Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/918aa42a-20cc-4d33-9cbb-056cffa16804.cer
File:                     918aa42a-20cc-4d33-9cbb-056cffa16804.cer (raw, json)
Hash identifier:          x5biJb/FKrD5zsdHkt+3aD3jG0l7rKAyI08+Rfi0pVc=
Subject key identifier:   22:6D:49:7B:7B:A0:F3:2A:27:98:4E:09:9C:38:F6:F5:30:E7:45:EF
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584473C597BF70940767250AACE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/918aa42a-20cc-4d33-9cbb-056cffa16804/918aa42a-20cc-4d33-9cbb-056cffa16804.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/918aa42a-20cc-4d33-9cbb-056cffa16804/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 05 Jan 2024 12:15:13 +0000
Certificate not after:    Sun 18 Jan 2026 21:08:32 +0000
Subordinate resources:    AS: 32151
                          IP: 192.245.168.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:73:c5:97:bf:70:94:07:67:25:0a:ac:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan  5 12:15:13 2024 GMT
            Not After : Jan 18 21:08:32 2026 GMT
        Subject: CN=918aa42a-20cc-4d33-9cbb-056cffa16804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:67:0c:e1:69:ce:a3:f1:5a:0f:5a:aa:be:ef:
                    b5:16:90:13:95:6a:28:36:6c:0a:73:06:d2:a0:e0:
                    c9:ce:48:c2:07:07:96:d2:e6:1e:12:d3:07:ec:07:
                    f6:94:10:26:fc:3a:88:e0:a1:bd:30:1c:fe:22:62:
                    6a:00:71:d7:ef:15:75:33:d5:e5:71:ba:a5:38:73:
                    d0:d9:96:07:17:33:f3:19:07:38:a1:f1:76:f1:29:
                    fc:d5:47:31:02:1a:4a:7f:50:77:9b:6b:f4:06:25:
                    26:e3:51:a0:2d:4e:9d:9f:bc:bc:6b:40:69:e7:22:
                    e6:34:43:9f:82:ec:28:1c:e4:b8:78:0b:3c:3d:de:
                    b0:b7:51:c8:37:dd:0f:77:77:ed:c6:1b:13:5c:1d:
                    50:e3:66:ed:4b:87:3e:bc:f1:27:03:ab:60:cd:cf:
                    e0:96:32:a2:be:31:93:8a:39:fa:45:0d:cb:24:07:
                    b8:54:84:52:9b:4e:f0:9c:de:54:52:b0:00:4d:76:
                    d7:d1:13:01:f8:82:13:62:91:54:28:6f:10:a0:19:
                    5a:51:31:c0:bf:95:a0:1d:8e:fb:fb:c2:e1:52:d9:
                    6e:16:bf:e6:95:ef:a0:66:f4:5b:a7:f2:ac:53:cd:
                    26:e2:16:2a:91:ef:d9:68:e4:df:d3:ed:fb:dd:47:
                    b9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6D:49:7B:7B:A0:F3:2A:27:98:4E:09:9C:38:F6:F5:30:E7:45:EF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/918aa42a-20cc-4d33-9cbb-056cffa16804/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/918aa42a-20cc-4d33-9cbb-056cffa16804/918aa42a-20cc-4d33-9cbb-056cffa16804.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.168.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32151

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:4a:56:01:a9:cc:a7:6f:e3:d8:53:7a:9f:85:8b:d2:40:48:
         49:9a:98:c9:63:67:d3:4e:a0:5a:bd:19:eb:d3:b0:51:a7:f0:
         50:56:16:e9:86:fc:55:2f:61:02:72:69:66:4e:f5:8f:2d:33:
         32:8d:b3:d2:c5:7c:00:46:93:50:e0:cb:62:50:ae:ec:6a:b2:
         99:35:1b:1d:59:4d:d5:97:97:c4:a9:af:24:ee:f3:d1:22:aa:
         ef:84:14:62:62:40:21:57:11:ed:28:4d:58:5d:48:e5:64:2a:
         c3:cb:b2:81:d5:bc:10:f2:35:a6:04:ec:06:48:bb:67:50:df:
         9c:7f:69:3c:91:42:f7:30:44:ec:43:1b:e8:08:60:5d:89:2e:
         9d:c6:a7:ad:50:46:4e:91:f6:2e:02:c3:20:a6:51:e2:3d:18:
         ff:45:e3:0c:c9:83:f2:7f:f7:74:b2:c7:cb:28:2f:fa:03:8f:
         ed:b3:81:27:d0:6e:b1:4e:5c:2e:f8:87:19:a8:ad:68:99:4e:
         5f:9d:3d:fd:b5:76:d1:37:50:e1:1a:34:11:03:c9:6c:3a:e2:
         ba:c7:fe:19:d4:7a:90:8b:f6:07:55:ce:b8:0a:b8:58:41:0b:
         6c:83:c2:cb:49:22:9f:d5:70:e0:00:94:38:f7:07:16:34:5e:
         a8:c3:45:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----