Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer
File:                     d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer (raw, json)
Hash identifier:          i4kT542o1GuW/NezifnoXOQ/4jUTTnkP3Y9EBd9219g=
Subject key identifier:   53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584470F286D8D97B5142B5C08400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 04 Jan 2024 11:58:20 +0000
Certificate not after:    Wed 08 Apr 2026 10:58:20 +0000
Subordinate resources:    IP: 104.193.192.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:70:f2:86:d8:d9:7b:51:42:b5:c0:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan  4 11:58:20 2024 GMT
            Not After : Apr  8 10:58:20 2026 GMT
        Subject: CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e2:8c:81:50:ce:4f:df:56:59:3d:d5:64:40:
                    36:61:70:e0:c2:f6:0d:e7:b0:6c:a0:ef:0a:34:db:
                    3b:32:fb:09:ef:91:5d:f7:92:a4:42:d3:48:25:ee:
                    48:70:33:f4:76:c0:88:50:2a:11:1f:22:2d:d4:d1:
                    34:d1:7b:74:26:7e:e1:c4:ab:bc:5d:21:67:5d:00:
                    ae:a6:6d:90:40:72:ac:8d:0f:c0:1e:a2:0c:59:f4:
                    d0:4a:3e:da:eb:c7:a1:6b:3a:0b:b6:5c:c8:76:8f:
                    0e:a9:a2:c8:9f:aa:4b:ca:8a:75:a2:f6:05:e8:36:
                    07:6c:0b:9e:82:4f:92:38:d9:ff:08:14:05:8c:2e:
                    26:b7:d7:a1:23:6b:cb:f1:1b:ce:4e:56:fd:cd:b1:
                    6d:25:7d:bd:d0:b6:e8:62:e2:38:fa:f2:3c:34:de:
                    85:0d:34:21:ce:9b:a3:6d:b5:c8:53:5a:11:81:f6:
                    f9:18:f0:13:f1:4b:f3:ed:aa:49:dc:6b:b7:71:87:
                    a5:c1:e8:c9:c2:d5:a7:ec:0e:ae:f9:a8:6c:8b:6f:
                    c7:03:24:a1:58:0d:0e:c9:1d:db:09:db:5f:31:df:
                    d4:4e:86:3a:f0:bb:6e:13:35:e1:51:d2:62:4d:66:
                    75:59:ee:28:37:8e:4f:4f:49:51:96:4f:0d:49:8f:
                    60:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:6b:d8:25:1a:aa:12:76:74:8c:0c:e9:ba:32:b7:36:e2:ef:
         e4:95:2f:29:41:e4:a4:1a:24:ad:29:5e:44:40:b5:6f:bb:59:
         45:f6:fe:14:5e:fc:63:51:b3:70:9f:bd:82:5d:fd:43:a9:c3:
         5c:b4:02:14:72:c9:14:e8:df:1b:7f:6c:d1:85:a4:67:c7:02:
         fa:ce:98:3b:21:c2:aa:1b:d5:9b:4a:04:44:58:b6:41:fc:bc:
         db:fa:5c:d0:91:33:07:9a:5a:e0:78:70:03:41:32:22:d3:4c:
         65:9b:c6:4e:dd:f6:09:a8:13:6b:11:f3:e9:94:09:4a:a5:d8:
         4d:47:39:95:59:40:fb:2a:fe:6a:47:35:c1:9f:02:b7:42:57:
         cf:be:7e:c3:40:8c:3f:c4:45:d2:10:d6:72:82:67:c9:71:55:
         e8:ae:ad:3d:fa:2d:1d:65:d4:15:06:2a:a3:62:cf:f4:07:f5:
         cd:56:05:79:fa:8f:38:c0:4f:8a:52:63:61:2f:53:4a:bb:96:
         36:ba:f7:17:cc:e8:45:2b:d5:77:72:d3:71:71:79:db:cc:e1:
         f7:7b:14:89:49:56:c2:f8:e7:06:6a:7d:19:49:da:ec:11:5a:
         f4:6c:d3:c9:36:f3:72:c2:e1:19:48:c1:f8:4b:31:bf:37:ec:
         5e:bc:43:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----