Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de.cer
File:                     a31515c0-c04f-41e6-958d-172bcd0e21de.cer (raw, json)
Hash identifier:          qhWVmgzsiQMADG1a0n04nfM5L/Pp+KphKS4I07DIP3E=
Subject key identifier:   34:10:05:DB:51:42:AA:4B:B7:E9:54:56:8D:D2:82:82:15:5C:F0:95
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843EB5FD80205A40E0B6EFD2B40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/a31515c0-c04f-41e6-958d-172bcd0e21de.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 17 Nov 2023 15:40:17 +0000
Certificate not after:    Thu 19 Feb 2026 15:40:17 +0000
Subordinate resources:    IP: 131.104.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:eb:5f:d8:02:05:a4:0e:0b:6e:fd:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 17 15:40:17 2023 GMT
            Not After : Feb 19 15:40:17 2026 GMT
        Subject: CN=a31515c0-c04f-41e6-958d-172bcd0e21de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3d:5c:cc:d3:23:97:80:77:25:02:8b:6b:c6:
                    c4:ed:cc:66:da:eb:f9:33:98:2a:16:95:f8:8e:64:
                    8c:11:7e:c2:4d:c3:ef:f1:fd:b6:de:e2:aa:20:fe:
                    3a:92:e3:a1:0a:39:f4:f4:c5:31:fc:4a:af:bf:56:
                    01:11:8c:80:31:9d:75:69:45:b3:61:f8:e1:ca:45:
                    46:d2:de:cd:38:78:48:1c:eb:08:db:25:80:6e:83:
                    3c:c5:ca:1f:f1:5b:10:1b:6c:2a:2a:21:9b:05:ef:
                    03:95:b7:0b:69:c8:a7:91:86:6b:db:06:35:bb:bc:
                    45:80:01:c7:d7:c9:be:04:26:3d:6e:2a:ee:99:d0:
                    ee:c3:55:46:b0:9e:95:86:a4:19:64:a5:d5:91:60:
                    bd:a3:95:d5:b8:df:a7:a5:f2:17:e9:ed:9b:80:5e:
                    9f:4b:14:73:e7:0c:5e:28:00:75:23:ba:94:2f:30:
                    4d:c0:ff:4d:0b:96:56:c6:5c:ec:df:5e:c5:71:a8:
                    87:d4:63:1d:da:8e:88:21:cb:8d:3c:a4:d9:98:10:
                    5d:b7:75:0e:93:62:bf:65:b8:4e:f4:68:99:09:67:
                    1d:d8:64:d0:a2:67:6a:26:8c:5a:82:2f:a6:7f:f5:
                    7a:cc:3f:24:6e:4b:6e:ed:df:23:6b:48:ec:8c:47:
                    99:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:10:05:DB:51:42:AA:4B:B7:E9:54:56:8D:D2:82:82:15:5C:F0:95
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/a31515c0-c04f-41e6-958d-172bcd0e21de.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.104.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:cf:b4:99:14:bc:07:78:dc:61:6c:34:19:29:c7:5f:e0:86:
         08:62:1e:b9:27:cf:3e:cb:3a:19:e0:1c:5d:88:e8:4e:14:d4:
         74:fe:f1:e3:55:4d:07:59:33:f0:29:7e:d2:ca:b7:21:b4:d0:
         40:71:2d:15:9d:7f:e3:8d:c3:a5:8e:51:23:02:68:4e:bd:27:
         58:fd:49:76:f6:f7:c3:44:f1:af:fe:65:ca:c6:41:80:43:17:
         ee:09:e1:48:86:41:d4:f8:b5:15:d4:37:95:55:a4:36:b1:bb:
         8f:79:9f:71:9d:75:6a:3d:0a:9a:e8:c6:00:93:73:6c:76:eb:
         69:eb:f6:9c:ef:21:bd:d2:f6:2c:3d:33:72:1a:74:50:b0:06:
         60:bd:79:53:4b:a4:91:f1:40:1a:93:c7:15:57:b0:c5:2b:8e:
         fd:da:48:13:b7:6a:ab:47:8a:d4:b6:86:b6:95:02:99:c7:c6:
         19:32:3e:0e:4d:ea:de:d3:73:5a:1b:c4:f6:48:4f:a7:8d:0a:
         b5:13:57:71:88:52:77:a3:50:3d:da:a7:c7:17:4b:d8:3b:f9:
         4b:4f:42:bf:be:76:4f:00:7c:77:a1:8c:41:a4:2b:87:e3:4e:
         3e:b4:65:fd:83:92:bc:05:50:56:1b:da:32:56:62:5c:d4:c8:
         58:71:80:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----