Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad467892-ee45-4d8d-a2c3-40f7fb414bf2.cer
File:                     ad467892-ee45-4d8d-a2c3-40f7fb414bf2.cer (raw, json)
Hash identifier:          OjfPbanJkEdgp+Y4x5l4R32i2qrhggMrZX8VsLgwQvU=
Subject key identifier:   09:9A:4B:FC:C5:C5:F5:D2:EB:7D:36:18:AB:B3:1B:9D:90:43:51:02
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858440AC3E5CF1C37AA6E517CC300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad467892-ee45-4d8d-a2c3-40f7fb414bf2/ad467892-ee45-4d8d-a2c3-40f7fb414bf2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad467892-ee45-4d8d-a2c3-40f7fb414bf2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 28 Nov 2023 21:31:56 +0000
Certificate not after:    Mon 02 Mar 2026 21:31:56 +0000
Subordinate resources:    IP: 206.123.160.0/19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0a:c3:e5:cf:1c:37:aa:6e:51:7c:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 28 21:31:56 2023 GMT
            Not After : Mar  2 21:31:56 2026 GMT
        Subject: CN=ad467892-ee45-4d8d-a2c3-40f7fb414bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:69:52:1e:f2:c2:1b:a1:70:cf:3c:14:c6:89:
                    8e:dd:9f:4d:01:e2:e8:33:e4:af:00:fc:c1:3b:a7:
                    52:d4:6c:49:6c:b1:9e:ad:d4:05:4e:74:0e:00:df:
                    11:36:bc:dc:91:ba:fd:db:b7:ab:0d:13:6e:c1:26:
                    8e:67:cf:15:5c:9c:3d:aa:ad:cf:7e:fd:8d:a2:15:
                    b2:03:d8:1f:a8:84:1d:72:58:21:7e:4d:fd:33:f1:
                    d1:64:08:2b:c8:65:d0:4b:6f:0f:92:8f:46:32:7b:
                    6d:c2:8d:71:7c:33:4b:02:37:54:a0:3a:64:c9:6a:
                    4e:43:79:ea:59:10:53:31:2a:4f:e1:c7:38:85:9f:
                    61:7b:ad:de:88:30:11:20:34:a4:ad:7c:d5:78:41:
                    96:6a:c9:47:14:2e:07:8b:8a:2a:e8:4b:d0:9f:9f:
                    03:ae:84:b3:e3:88:d0:49:fd:32:82:1f:e5:d9:27:
                    a3:0b:60:d2:d6:0b:64:5e:dd:83:c4:ed:0e:72:22:
                    ff:f8:0f:57:0d:6d:9a:bc:40:2e:c9:73:70:2e:e4:
                    54:00:8f:a5:4e:87:01:7a:8f:32:40:57:4e:e6:18:
                    33:b2:12:5e:46:50:22:f0:3b:b1:31:b3:10:b3:99:
                    58:24:64:90:0d:9a:4d:0c:a1:47:f2:10:1a:b6:f4:
                    84:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9A:4B:FC:C5:C5:F5:D2:EB:7D:36:18:AB:B3:1B:9D:90:43:51:02
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad467892-ee45-4d8d-a2c3-40f7fb414bf2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad467892-ee45-4d8d-a2c3-40f7fb414bf2/ad467892-ee45-4d8d-a2c3-40f7fb414bf2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:64:6a:5a:d9:1d:74:97:86:19:c0:0e:4e:b3:a0:0a:c6:f4:
         38:41:15:8d:a5:7e:25:2f:79:07:4c:07:e7:db:ff:71:b4:8a:
         24:90:73:f9:ec:7a:94:d6:79:ce:a0:ea:bf:a4:1a:27:1f:d5:
         46:5a:29:26:72:9c:df:e1:ce:d7:0f:c1:02:e6:91:f0:bf:df:
         84:9e:f6:92:b4:aa:df:87:ce:31:a9:55:3c:aa:1b:09:7e:cd:
         21:5d:7f:fb:9e:68:02:6a:fa:99:f1:0d:81:81:bd:da:53:f3:
         f6:c4:ce:ea:3d:88:e7:1f:71:4e:20:55:47:e2:a8:d5:6a:4d:
         eb:c2:9e:43:e3:5c:f0:21:96:65:b1:6c:63:1d:40:8a:2a:dc:
         ed:89:ec:12:42:95:d6:12:5e:93:6e:05:56:0a:ab:1b:00:18:
         da:31:64:8f:55:4c:ba:37:f5:d7:56:da:9e:29:f2:6b:8a:e3:
         c8:26:17:16:97:ad:b2:fb:ac:f3:d3:84:e9:36:a1:f4:e5:d3:
         52:46:25:3c:7f:69:c7:83:f1:99:54:b7:ce:61:11:cb:e4:31:
         d8:67:a5:84:61:5c:53:b9:0f:87:47:3e:52:81:ed:49:08:21:
         c4:95:5b:24:95:9b:ed:70:d9:15:8b:be:dd:f8:f2:af:a4:c2:
         2f:60:13:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----