Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer
File:                     b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer (raw, json)
Hash identifier:          8Du4pBVHwtbGk49pg3y2SurPcy+ugziqC7WkoseSr08=
Subject key identifier:   C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843B0A9F92C530A3CAD1D4373C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 27 Oct 2023 14:56:57 +0000
Certificate not after:    Thu 29 Jan 2026 15:56:57 +0000
Subordinate resources:    AS: 395347
                          IP: 97.107.229.0/24
                          IP: 138.43.240.0/22
                          IP: 2604:27c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:b0:a9:f9:2c:53:0a:3c:ad:1d:43:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 27 14:56:57 2023 GMT
            Not After : Jan 29 15:56:57 2026 GMT
        Subject: CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5a:84:f1:c9:7d:62:ef:7b:43:d1:a8:44:78:
                    fb:e3:5e:e1:1c:d5:eb:7b:82:fe:c0:6f:44:39:68:
                    b8:39:bc:1a:73:f7:2a:7d:c3:46:31:0e:a5:e8:25:
                    f7:93:d7:89:77:21:0a:77:03:7f:d6:63:7f:8a:6e:
                    e2:89:9c:d6:90:93:c0:d4:6f:d9:07:d0:7f:ab:44:
                    b1:3e:0b:71:94:07:39:7f:62:9b:a0:fb:bf:4e:b6:
                    93:c2:69:6e:a4:59:e4:f4:23:d3:7e:76:11:07:2c:
                    4c:4b:a6:6d:a1:ca:92:7a:ad:87:20:8b:e8:05:7e:
                    d0:53:55:60:34:d2:2f:c5:8a:53:e4:d2:67:68:1e:
                    b9:8c:61:8b:35:be:58:8b:d1:76:ce:28:7e:c4:2f:
                    d4:cb:f3:43:ed:0c:2c:86:a3:ad:fb:5b:bd:6a:5f:
                    3b:a4:34:d9:b2:23:a3:95:73:4d:b3:1b:fe:b5:ec:
                    46:12:af:fb:b8:bf:c6:c8:a5:0f:7f:68:d9:3d:e5:
                    fe:48:2d:23:e4:c6:91:d7:ae:38:98:6c:7b:9f:1f:
                    87:7e:1a:c5:ab:90:80:47:72:6e:c5:50:2d:16:02:
                    e0:44:78:4e:c2:26:50:17:aa:7f:4c:7d:86:6c:d9:
                    aa:35:76:57:00:2f:c4:b1:31:13:05:56:3c:ab:55:
                    a2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.107.229.0/24
                  138.43.240.0/22
                IPv6:
                  2604:27c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395347

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:85:c2:84:2c:8b:f5:b6:02:a2:d3:84:e5:74:94:e7:e6:36:
         0d:6e:e4:ec:70:82:13:cc:a9:b6:a0:9b:16:a5:8d:4b:71:17:
         1f:65:ed:59:93:98:b7:32:58:bf:b0:17:46:3d:d3:1c:7c:7a:
         f7:2e:fa:5e:a4:41:9b:e0:3e:e5:9d:82:c9:20:fa:51:cd:32:
         bf:92:a5:aa:6a:23:ff:12:1f:e1:61:81:58:d2:ea:4b:11:d0:
         24:90:0a:7b:91:33:e3:6d:80:d6:52:ae:bf:20:d0:f0:a6:a9:
         cf:94:ee:f8:bf:4d:bf:d4:c9:ee:8b:0f:48:ad:94:81:c9:14:
         86:06:67:37:f4:4a:1f:ce:17:c8:70:a4:b7:f7:98:02:bb:41:
         a0:dc:1d:c0:e6:81:91:c3:12:d7:0c:d0:27:e4:57:20:69:63:
         71:c5:ab:61:4c:52:c8:80:dc:82:44:66:95:4d:0e:d6:e8:1c:
         71:3c:0e:2c:53:a0:c4:ea:e5:d8:97:9b:f5:1b:29:85:86:14:
         67:78:9f:2b:a8:99:74:bf:7f:bc:31:a5:c6:78:f7:08:7f:40:
         fd:b7:5f:fa:72:a4:6a:b1:2c:d3:20:f9:fb:be:0e:70:8c:19:
         af:36:e2:f2:0d:63:0a:6e:2c:8e:89:85:7e:bb:a0:1c:31:0a:
         9e:c5:1a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----