Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17.cer
File:                     a353a6ed-43c3-4996-b762-0b1c02617d17.cer (raw, json)
Hash identifier:          wzwqSs0Jhlrem/QYQ0EqGp9W0jw3s4T7dSIHVmbBaLg=
Subject key identifier:   AF:29:9E:36:51:0C:95:3B:AF:12:12:E5:63:37:50:16:EB:3D:8B:E8
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858443775D4787EF94B8B2336DB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17/a353a6ed-43c3-4996-b762-0b1c02617d17.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 14 Dec 2023 21:46:01 +0000
Certificate not after:    Wed 18 Mar 2026 20:46:01 +0000
Subordinate resources:    AS: 54307
                          IP: 205.207.178.0/24
                          IP: 2620:a8:6000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:37:75:d4:78:7e:f9:4b:8b:23:36:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec 14 21:46:01 2023 GMT
            Not After : Mar 18 20:46:01 2026 GMT
        Subject: CN=a353a6ed-43c3-4996-b762-0b1c02617d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:d1:44:0f:49:60:31:aa:07:9c:4c:77:ef:
                    26:57:df:22:de:9a:31:4d:92:15:25:6f:ca:30:75:
                    21:16:3f:1d:ac:fa:8f:f9:38:12:ad:b0:9a:d2:2b:
                    a8:74:d0:9a:04:45:26:ba:4f:8c:be:3e:6e:dd:c4:
                    43:2a:fc:5a:19:98:7a:d4:c8:97:dd:b0:77:6b:82:
                    16:3b:c4:ac:0e:c5:1b:a4:74:c3:50:44:e4:1a:a9:
                    3e:8d:18:92:fa:60:36:48:1a:7e:0d:e6:d7:27:96:
                    e8:ed:c8:ee:f1:aa:be:f2:3e:79:ca:3b:62:eb:43:
                    6f:5d:b5:6b:04:68:3e:97:06:bb:b4:fa:00:29:65:
                    06:f4:be:dd:ea:96:af:fe:09:a3:11:91:9c:75:94:
                    fb:b9:da:b9:d2:4d:60:39:d4:56:80:75:2c:31:4b:
                    2d:77:6d:58:ef:ff:f0:f5:0f:14:48:56:c7:d9:3d:
                    7f:21:63:fd:32:31:15:35:f8:bd:99:0f:12:27:3f:
                    5d:89:97:d9:e5:48:42:5e:2a:e4:2d:3b:f9:24:c6:
                    52:6e:ec:69:38:82:9e:ef:23:ae:63:57:76:35:1c:
                    1e:48:38:a8:4f:fb:c6:ed:68:17:a9:e2:c5:ff:ec:
                    70:8c:ba:d6:c2:8a:5c:53:22:5e:fb:05:66:2f:90:
                    d4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:29:9E:36:51:0C:95:3B:AF:12:12:E5:63:37:50:16:EB:3D:8B:E8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17/a353a6ed-43c3-4996-b762-0b1c02617d17.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.178.0/24
                IPv6:
                  2620:a8:6000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54307

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:9f:46:cf:27:f8:6d:32:4e:2c:af:2e:fa:8e:41:dc:be:cf:
         36:5c:23:67:45:52:ce:75:82:ea:9c:fe:32:e0:16:83:e3:e5:
         3f:4a:e5:f7:a3:2b:f3:19:02:ee:82:cd:81:97:94:96:69:48:
         76:3d:25:7c:41:0d:80:6b:de:ef:5b:90:bd:07:5f:74:ed:77:
         b9:80:0d:91:b6:b6:48:ce:b7:b1:51:7e:05:e6:de:c9:4e:45:
         c7:3f:5c:0c:da:45:35:ed:d9:e6:2b:68:96:90:a4:9e:75:48:
         9a:5f:66:e7:dd:83:99:7a:5d:d6:2f:89:ee:47:cd:88:a1:4e:
         1e:e1:73:6b:28:2f:52:b9:83:08:e5:44:09:79:df:00:f0:ac:
         a8:42:94:c9:1a:18:64:24:8a:2c:6c:97:96:f8:98:1c:05:0f:
         6b:97:46:81:02:e4:86:6c:29:80:9d:16:c8:61:2f:66:3e:a7:
         bf:37:75:cd:bb:c1:c2:57:45:56:5b:9b:8d:d7:75:9d:05:00:
         33:8f:89:fc:9d:45:51:ac:1c:8a:0e:e0:c5:aa:da:7e:be:17:
         50:1f:f6:f6:2f:a1:9c:12:62:01:51:9a:34:99:27:04:6f:26:
         70:1c:77:9b:81:e0:c6:dc:30:d4:cc:c7:1d:0d:7a:28:9b:65:
         40:a2:2c:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----