Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb5ac101-ea7a-4794-abd4-c641bde6edb4.cer
File:                     bb5ac101-ea7a-4794-abd4-c641bde6edb4.cer (raw, json)
Hash identifier:          cfCno+wQOs7ykVjAkEFx7MbXQolhbKcFOLW2QbrMbjg=
Subject key identifier:   6F:25:68:9A:52:C8:51:E7:DF:0F:30:E5:B7:C3:57:00:88:44:F6:C3
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843F4C471A7C201436C3D7A57C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb5ac101-ea7a-4794-abd4-c641bde6edb4/bb5ac101-ea7a-4794-abd4-c641bde6edb4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb5ac101-ea7a-4794-abd4-c641bde6edb4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 21 Nov 2023 00:25:15 +0000
Certificate not after:    Mon 23 Feb 2026 00:25:15 +0000
Subordinate resources:    AS: 19337
                          IP: 66.228.128.0/19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f4:c4:71:a7:c2:01:43:6c:3d:7a:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 21 00:25:15 2023 GMT
            Not After : Feb 23 00:25:15 2026 GMT
        Subject: CN=bb5ac101-ea7a-4794-abd4-c641bde6edb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:49:8d:aa:c8:04:c3:b3:97:ee:68:29:ca:87:
                    d2:fc:fc:65:59:37:d7:cf:59:07:5b:1b:a4:fe:ef:
                    dd:21:b4:d7:9d:b9:00:21:4b:0d:4f:d5:af:da:51:
                    38:27:a2:4a:bd:8d:93:1f:f7:ed:18:48:f3:31:40:
                    7a:8a:74:0d:2e:75:40:c4:da:c2:29:42:01:5e:41:
                    06:ec:2d:30:7d:a5:cc:98:f1:b6:9b:c6:91:8c:1f:
                    16:aa:6d:c7:bf:f5:5f:78:7b:be:65:86:8d:f0:35:
                    b9:52:21:e6:ea:97:86:27:2d:1d:02:f0:1f:61:5f:
                    99:e0:8d:c8:67:66:e6:36:ac:5b:e9:ae:da:15:82:
                    9f:3c:6a:ae:f2:6b:c2:40:53:6c:f2:27:23:d0:b5:
                    60:c0:53:f5:02:b3:10:fd:13:76:47:b4:28:65:52:
                    b9:04:4b:d2:31:e1:5a:bb:57:6f:7a:47:02:1b:80:
                    c0:16:fa:1f:0d:5b:8a:59:ed:79:73:32:86:87:62:
                    21:19:5f:00:8b:ee:89:42:46:db:0a:40:0b:40:21:
                    59:35:f7:d7:59:e7:0e:2b:53:2f:04:54:0c:14:d2:
                    c5:b2:40:84:d9:85:3e:6e:92:7d:e7:9a:40:fb:f7:
                    be:af:87:9a:ab:5e:dc:88:aa:5f:3f:42:92:3f:49:
                    b9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:25:68:9A:52:C8:51:E7:DF:0F:30:E5:B7:C3:57:00:88:44:F6:C3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb5ac101-ea7a-4794-abd4-c641bde6edb4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb5ac101-ea7a-4794-abd4-c641bde6edb4/bb5ac101-ea7a-4794-abd4-c641bde6edb4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.228.128.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19337

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:df:04:01:26:4d:43:6f:cc:52:28:07:fd:e7:14:b8:1a:3e:
         23:d0:3b:0f:ee:af:ff:22:a9:8b:0c:65:26:f7:83:c2:b1:2f:
         07:d4:8d:78:c7:da:a5:ba:d1:ad:31:63:7b:ca:d9:1a:0a:55:
         b4:1c:62:80:ac:47:87:10:3f:2e:ef:6c:c0:d4:f7:96:f0:f8:
         d4:1b:42:cd:49:1d:fb:5d:ff:62:7a:3e:3f:44:5d:32:15:d6:
         7a:f7:d5:7b:a5:62:65:f4:66:1b:0f:f6:7a:08:4a:2e:e8:31:
         13:0a:ef:4f:8e:8c:42:64:f1:da:41:fe:66:1a:73:17:02:16:
         c4:26:f6:d9:d2:24:78:39:78:ca:0b:10:11:43:3c:72:b9:ba:
         b6:88:95:d7:26:55:ec:65:7b:85:b8:9d:cf:bb:fa:09:0e:01:
         d4:38:22:7b:27:71:ff:b9:09:a8:cf:90:2b:e0:6d:b7:c8:e9:
         c4:ae:9b:a7:91:d2:34:1c:f7:95:16:38:2d:ff:31:67:36:5e:
         ba:79:54:c5:fb:ca:92:91:e9:a5:4f:97:f4:99:68:e2:67:28:
         b5:a1:b7:26:8d:d3:44:2a:5c:2f:15:56:c1:31:2f:ab:a2:58:
         56:0d:21:78:fb:a6:fc:de:59:0f:99:74:fe:14:01:6a:ff:f5:
         0a:22:3d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----