Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer
File:                     b12072dc-8b29-49de-800e-2439a1f4bf97.cer (raw, json)
Hash identifier:          Dy5d97i3UD2ooHyPR1NQZL0gl7K/JwSTCbQDICjcZ24=
Subject key identifier:   6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843F3FDE78593F187B3EA1E3380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 20 Nov 2023 17:45:13 +0000
Certificate not after:    Wed 18 Feb 2026 16:57:36 +0000
Subordinate resources:    AS: 399737
                          IP: 23.165.8.0/24
                          IP: 2602:f9dc::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f3:fd:e7:85:93:f1:87:b3:ea:1e:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 20 17:45:13 2023 GMT
            Not After : Feb 18 16:57:36 2026 GMT
        Subject: CN=b12072dc-8b29-49de-800e-2439a1f4bf97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e9:c1:b6:fb:31:b9:b8:54:d9:42:e3:4d:8a:
                    80:4f:59:8d:5f:1a:3c:d8:7e:9b:0b:b3:b6:ad:a5:
                    9d:0d:6c:50:41:3e:2a:10:46:81:e2:6a:d9:36:58:
                    e5:28:1b:3e:7f:59:16:68:90:b7:92:bd:d0:f9:f2:
                    56:f8:1c:16:30:37:b4:34:8b:f3:5f:3a:11:f9:3d:
                    41:aa:d7:bb:c1:ca:e0:ba:38:8b:de:99:fc:46:7c:
                    a1:5b:6f:1d:db:8f:08:82:83:13:4c:4a:6f:62:fa:
                    44:93:ed:90:7f:9a:07:92:69:44:cd:19:ae:6f:d3:
                    c7:1d:a5:7b:82:3e:b7:30:2f:0c:3f:3c:b8:99:5e:
                    5b:33:a5:f0:24:e2:49:76:5a:f0:d2:a1:48:d7:38:
                    23:18:de:77:ec:b8:45:d5:92:76:2a:bd:6a:f2:81:
                    86:3e:8c:b4:61:61:ff:02:f4:4c:0f:a2:a9:ba:93:
                    4c:c7:50:d0:ee:fc:a0:06:51:b1:03:b4:73:aa:14:
                    73:90:33:88:90:e6:97:f6:bd:02:66:c8:7c:a6:24:
                    a8:57:05:a3:e1:b8:53:19:1e:2c:0c:d2:94:9b:35:
                    47:ad:8c:cf:06:a9:b2:14:97:4c:af:65:84:93:7c:
                    1d:5a:e9:c1:b6:ae:2b:8a:84:72:d1:fc:1d:b4:a4:
                    74:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.8.0/24
                IPv6:
                  2602:f9dc::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399737

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d6:b2:7c:e7:09:b6:31:c1:2a:00:3d:bc:00:db:05:6e:7d:
         e3:a3:e9:8d:e9:b7:45:c0:c3:f5:a9:34:83:03:3b:cd:39:12:
         a1:18:91:bd:1e:e2:59:be:e5:22:59:f2:86:68:38:10:a7:9a:
         03:64:f4:8a:74:5c:69:f9:50:e6:44:d3:c6:22:79:07:ba:64:
         7a:30:74:2f:2d:2d:0a:ce:75:c1:7f:fd:0c:3b:8a:7a:e9:7b:
         c1:d4:20:a3:83:ef:39:7e:93:30:3c:37:5c:15:89:15:b4:68:
         22:cf:10:e0:76:e5:58:5f:fe:2e:dc:e6:6e:94:8b:66:8f:35:
         fe:77:d7:72:18:52:36:eb:93:af:1e:8f:4a:ff:90:5b:d6:ef:
         23:f0:26:7e:61:a7:04:20:ac:c9:6a:f2:5f:6d:89:e2:a0:06:
         a3:98:89:87:93:9b:5b:fd:47:f2:e0:88:68:21:8a:e9:6f:20:
         ba:01:47:bb:65:15:c4:19:5f:db:45:8f:1c:8d:34:4a:11:b1:
         6a:c7:2d:36:35:35:df:1b:46:bc:28:52:e4:24:e2:34:38:82:
         32:c5:1b:3d:41:52:5f:8b:90:9d:78:ce:be:d4:06:6e:fd:7b:
         87:e0:33:58:de:dc:44:65:6f:ad:a5:01:34:cc:e5:e6:c6:09:
         d2:7e:58:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----