Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98.cer
File:                     cfdb56e6-0b8f-487f-b55e-b0d93b59cc98.cer (raw, json)
Hash identifier:          vn4VycuseFYKpmYQA0Jhy4AA5S9qYzZDMLmQcziYbNI=
Subject key identifier:   FA:1D:36:6E:77:B0:25:F2:A0:4B:F9:D2:4A:6D:85:A0:39:DA:CF:AA
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584464DDF153D5765CFF13B463C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 31 Dec 2023 04:07:10 +0000
Certificate not after:    Sat 04 Apr 2026 03:07:10 +0000
Subordinate resources:    IP: 192.80.214.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:64:dd:f1:53:d5:76:5c:ff:13:b4:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec 31 04:07:10 2023 GMT
            Not After : Apr  4 03:07:10 2026 GMT
        Subject: CN=cfdb56e6-0b8f-487f-b55e-b0d93b59cc98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:52:a0:a3:75:2c:9f:6b:f1:8b:da:5b:9d:
                    af:7c:9b:37:e6:2f:19:84:9b:9d:98:f8:e0:0c:77:
                    7d:41:78:da:ce:3d:89:7d:d3:db:91:c7:8d:e4:88:
                    f6:d8:42:6e:3f:5a:71:12:55:e7:4c:21:87:45:a2:
                    df:c1:bb:54:e0:40:73:58:95:68:ef:ad:10:cf:d7:
                    32:20:96:06:2f:51:1a:65:2a:05:62:57:c6:1a:51:
                    df:60:77:79:0a:18:88:f6:c2:4f:e8:da:c5:c0:fb:
                    90:f0:69:86:be:eb:9b:cb:86:86:19:d4:5e:c7:6d:
                    bd:0d:9b:84:74:e4:ba:61:79:fd:bc:40:54:c8:d6:
                    09:84:f8:07:31:3f:e5:79:f5:f7:1e:71:22:87:26:
                    6d:a1:b9:a5:35:46:e3:ec:b8:f5:fe:b6:08:4e:8f:
                    03:e3:e2:1a:73:bc:9f:48:8d:63:3c:73:ba:26:3b:
                    0e:92:96:e5:7f:5d:88:d4:11:e2:c3:75:f8:ce:ac:
                    bc:1b:04:7e:54:69:8b:88:e2:5e:4b:1a:07:d5:c2:
                    77:8f:7b:81:33:76:9e:5c:62:ca:79:34:8d:be:7d:
                    f5:bb:cd:44:9e:62:ef:74:10:8a:b2:23:6c:cb:3a:
                    19:73:71:fc:08:4c:ea:0a:9f:bb:cd:12:81:85:a4:
                    d9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1D:36:6E:77:B0:25:F2:A0:4B:F9:D2:4A:6D:85:A0:39:DA:CF:AA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:35:e4:d8:72:69:ae:73:2f:80:d9:54:05:c4:af:ed:5b:1f:
         8e:1d:e9:2c:cf:51:70:4f:cf:56:f4:9c:78:06:ce:b2:83:fd:
         f7:75:7f:90:63:84:dd:c6:dc:7e:c5:f2:3f:35:3d:fc:03:c3:
         50:24:53:5d:a3:3b:08:43:93:4c:b0:cf:ce:8e:2d:bd:a6:7b:
         d5:ae:f8:20:d7:bb:29:cf:dc:1c:1c:cf:d7:23:ce:b4:23:51:
         74:c1:30:48:ff:f3:fb:79:4f:19:f1:ff:af:68:1f:15:ee:c3:
         48:f8:3f:be:db:8c:65:81:e0:10:50:37:62:6b:7e:4f:ec:9f:
         ad:1a:2a:c6:28:3d:c7:0d:36:31:8c:9b:7a:ad:5b:df:39:eb:
         ce:86:26:21:24:2c:64:fa:01:9c:2d:66:7b:4a:a7:57:aa:b7:
         78:7b:ea:fd:9a:73:f4:2b:a2:55:63:81:ee:2b:01:36:15:16:
         9c:95:30:9d:0a:8c:f5:f3:6d:93:5e:fc:1e:ad:ba:a7:19:e5:
         9b:40:72:e3:50:9e:71:68:19:3c:2d:03:2f:87:06:65:6b:53:
         80:e9:de:45:c8:e2:2a:cb:e5:d9:fa:df:62:3d:3f:cb:0b:50:
         04:dc:b0:dc:d7:e6:da:dd:8d:e3:28:aa:c2:86:5e:f8:6e:6c:
         85:6e:a7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----