Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
File:                     9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer (raw, json)
Hash identifier:          pKT6wwN27b6S5g+htlBtzhb6sx4lUeY347pq+40cqNY=
Subject key identifier:   A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858439543437DA59A4E6DDD151200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 17 Oct 2023 19:23:10 +0000
Certificate not after:    Mon 19 Jan 2026 20:23:10 +0000
Subordinate resources:    AS: 11573
                          AS: 15043
                          IP: 66.181.96.0/20
                          IP: 69.4.32.0/20
                          IP: 2605:82c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:95:43:43:7d:a5:9a:4e:6d:dd:15:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 17 19:23:10 2023 GMT
            Not After : Jan 19 20:23:10 2026 GMT
        Subject: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:c6:3b:b9:4e:3f:d6:96:ce:8e:3e:8f:73:
                    bc:2e:2c:cc:0d:70:1c:de:02:36:2b:f0:a4:17:1c:
                    a8:22:10:a9:0c:ce:9a:ac:f5:0e:67:ec:17:25:67:
                    02:39:e5:de:f2:fa:69:f6:58:c4:59:11:3d:37:c9:
                    49:50:3d:c4:7a:d2:12:57:0c:be:1b:ad:5c:1f:82:
                    93:5c:7a:c9:55:09:75:2c:c5:91:82:4b:4d:df:36:
                    8a:7a:4c:d9:e4:e6:69:9c:f3:23:c9:c3:2a:35:cf:
                    12:a3:e2:b3:d6:8b:3c:da:12:68:7e:a8:44:52:db:
                    2e:c0:c1:4f:37:ff:68:c5:1e:25:04:04:18:06:98:
                    0e:8b:35:9b:88:56:aa:d3:68:3f:70:c6:0f:10:63:
                    62:d7:35:a7:a7:5d:a5:f3:d3:08:83:6f:d1:e3:80:
                    71:9a:c5:db:1e:e6:d7:d5:37:4b:c2:a6:bc:f3:74:
                    83:4c:49:e1:d9:7a:08:ab:af:cb:a6:cf:5f:07:58:
                    bf:74:15:99:c2:fa:88:f0:4e:5d:4d:c3:c1:1f:69:
                    49:1d:0e:1b:a7:1b:54:80:00:31:4f:5a:7e:61:3e:
                    75:eb:49:b4:a5:89:36:fc:fd:1d:dc:c7:91:06:37:
                    41:cc:df:96:6c:36:0b:80:54:7d:9e:5f:f2:63:26:
                    22:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.181.96.0/20
                  69.4.32.0/20
                IPv6:
                  2605:82c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11573
                  15043

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:b3:64:45:f8:2f:d4:8e:11:c9:a0:b0:37:16:4b:ec:78:6d:
         ad:03:ef:5a:8c:d6:89:6d:4a:ee:6a:de:4d:9b:40:bb:60:a1:
         f8:97:fb:67:51:ba:cc:a3:ae:32:d4:02:74:8b:51:c8:1b:75:
         f5:a4:2f:8e:03:97:48:fa:c8:61:e8:77:0a:47:81:55:3e:70:
         7f:00:3a:08:38:46:25:53:e4:83:b7:10:d3:e5:5b:72:b8:0c:
         d3:3a:9c:32:bd:39:df:47:2d:2d:ef:55:65:7a:13:81:98:5b:
         48:c5:3f:64:db:65:96:26:1b:aa:58:bf:29:8a:31:00:3f:a6:
         44:69:f5:2b:95:f3:c0:e2:25:99:58:c5:d5:24:03:4e:64:e2:
         6a:a1:24:54:1d:75:d4:f6:60:ce:21:b4:8c:29:67:61:36:f4:
         91:17:0f:cb:b3:15:b0:f2:c2:1f:34:55:34:b9:62:5e:17:60:
         80:51:1d:a6:f8:63:5f:19:60:0f:36:5d:90:bd:80:57:95:dd:
         16:1d:b8:98:b9:29:8a:30:3a:f2:8f:19:3c:98:18:dd:38:cc:
         31:8b:51:de:cb:25:9c:ab:01:e8:d5:6c:b1:aa:de:c7:7e:20:
         e5:dc:a9:1a:e9:22:1c:87:93:55:a1:f5:2b:81:42:6e:d1:f6:
         2f:1f:aa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----