Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
File:                     bb3e1744-5186-489a-9b86-cb31cef73874.cer (raw, json)
Hash identifier:          LDlktjg0C0T3HwYtGHZu9NXTz880Ac7sNSPoVQGvv50=
Subject key identifier:   6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843E7EFDA543FA0E7AC06A57100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 16 Nov 2023 10:07:12 +0000
Certificate not after:    Wed 18 Feb 2026 10:07:12 +0000
Subordinate resources:    AS: 32019
                          IP: 204.76.220.0/23
                          IP: 2620:20:4000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e7:ef:da:54:3f:a0:e7:ac:06:a5:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 16 10:07:12 2023 GMT
            Not After : Feb 18 10:07:12 2026 GMT
        Subject: CN=bb3e1744-5186-489a-9b86-cb31cef73874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f1:bd:8c:e0:61:0e:d9:7a:f8:1b:94:a2:6c:
                    19:89:06:3c:e8:aa:78:05:0d:1a:a6:5a:3a:e7:d9:
                    db:7f:9c:53:29:e9:bd:f2:05:fc:1c:64:e8:85:64:
                    42:d8:da:a1:50:61:f7:c8:31:37:46:1e:8d:4a:c9:
                    76:ca:c9:8a:ec:3d:3d:9a:4e:14:85:c7:bd:39:88:
                    62:4f:53:41:d2:db:59:b2:ff:bc:90:51:f2:fc:8f:
                    30:9c:5a:e6:ff:6f:71:2b:c3:29:93:26:6f:56:45:
                    17:25:bb:af:24:8d:08:62:b3:a1:4a:cd:65:a7:21:
                    a7:97:80:6d:8e:0f:63:1a:70:50:ce:0b:77:14:64:
                    bf:fb:d0:31:11:76:46:5d:19:21:66:59:1d:ee:fa:
                    ab:31:2b:0c:fa:b9:15:65:0e:21:d2:be:07:48:11:
                    b8:ab:42:6d:12:af:36:67:77:e3:9f:a3:59:25:52:
                    24:63:61:1a:f3:60:b3:30:b0:4d:80:e8:99:63:60:
                    a4:8c:d7:bc:75:71:8c:04:5a:ea:39:4c:f4:56:f0:
                    2f:9d:ce:36:4d:5d:18:69:96:8d:23:9e:38:31:1b:
                    1e:ed:a0:68:e2:55:0d:2b:2a:b2:a4:9e:1c:72:a6:
                    b5:b2:b8:72:e7:43:6e:d2:ff:ed:39:87:40:7a:ee:
                    4f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.76.220.0/23
                IPv6:
                  2620:20:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32019

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:22:c7:31:54:a1:c2:40:6d:bc:0d:4f:6c:1b:e8:41:46:ea:
         3f:3b:ac:0c:12:93:98:23:33:5d:fa:ab:1a:83:26:00:ce:69:
         ba:3b:d2:42:fd:de:56:2e:24:33:b4:75:e5:d7:ab:ee:80:7a:
         b9:9e:f9:93:79:0f:27:88:54:e4:89:1a:58:4d:9a:77:fc:83:
         41:c6:78:a4:10:ba:7f:1e:0d:96:73:63:7e:83:b9:d5:a6:0d:
         b3:89:64:b6:14:2b:d8:a4:c2:48:aa:a5:f8:f5:41:37:2f:7d:
         73:1d:3c:37:5c:17:2c:e1:33:70:fc:a3:74:22:4a:56:83:da:
         34:57:6c:c3:bc:4c:0f:37:06:03:4b:b4:73:93:84:4c:a6:64:
         87:47:d9:72:6a:0f:91:75:6a:4b:3f:0d:3e:98:2a:4b:ed:d0:
         e4:fd:32:95:14:50:d3:e6:88:63:c1:01:d3:a0:4d:38:40:16:
         f1:70:2b:fb:54:53:8d:c7:94:36:2f:01:90:5b:3d:4e:d0:32:
         b4:15:a4:fa:2c:6b:fe:1d:ea:73:0a:17:95:0b:48:5f:ce:6c:
         4c:99:51:9c:c6:94:9e:fe:50:21:8d:ac:6b:6d:0a:8b:1a:00:
         96:64:9b:7c:28:50:95:af:17:20:ce:8d:dd:e2:5b:e4:7a:c4:
         73:18:9a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----