Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03370ab-11db-4a38-8371-c601e2db16b4.cer
File:                     c03370ab-11db-4a38-8371-c601e2db16b4.cer (raw, json)
Hash identifier:          4h5YNIOB/x3QKOrC5AHR+nGdf7SpHWMdqooQRDrfU/8=
Subject key identifier:   89:34:88:44:99:32:C3:4B:76:D5:B3:EB:3F:59:F4:59:15:68:F2:48
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858437FD5EA4C58DD1B3EFA11C750
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03370ab-11db-4a38-8371-c601e2db16b4/c03370ab-11db-4a38-8371-c601e2db16b4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03370ab-11db-4a38-8371-c601e2db16b4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 10 Oct 2023 03:10:52 +0000
Certificate not after:    Mon 12 Jan 2026 04:10:52 +0000
Subordinate resources:    AS: 22469

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:7f:d5:ea:4c:58:dd:1b:3e:fa:11:c7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 10 03:10:52 2023 GMT
            Not After : Jan 12 04:10:52 2026 GMT
        Subject: CN=c03370ab-11db-4a38-8371-c601e2db16b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d9:b9:4d:67:06:84:91:18:78:c2:a0:02:3c:
                    22:5a:c2:50:09:43:da:2c:19:34:45:be:fc:50:db:
                    93:8e:29:94:68:81:27:a1:40:28:86:63:20:e9:3c:
                    f9:f1:77:07:76:a1:66:af:32:dc:e7:ae:4e:1d:be:
                    12:ed:12:6a:75:56:09:20:6d:f6:20:24:9f:f9:17:
                    b0:19:55:4c:8d:40:e7:22:06:c8:f4:d1:67:42:8f:
                    c7:3b:f3:46:0c:25:0e:e4:ac:c4:32:4f:e8:08:c1:
                    c4:35:b2:9a:8b:50:00:33:8c:bb:a0:1c:f1:2a:eb:
                    61:c3:1e:42:b7:4f:28:3e:54:97:3f:eb:5d:49:6d:
                    f2:79:d0:ef:ca:7b:fb:f7:ac:c5:ec:e8:93:b9:3d:
                    88:ce:c9:29:5e:a8:85:77:f8:b6:5a:eb:b2:8c:0d:
                    11:63:a3:ff:8e:b7:7a:3b:96:a1:c0:49:5e:e4:aa:
                    f6:b0:1a:56:bd:21:3e:e7:03:95:10:91:a4:69:83:
                    f2:e1:f4:46:70:39:04:74:20:c5:11:6a:75:2b:29:
                    c3:b1:ad:f1:a3:0c:6d:84:62:64:05:07:07:99:92:
                    0d:56:83:76:0b:5c:a5:14:32:89:b4:cc:ec:9e:51:
                    8e:0c:b6:2c:af:56:41:6c:a2:8d:0c:0b:ad:0e:ed:
                    e4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:34:88:44:99:32:C3:4B:76:D5:B3:EB:3F:59:F4:59:15:68:F2:48
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03370ab-11db-4a38-8371-c601e2db16b4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03370ab-11db-4a38-8371-c601e2db16b4/c03370ab-11db-4a38-8371-c601e2db16b4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22469

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:a4:ba:66:a2:ea:f2:19:51:26:18:01:69:e9:f4:f4:e5:
         e8:98:20:00:e6:97:42:4f:d7:dd:d7:c7:d6:c6:7f:8b:1b:7c:
         43:ce:a9:62:d4:cb:55:b2:1f:00:b8:3d:62:2d:33:ea:db:ef:
         08:56:22:ba:c9:e6:1a:de:d8:39:84:5e:26:05:a8:97:59:3d:
         da:7b:10:41:17:ec:4e:5c:b5:38:ac:c7:4c:97:da:c3:a4:f1:
         f6:21:5f:3b:52:3d:6c:88:4e:c8:a5:f4:5d:e0:26:78:18:9c:
         4d:ea:22:bd:e8:3e:36:91:b8:1c:3c:96:9a:75:a4:ff:cf:c5:
         98:ea:1d:ad:3b:5e:d6:d1:a9:fc:92:e6:a5:80:ef:2d:08:c2:
         47:67:b8:64:79:b1:23:04:a8:4a:2e:9a:0c:87:58:22:d8:14:
         52:ba:c8:d4:56:1b:81:99:84:48:67:96:3f:56:7f:a2:3d:5a:
         53:ee:4f:5f:61:b1:f7:6f:46:f2:23:49:57:cf:cf:3e:4c:3f:
         20:e2:9b:2c:9e:96:32:ac:9c:c2:77:5e:4e:ef:36:05:f8:43:
         d6:0f:cb:e1:9d:7d:60:1c:77:54:8f:39:ca:a6:b1:2f:0f:38:
         e8:6e:c9:ea:d5:d4:7e:0c:a6:15:7c:61:d6:68:9a:e6:83:38:
         6e:a5:2a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----