Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer
File:                     971a94fb-9c36-412b-ae91-2ddb520de93f.cer (raw, json)
Hash identifier:          fZZCdPgXcWwTvm3lkul2tOhXNjPHq7c/ketnXfwipEs=
Subject key identifier:   E0:27:CC:9E:09:06:01:0F:82:20:10:EE:4A:73:6C:44:EB:86:A5:ED
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843B072EBA7042336AB60B8D280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 27 Oct 2023 13:06:01 +0000
Certificate not after:    Thu 29 Jan 2026 14:06:01 +0000
Subordinate resources:    AS: 400729
                          IP: 192.157.28.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:b0:72:eb:a7:04:23:36:ab:60:b8:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 27 13:06:01 2023 GMT
            Not After : Jan 29 14:06:01 2026 GMT
        Subject: CN=971a94fb-9c36-412b-ae91-2ddb520de93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5c:86:d7:38:58:78:20:9d:0d:7d:57:80:fb:
                    e7:5c:8f:a6:f9:17:79:fc:ed:b3:ea:97:5a:f1:3b:
                    c0:fe:3b:2a:99:b7:f2:19:09:83:6e:a3:af:3f:ae:
                    0e:17:c1:73:a9:00:2f:d4:88:1a:ab:7d:fd:9a:ce:
                    cb:ea:b9:7c:97:98:b4:e3:4d:12:fc:52:e4:77:19:
                    f0:03:c0:e0:70:d4:5f:4b:b2:5f:5f:db:ce:ec:dc:
                    29:51:9d:9a:b5:e0:3b:18:13:93:c0:84:93:d3:a4:
                    4f:98:7f:6d:83:bd:0f:21:c5:3d:ea:70:92:26:fc:
                    57:5e:ba:26:54:4d:38:64:82:f0:2e:a2:b3:ea:f3:
                    65:ce:e3:01:40:7c:19:8b:a9:76:dd:aa:90:41:59:
                    37:40:12:51:9b:54:43:8f:1f:37:83:51:39:93:5a:
                    d4:d3:3f:e6:bb:fb:4c:89:8c:8f:35:a9:93:48:22:
                    dc:fe:e0:cd:08:0a:c0:4e:b4:73:03:13:99:1a:03:
                    8f:56:18:c4:1f:fc:4e:02:d4:dc:f9:70:17:f0:3e:
                    e7:9e:96:fa:28:47:f2:24:0e:b8:68:a7:74:32:64:
                    21:6f:8f:4c:95:80:0e:ee:a7:dc:bb:ff:7b:3d:b3:
                    7e:c3:84:2c:ed:f3:3f:52:23:a2:1e:0c:7a:0a:69:
                    bb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:27:CC:9E:09:06:01:0F:82:20:10:EE:4A:73:6C:44:EB:86:A5:ED
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.28.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400729

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:4a:e2:4d:56:89:e0:bc:29:e6:9a:22:70:f6:e1:68:3c:79:
         77:81:c2:3d:ba:07:4c:41:67:cd:d0:7f:6b:fc:84:28:53:97:
         eb:92:62:f0:2d:b7:bf:25:a2:f0:4c:55:16:75:b8:ea:e3:4a:
         35:f0:60:a1:09:1e:7f:5e:b2:63:47:9c:f0:c2:5e:ec:67:8b:
         65:4e:9e:82:c7:7a:56:02:12:f8:86:0a:ab:a0:20:7d:3a:26:
         ae:d1:98:c9:a9:5e:f0:ce:15:3e:14:d3:29:41:f6:9c:a8:4a:
         59:2e:16:9e:bd:69:36:d2:33:14:17:21:e0:15:34:4a:8f:f0:
         5f:80:87:5b:36:b7:08:a2:46:35:f5:dc:26:50:af:af:4a:c5:
         48:8a:21:da:93:54:c6:c1:1e:ae:22:8a:3d:1e:f3:fc:5b:4f:
         d5:5f:10:6d:96:05:4e:32:30:2a:74:4d:a1:37:b4:2b:92:0f:
         b4:fd:42:40:14:22:2a:cc:93:ca:b8:c9:98:cd:6d:8d:90:0d:
         c9:b5:9b:6b:72:16:05:5f:6c:7f:64:95:03:e1:d7:40:73:73:
         57:89:88:9a:17:2b:d3:97:8c:f5:98:01:50:47:61:64:3a:63:
         5b:e5:37:f0:cf:d0:d2:80:23:99:15:78:85:78:03:d0:c0:84:
         21:fc:69:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----