0:40:68:53:f7:0b:1d:3a:36:60:17:7c:f5:da:76:68:ae:b5:
         4b:20:f2:13:e1:40:5f:7f:66:f6:47:4b:fb:fe:bc:8f:2b:31:
         63:2f:ff:d6:e7:01:9e:83:20:10:1f:9e:3c:5d:9e:55:46:3b:
         9a:10:47:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----