Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4.cer
File:                     ac0d9976-00da-49c9-826b-3d3a349b0fb4.cer (raw, json)
Hash identifier:          nGPVHEvZFWakNEVqxcrQChHabFlVRO/8Pfdo7l+R6Jc=
Subject key identifier:   13:B0:2D:8C:D0:F0:5A:9A:D9:F1:1D:5E:CD:15:FF:04:B0:22:84:FC
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858444D1950AE401F09382194C980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4/ac0d9976-00da-49c9-826b-3d3a349b0fb4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 22 Dec 2023 15:47:23 +0000
Certificate not after:    Thu 26 Mar 2026 14:47:23 +0000
Subordinate resources:    AS: 394406
                          IP: 207.45.72.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:4d:19:50:ae:40:1f:09:38:21:94:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec 22 15:47:23 2023 GMT
            Not After : Mar 26 14:47:23 2026 GMT
        Subject: CN=ac0d9976-00da-49c9-826b-3d3a349b0fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:c0:f9:ac:b7:46:d7:21:38:53:73:b4:3d:
                    99:02:50:d4:5d:4e:09:41:af:2b:94:b2:a4:48:89:
                    0e:12:0a:86:55:66:a4:7b:e1:52:5a:1b:34:cd:ba:
                    14:7e:8c:57:8a:8c:9a:6e:da:4b:6a:22:aa:c3:62:
                    28:9b:d8:14:e5:a3:80:43:a5:3f:dd:ec:91:b4:97:
                    8a:2d:fb:c9:45:5c:72:62:6b:0b:dc:0d:cf:81:7c:
                    df:00:75:e5:44:e7:7a:f3:54:13:ec:5c:48:01:5e:
                    0e:6d:de:12:d0:72:87:80:ad:0c:44:37:f7:43:39:
                    cc:fa:24:2f:a3:d9:62:6f:ee:40:88:82:24:0e:ea:
                    81:99:bb:97:81:d7:04:4b:56:2c:af:24:63:86:10:
                    0b:58:87:48:b2:05:74:1b:84:98:81:ce:71:5c:2d:
                    55:a0:a0:fc:a5:27:83:ff:8c:70:7a:49:79:e9:10:
                    a7:63:89:3d:46:3d:e6:68:bb:43:78:fc:45:ed:4b:
                    01:c3:da:ef:a8:81:97:c3:39:2b:ea:79:6c:21:d7:
                    82:61:87:e0:84:db:8f:ea:33:88:4c:c1:e4:00:55:
                    e9:08:4f:43:b6:80:b7:6a:c9:0e:48:fc:ba:ee:e4:
                    8f:d8:4f:cb:bd:c2:e1:9e:e5:a0:7a:f7:7a:07:b1:
                    68:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B0:2D:8C:D0:F0:5A:9A:D9:F1:1D:5E:CD:15:FF:04:B0:22:84:FC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4/ac0d9976-00da-49c9-826b-3d3a349b0fb4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.45.72.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394406

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:fd:ad:1a:c4:54:5c:74:57:db:b9:bc:b6:4d:01:0a:e7:cf:
         f8:06:65:15:27:c5:a5:b8:6d:02:99:82:c7:35:c4:8e:58:94:
         d5:f9:cb:8d:9e:e3:08:3f:bf:6a:0f:b0:30:2e:b9:db:e2:ed:
         ee:05:a7:28:ff:65:2f:f5:80:51:8d:f5:bc:da:e3:46:73:5f:
         17:ef:f1:2a:eb:b2:31:ee:7c:fc:c4:28:d2:cc:52:3a:a2:5b:
         5e:bf:9d:70:a7:0b:9a:11:71:de:14:42:ae:2b:da:38:14:23:
         ed:e2:98:30:7e:8f:44:ce:a1:51:3c:23:d2:7c:7f:54:96:8e:
         96:e7:c3:24:02:ef:a0:26:1b:1c:50:44:b2:c1:68:c5:b0:15:
         3f:6d:dd:c7:c6:66:1a:9b:33:3b:15:92:02:77:6d:79:57:ee:
         1a:01:56:a6:45:9c:17:6b:30:ac:8c:53:a2:b6:03:21:38:1c:
         b9:62:7f:d8:bd:e1:b8:69:34:5e:a3:07:c2:31:47:30:a7:0e:
         3e:a2:02:b9:09:e8:78:f1:f2:3d:0c:85:74:fd:c2:2c:36:19:
         66:55:38:66:fd:3f:70:a4:81:9a:03:68:bb:ce:ac:e1:99:e7:
         2b:ad:0b:94:fa:0c:a0:b8:77:39:6a:db:da:5a:29:5c:bf:c0:
         47:57:e0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----