Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer
File:                     d037641d-aa90-4eab-864e-a73e03e24cfa.cer (raw, json)
Hash identifier:          rKVFlLKGcvAxBugPPX1T8ihG31mSvi3cxjo+dp7aXvk=
Subject key identifier:   B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858442EC7F75E5CF13FFBEF2B0880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 11 Dec 2023 19:09:14 +0000
Certificate not after:    Wed 25 Feb 2026 13:51:56 +0000
Subordinate resources:    AS: 398759
                          IP: 23.165.120.0/24
                          IP: 2602:f9eb::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:2e:c7:f7:5e:5c:f1:3f:fb:ef:2b:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec 11 19:09:14 2023 GMT
            Not After : Feb 25 13:51:56 2026 GMT
        Subject: CN=d037641d-aa90-4eab-864e-a73e03e24cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:70:b0:eb:75:8a:42:09:ab:7d:76:97:98:
                    9a:c0:8f:5a:51:76:ca:9b:2c:d6:0d:ce:8d:87:a8:
                    12:1a:d2:b9:5e:92:09:1d:87:0a:b3:38:e0:a7:99:
                    34:68:29:2a:69:5e:44:79:17:7f:40:6d:c5:c7:ec:
                    0e:23:f3:60:0c:13:8a:11:c2:69:4d:85:0e:15:12:
                    84:30:db:a2:ac:51:2c:fd:1d:65:9e:24:ae:ca:ed:
                    9f:37:4f:a0:18:82:b3:28:a6:68:27:8d:4e:52:8a:
                    70:ff:76:65:49:f1:56:5c:11:56:83:42:c2:8e:04:
                    89:f3:06:1a:4c:c3:7c:b5:00:f8:63:17:2b:ac:79:
                    b5:9f:a5:00:20:0e:1e:ca:81:fd:ec:ee:09:16:42:
                    f7:87:33:0e:4f:ac:b3:de:93:77:a6:33:a1:c8:0d:
                    97:fa:3f:85:b3:3e:b6:8b:22:9d:bf:e2:a4:5f:7e:
                    8e:4b:05:bf:6e:84:ab:9a:5a:7e:79:e0:b0:75:7a:
                    5c:8e:5c:1e:99:b6:8b:1c:75:68:29:bd:8c:5a:c0:
                    3a:3e:03:67:86:45:23:52:45:02:6e:05:9b:f6:77:
                    a4:c4:09:87:e8:38:d7:12:bc:d2:99:97:da:46:41:
                    d8:93:e4:d4:5c:e6:1b:9a:49:61:ae:01:29:59:35:
                    8d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.120.0/24
                IPv6:
                  2602:f9eb::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398759

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:15:39:81:68:b3:3b:75:3b:a3:f0:50:25:6a:a6:a7:5e:0f:
         45:b1:c1:67:b0:44:35:a2:5d:34:43:29:71:3b:8e:02:50:61:
         f7:ac:d9:88:01:8c:7d:1d:67:6a:4c:ce:ec:de:7e:99:db:6d:
         87:b2:5b:10:6d:3f:64:89:f0:d0:50:86:e0:6a:79:53:8e:10:
         43:1b:de:9c:41:65:bb:b4:a1:4c:32:cd:57:26:a2:cd:b7:60:
         4e:b9:ce:28:a9:73:3a:62:97:84:db:c5:70:2d:c0:21:de:28:
         7a:ee:cc:ef:3f:b6:31:a3:a7:bf:4f:b6:22:4c:b5:41:9d:a8:
         82:b5:b9:12:87:42:ef:8a:d4:59:44:2b:cb:9a:79:e8:90:b0:
         b5:8b:44:5c:e0:ec:6f:ec:54:e3:9e:29:48:61:9e:21:16:e8:
         c3:40:aa:a0:09:c2:64:48:48:be:24:93:e5:9e:4b:82:49:a6:
         82:08:98:56:d3:f5:da:fb:c7:a1:b7:24:4f:ab:91:65:dd:3d:
         5b:56:b9:4a:1e:be:87:5e:08:28:f1:45:c0:ea:59:fd:b6:9f:
         80:af:3e:8e:fb:85:79:52:5a:19:31:ed:42:ce:80:fe:c3:65:
         c1:a8:33:d6:69:06:51:b1:26:0a:77:bd:f3:ed:75:89:7b:0d:
         1a:18:d2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----