Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8ba88a1-c986-4f64-b72e-2e108d6945b8.cer
File:                     b8ba88a1-c986-4f64-b72e-2e108d6945b8.cer (raw, json)
Hash identifier:          AE1V3JqigtEN/ivZToBnSlocZDP7IFkUDO1YazcSFgo=
Subject key identifier:   FA:AF:71:1E:33:3A:05:99:FB:64:F5:69:3B:0A:00:D8:14:80:FA:B7
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858436DCF86A5286BE3BC2C1EFAF0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8ba88a1-c986-4f64-b72e-2e108d6945b8/b8ba88a1-c986-4f64-b72e-2e108d6945b8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8ba88a1-c986-4f64-b72e-2e108d6945b8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 03 Oct 2023 16:13:27 +0000
Certificate not after:    Mon 05 Jan 2026 17:13:27 +0000
Subordinate resources:    AS: 16575

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:6d:cf:86:a5:28:6b:e3:bc:2c:1e:fa:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct  3 16:13:27 2023 GMT
            Not After : Jan  5 17:13:27 2026 GMT
        Subject: CN=b8ba88a1-c986-4f64-b72e-2e108d6945b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:74:a4:db:bd:ac:f3:6e:bd:43:75:c2:0f:69:
                    a1:ad:16:d7:d1:fe:de:4e:72:82:3f:90:0e:29:77:
                    72:6a:99:6a:cf:1b:03:fe:a7:a7:4d:04:ba:16:c5:
                    17:b8:2b:7c:e8:09:11:dc:c0:8f:0c:b6:07:9d:cd:
                    81:8a:31:33:29:42:81:6f:5d:4e:1c:52:fc:55:30:
                    14:96:bc:73:8d:e8:72:b9:c0:7c:52:74:39:c3:2d:
                    4e:88:f6:5a:a7:58:27:bc:4b:68:80:96:f1:00:e4:
                    30:69:5a:01:c7:b3:4e:cc:02:41:0f:d1:47:43:51:
                    31:b2:f7:5f:e0:fe:8c:22:6d:c1:a5:31:40:29:3a:
                    7a:80:83:54:d2:49:d9:f5:7c:b2:05:57:96:d6:52:
                    63:02:9a:73:89:10:22:fd:f5:af:46:bb:b1:0b:bb:
                    2a:43:a2:e2:38:97:6a:17:f7:31:69:17:10:09:66:
                    6e:09:b8:be:c2:c5:fb:8d:0b:5e:71:6b:1f:03:79:
                    5b:51:23:9b:d4:5d:17:3b:2e:3c:f4:fb:2f:4d:93:
                    32:0b:42:d9:54:18:75:85:97:58:a9:92:1e:2e:dc:
                    7b:63:15:49:49:7b:6c:02:89:04:c9:e0:c5:df:e8:
                    e7:c4:db:7b:86:9a:5b:01:19:10:30:61:1f:bb:c7:
                    c4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AF:71:1E:33:3A:05:99:FB:64:F5:69:3B:0A:00:D8:14:80:FA:B7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8ba88a1-c986-4f64-b72e-2e108d6945b8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8ba88a1-c986-4f64-b72e-2e108d6945b8/b8ba88a1-c986-4f64-b72e-2e108d6945b8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16575

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:71:29:b4:0d:9f:83:2d:7d:33:33:07:f6:a8:7e:a0:c4:74:
         cb:1f:73:d2:82:00:68:cc:71:ab:7e:16:33:a3:60:b3:dc:f7:
         d2:44:f6:92:96:42:1a:03:40:2d:29:23:f9:3d:96:6b:81:0d:
         ce:14:14:4b:d2:80:5c:96:65:ca:9b:7a:9b:04:16:f0:6d:37:
         c5:80:d0:7d:61:03:dd:3d:82:91:32:12:5c:21:8b:98:b1:94:
         4c:93:87:a1:51:f6:9b:85:47:63:7f:e6:52:48:9f:56:6c:8e:
         35:fe:49:08:3d:b9:58:1d:e9:73:28:43:1d:9f:ea:82:45:4e:
         fc:0c:f6:b6:f5:1a:2d:ff:38:a6:1b:ef:7d:db:81:05:08:64:
         6c:2d:0b:26:cb:a7:d1:ec:08:91:8f:b2:1b:e2:c7:31:a6:fa:
         03:62:05:94:c0:4f:29:4e:f1:93:14:10:f1:75:cd:ff:e5:d2:
         04:51:d3:e6:72:1a:a3:48:c2:b4:3a:ac:1d:ba:26:6b:ae:f6:
         14:78:31:35:f9:ec:b4:6b:f4:68:17:5e:f1:c4:8e:dd:4d:6b:
         e8:c1:97:89:19:9c:23:fc:e6:78:84:a6:2e:5a:cd:8a:4a:eb:
         71:90:58:af:62:a9:25:98:be:e8:92:bd:d1:c0:8e:af:a9:21:
         ef:89:ad:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----