Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer
File:                     b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer (raw, json)
Hash identifier:          +cz6ekNywPhRWg7nNB5sWsa9rvQCT2CzLcM9T9ijfkA=
Subject key identifier:   1D:7E:0D:C7:98:45:62:0F:48:2C:AE:A3:7B:B1:0B:35:63:99:25:25
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858438A8D55F15A7058A8D5B99200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 13 Oct 2023 23:18:32 +0000
Certificate not after:    Fri 16 Jan 2026 00:18:32 +0000
Subordinate resources:    AS: 398290
                          IP: 167.32.0.0/16
                          IP: 2605:d840::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:8a:8d:55:f1:5a:70:58:a8:d5:b9:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 13 23:18:32 2023 GMT
            Not After : Jan 16 00:18:32 2026 GMT
        Subject: CN=b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fe:b4:b8:6a:77:74:e9:2b:1b:66:8f:21:3c:
                    96:b8:33:ab:27:28:5d:e3:b6:b9:eb:7e:6d:44:0b:
                    7b:1d:e2:83:93:4b:61:f4:7c:cb:01:6e:e5:be:c8:
                    33:66:ed:4b:0a:11:02:75:96:12:2f:0e:e6:29:4e:
                    24:6b:f3:e5:74:31:5d:f0:79:66:15:2c:57:d0:d8:
                    16:6e:28:c4:83:9d:e0:51:d0:4c:ef:1d:00:e9:62:
                    8f:ac:a6:42:5a:b0:02:bb:c5:61:18:d0:5c:b4:46:
                    df:09:25:04:07:5d:c9:88:ac:b4:83:0f:f0:40:4c:
                    49:3e:49:4d:2e:b9:be:39:49:18:77:e3:68:33:a6:
                    d1:25:54:8c:d2:d6:6e:81:4b:e8:b4:f8:55:84:54:
                    6d:69:99:23:b4:a8:71:7a:96:12:90:ba:f4:cb:a2:
                    29:8e:ab:e5:de:66:2b:0e:69:66:da:ef:a0:50:2f:
                    4a:c1:b3:ce:a4:88:b0:0a:91:05:2c:5b:9f:16:42:
                    26:08:2d:3e:8b:fd:bc:02:45:76:f5:2a:85:c5:06:
                    98:34:f8:13:9c:20:c8:e4:9f:f8:5e:f1:aa:74:10:
                    fc:6f:38:bb:3f:93:98:e6:f5:e2:3a:11:87:25:b8:
                    83:a5:c7:73:7b:51:a3:81:24:ec:35:2c:7a:86:1c:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7E:0D:C7:98:45:62:0F:48:2C:AE:A3:7B:B1:0B:35:63:99:25:25
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.32.0.0/16
                IPv6:
                  2605:d840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398290

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:b0:fb:9d:f9:af:69:0d:b6:59:54:21:ee:1d:ab:2c:e0:32:
         8b:09:33:5f:6d:52:a7:7b:d3:68:29:b6:fd:65:d0:2a:14:c8:
         5d:2e:7c:e7:48:5e:ee:02:7e:8e:3d:91:1b:b2:40:2b:b9:2f:
         e5:bf:f8:79:84:6b:fd:00:38:70:3a:d8:12:fe:17:f5:30:cc:
         58:3b:f8:a3:d5:1e:3f:60:bb:c9:e0:fb:a1:f1:8d:eb:ce:f2:
         e5:bd:92:3f:dd:bd:a1:69:cf:e3:ae:61:e4:e6:3b:d9:2a:f0:
         fb:cc:ae:0b:80:be:67:88:9f:03:31:ce:a6:23:4f:c9:ea:96:
         57:16:29:e3:60:06:02:c0:4e:38:d4:c2:10:56:cd:31:4a:a5:
         9f:21:dd:36:04:bc:15:df:f6:29:f3:dd:bf:f0:61:86:64:fa:
         53:1a:40:9d:1e:6c:35:a4:8d:d3:8d:4a:20:35:6e:d6:d0:9f:
         14:9a:de:16:50:f1:9b:24:be:dc:02:95:8b:e6:b5:90:a7:71:
         94:56:f3:5e:17:54:67:4b:d5:c3:02:b0:b7:8b:9b:d1:f6:fd:
         9a:17:52:0f:ea:2f:81:55:43:99:37:5b:f7:f3:22:7b:29:a1:
         8f:73:95:89:98:4a:db:5a:9f:5d:d7:f2:18:c1:cc:46:c4:cd:
         bb:27:71:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----