Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219.cer
File:                     bfe6b5ce-b18b-4608-80c9-5651cde85219.cer (raw, json)
Hash identifier:          HPX2uTLnYdpJlYUdUAD0A9BcEozu5a3gPO1C2MeCNz8=
Subject key identifier:   E3:04:D5:E7:E4:5B:19:CC:9C:7D:61:A3:AA:A4:1C:99:8B:48:B5:A7
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843B9C14D664625E5D234D121B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/bfe6b5ce-b18b-4608-80c9-5651cde85219.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 30 Oct 2023 21:06:13 +0000
Certificate not after:    Sun 25 Jan 2026 01:51:39 +0000
Subordinate resources:    AS: 396100
                          IP: 23.164.168.0/24
                          IP: 141.193.0.0/23
                          IP: 2607:7540::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:b9:c1:4d:66:46:25:e5:d2:34:d1:21:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 30 21:06:13 2023 GMT
            Not After : Jan 25 01:51:39 2026 GMT
        Subject: CN=bfe6b5ce-b18b-4608-80c9-5651cde85219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a8:be:72:a8:26:af:48:70:b4:18:82:58:7d:
                    8a:f4:2a:d1:66:dd:ce:1f:b2:89:b3:8b:e8:a1:03:
                    e4:a8:80:c1:34:6d:9b:98:78:71:e0:ce:09:de:66:
                    0c:07:f5:29:b7:f6:d4:44:f3:6a:46:63:ef:b5:7e:
                    ca:b4:39:0c:64:d4:0d:2a:18:98:9f:cf:53:01:ef:
                    e8:f0:a4:8d:37:3e:1a:53:ab:02:af:8d:f3:58:08:
                    88:a0:ca:59:c8:73:fb:44:72:f9:bb:a4:5b:0d:c9:
                    13:13:60:77:ae:20:64:bb:3f:c0:1d:38:d0:03:74:
                    98:40:1e:94:9e:e4:29:a7:b3:87:bc:04:68:8c:06:
                    62:94:16:56:ef:b2:d0:34:50:99:b5:d5:0a:d9:d6:
                    33:18:d7:48:63:f4:09:ab:6d:fc:d6:1f:aa:96:d7:
                    0b:83:f9:cc:8b:e6:31:dc:70:91:30:28:6b:af:5b:
                    1f:fd:f1:cc:90:0a:8f:7e:c1:41:0c:cd:7d:d5:b9:
                    cc:06:3c:8a:bf:a1:c6:83:77:fb:a0:78:d8:0d:3d:
                    e4:bc:af:1e:07:a1:f2:15:4a:17:dc:4d:c6:b7:c5:
                    97:fd:9b:44:bb:b0:6d:e2:f1:65:64:3d:c2:d0:9f:
                    b9:d9:33:4b:4d:79:f6:e0:ee:a9:70:26:40:f0:54:
                    3d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:04:D5:E7:E4:5B:19:CC:9C:7D:61:A3:AA:A4:1C:99:8B:48:B5:A7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/bfe6b5ce-b18b-4608-80c9-5651cde85219.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.168.0/24
                  141.193.0.0/23
                IPv6:
                  2607:7540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396100

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c9:09:69:27:d5:1c:39:8d:6a:2e:c3:6b:76:bb:49:17:2b:
         92:59:d9:0c:ed:c5:a5:02:4b:27:17:c1:6d:0c:e1:b4:62:21:
         b6:22:20:0f:3b:5e:44:b9:99:15:be:3f:65:2d:6c:67:6c:87:
         76:ef:99:ae:29:fb:be:9a:ab:4f:7d:cb:7f:f1:47:1d:0c:4f:
         2e:7c:e6:85:b6:b8:39:d7:f1:ba:09:de:19:b2:7a:5a:ab:59:
         97:78:dd:13:04:0c:72:6a:7f:df:45:0e:e9:a2:b7:48:25:ae:
         fb:43:87:73:4e:c6:20:d1:82:f0:62:66:27:d5:d8:6f:dc:9c:
         db:ef:77:72:2d:ca:d9:e7:0b:7c:80:6f:12:1c:5b:30:a1:75:
         18:4a:22:58:f3:36:03:09:cd:c3:db:bd:4a:29:9a:ef:4f:8a:
         b8:5a:ed:c0:08:dc:ae:b6:d3:19:67:66:65:d0:88:11:65:d6:
         59:72:c0:60:f6:ea:07:2d:8e:a9:f9:b5:64:ef:92:86:f3:ed:
         da:a5:2b:50:c9:08:41:71:8b:07:76:cd:93:3d:c9:b5:41:93:
         4e:9c:68:36:95:f2:b6:0e:96:bd:3a:f0:db:9a:1c:9a:56:20:
         1a:7c:d6:83:3f:cd:f0:e4:58:70:37:d8:73:a7:fe:af:c1:f9:
         be:01:87:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----