Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343.cer
File:                     b59f0cf0-b1db-4139-bfc6-e624159d7343.cer (raw, json)
Hash identifier:          aYa0Q+sL3X/aM1/itutJFDAgX1Cbrkipf5nGAp/2iWs=
Subject key identifier:   AA:F1:D4:E0:D3:6E:14:3A:D7:EB:7E:CF:79:21:A9:01:A2:A9:10:8C
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843F6B37323BF6233C168F3FB00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/b59f0cf0-b1db-4139-bfc6-e624159d7343.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 21 Nov 2023 17:02:37 +0000
Certificate not after:    Mon 23 Feb 2026 17:02:37 +0000
Subordinate resources:    IP: 168.151.8.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f6:b3:73:23:bf:62:33:c1:68:f3:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 21 17:02:37 2023 GMT
            Not After : Feb 23 17:02:37 2026 GMT
        Subject: CN=b59f0cf0-b1db-4139-bfc6-e624159d7343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4f:2d:3d:e5:ac:87:e0:1d:d7:7e:88:dc:97:
                    78:87:df:93:b0:45:66:e6:e1:46:69:0d:ad:0a:ea:
                    f0:8e:16:71:ef:1d:48:bb:cb:43:97:85:42:bb:98:
                    ba:d9:25:7d:25:14:8a:62:0c:10:01:fb:c6:54:04:
                    e3:57:c1:dd:da:07:71:0c:86:76:1e:1d:23:f5:85:
                    69:c3:29:d4:48:39:0f:ff:ba:79:66:79:d9:95:51:
                    d9:df:e3:c4:3e:45:88:13:37:71:4d:82:e5:27:9e:
                    fb:5a:9e:29:a0:94:83:89:4a:1c:42:78:eb:23:69:
                    75:49:e5:bd:17:04:26:8c:b8:9a:0d:49:95:ed:d7:
                    5e:dc:c1:a7:ac:2d:5e:c5:8e:03:14:a4:ae:1b:21:
                    ca:5c:09:ba:09:05:9f:fc:0f:4a:8c:5e:be:77:a1:
                    02:38:35:48:d8:5d:c5:34:48:39:95:38:94:be:32:
                    e1:3c:4e:c8:8d:8f:e4:24:c9:f0:9d:61:83:58:09:
                    8d:f9:20:cf:ba:3a:4e:d0:d7:a0:27:a4:4b:0b:dc:
                    ce:b7:04:31:f7:4a:9b:09:50:d7:cd:da:4b:c2:cb:
                    5a:47:06:26:f2:c1:55:e8:24:08:8b:cb:f0:2e:bd:
                    6a:78:78:77:4f:e6:5f:ec:10:86:77:d8:c0:14:ef:
                    3f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F1:D4:E0:D3:6E:14:3A:D7:EB:7E:CF:79:21:A9:01:A2:A9:10:8C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/b59f0cf0-b1db-4139-bfc6-e624159d7343.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:83:74:77:e2:28:bc:eb:02:a4:6e:90:d0:d1:6c:8d:1c:1e:
         51:9e:39:3c:2a:3d:88:70:f7:36:99:4e:0d:d3:cc:98:b3:35:
         35:20:36:4e:08:53:d3:c6:f2:df:ac:d6:7a:b3:de:eb:a4:16:
         a5:79:94:ad:a7:b0:4b:ae:59:61:29:6e:0a:ea:b7:c8:e5:6c:
         ec:21:dd:6e:84:6d:6c:ae:73:36:ef:0d:3c:42:fc:59:d5:03:
         49:8b:7d:67:c8:ea:a4:77:19:da:7e:65:c4:7c:b6:45:cf:3d:
         d7:e9:e6:67:9e:2e:2d:20:ab:df:df:71:d2:ea:8b:a3:23:86:
         91:87:03:01:48:2f:bd:64:27:0a:ea:08:b5:5c:16:18:72:0c:
         fc:94:b8:f1:f7:88:98:ea:d5:3e:90:37:15:eb:7a:92:de:d5:
         38:4a:98:86:2c:e6:10:b4:11:b1:79:77:ed:5a:08:5d:67:a9:
         01:bc:f4:31:b7:49:47:68:f6:d2:1f:3c:a7:73:f6:a1:26:91:
         82:8d:a6:9b:11:0d:95:30:f4:c1:31:4e:ba:68:db:ed:23:61:
         dd:74:99:43:1b:89:cc:dd:a7:11:8b:e6:90:72:6c:88:16:1a:
         da:1d:2a:53:44:7d:a1:99:54:70:5a:e9:5d:dc:ef:cc:8f:e1:
         44:ce:cb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----