Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3.cer
File:                     8c36215c-1577-42c1-a44f-f836bc4d03b3.cer (raw, json)
Hash identifier:          rUOqHoaCxIAbpSzkUByCCLVOMjTelj5WBc4/GryGgb4=
Subject key identifier:   4C:2B:79:E4:83:8D:3F:7C:13:C6:22:20:71:AA:71:89:97:AD:7F:C0
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858438C8F5D354183D2AFBF296C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/8c36215c-1577-42c1-a44f-f836bc4d03b3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 14 Oct 2023 16:34:14 +0000
Certificate not after:    Fri 16 Jan 2026 17:34:14 +0000
Subordinate resources:    IP: 23.162.56.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:8c:8f:5d:35:41:83:d2:af:bf:29:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 14 16:34:14 2023 GMT
            Not After : Jan 16 17:34:14 2026 GMT
        Subject: CN=8c36215c-1577-42c1-a44f-f836bc4d03b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0a:ec:3c:08:a3:5e:54:d6:d5:7b:14:f3:e0:
                    63:9e:0d:be:07:fa:ab:55:47:15:30:eb:28:c1:d6:
                    4f:5f:ab:ce:2a:d4:14:a5:a9:01:82:a6:7d:a2:d6:
                    79:ff:8a:b2:99:d5:8c:a2:e2:75:a9:fa:0c:a5:38:
                    89:17:4b:3d:87:fd:bc:fa:86:85:2d:2c:c0:e9:2f:
                    24:74:dd:58:2d:5e:19:de:7a:54:f5:01:fa:a2:88:
                    9a:47:44:d2:0b:70:59:66:99:13:ba:56:6f:2f:c8:
                    46:11:73:90:4d:fe:6a:a7:00:4d:27:38:69:af:99:
                    7c:ce:8f:8c:0d:75:84:89:66:5b:d2:34:34:47:32:
                    24:0c:4f:c1:d8:9b:6d:f4:03:92:6d:9d:e6:3c:74:
                    d0:22:4a:7d:18:bd:07:6c:35:0b:fa:7e:60:4f:47:
                    be:6e:f6:85:4c:81:97:b9:44:c9:4e:36:df:f3:71:
                    c6:a4:df:6c:f4:c8:1e:e4:1f:33:a6:9f:c9:34:91:
                    30:da:30:57:8e:d6:ca:9c:e6:48:b0:3a:7d:ed:db:
                    ce:bc:50:8d:07:92:f0:f3:d6:14:27:2d:d7:7b:24:
                    3e:ae:be:32:42:4f:e1:95:ee:48:fc:a4:34:35:a0:
                    7b:8a:82:55:b0:da:2e:df:f9:d4:b1:1b:cf:f1:bd:
                    df:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2B:79:E4:83:8D:3F:7C:13:C6:22:20:71:AA:71:89:97:AD:7F:C0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/8c36215c-1577-42c1-a44f-f836bc4d03b3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c0:4a:f0:ac:8b:db:b7:f8:d9:38:fd:47:05:81:f2:1a:88:
         a0:88:23:e9:9c:e9:65:2a:56:c2:64:f8:c9:1d:f1:8d:9f:67:
         5b:5c:1f:c1:a7:e3:f1:c0:42:0a:47:b1:0d:e7:e0:bb:b1:5a:
         fe:89:57:8e:21:68:f0:b4:c3:67:c0:d9:05:86:36:24:39:0d:
         62:63:4f:5c:30:d5:11:47:42:9c:8b:ab:84:cb:30:b9:e8:30:
         72:d7:5c:76:87:d3:c4:65:a1:72:95:29:e5:ff:4c:01:6e:3e:
         27:d5:b2:3f:3c:e0:ee:08:f9:57:97:78:5e:be:a1:a9:41:87:
         4e:5b:79:68:05:9e:d1:51:cb:4c:ef:74:c6:96:22:05:7d:41:
         0e:12:0d:8d:62:d9:1f:a4:8d:5b:35:e7:30:40:cd:12:43:fa:
         fd:a6:7a:7a:6e:0a:1e:21:2c:67:fb:e0:ad:d0:b1:11:3a:78:
         5e:ff:0c:b3:a3:62:21:62:b3:28:31:71:6f:ef:e4:c9:df:e5:
         b1:5b:42:03:d9:37:f4:ac:7b:f9:36:6d:2e:07:b2:5a:1c:39:
         ef:fe:cb:b5:46:f4:d5:19:d8:90:45:8d:55:46:66:0e:02:32:
         3b:2a:f9:fa:81:94:b0:de:b7:db:e9:4d:0a:f8:99:ca:99:23:
         7c:ce:38:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----