Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
File:                     d16114d0-9aed-42a2-956d-441c06a82e37.cer (raw, json)
Hash identifier:          N3rsFDtYgjQHXG1DAk0f+jVeWlhUDOUz5/OB0xCqLjM=
Subject key identifier:   C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584473D0E7B017473DB14800B140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 05 Jan 2024 12:38:01 +0000
Certificate not after:    Thu 09 Apr 2026 11:38:01 +0000
Subordinate resources:    IP: 104.245.240.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:73:d0:e7:b0:17:47:3d:b1:48:00:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan  5 12:38:01 2024 GMT
            Not After : Apr  9 11:38:01 2026 GMT
        Subject: CN=d16114d0-9aed-42a2-956d-441c06a82e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:4d:5c:d1:dd:51:9a:a3:2f:a2:29:1f:16:
                    8c:93:53:17:71:e4:71:67:7a:8f:9b:ff:48:02:07:
                    6b:8f:a8:d6:b7:f4:8e:77:57:ba:4a:a5:d4:de:68:
                    60:5b:75:69:6d:30:da:cf:36:1f:e3:27:84:ff:3e:
                    6b:01:6e:74:43:2b:35:dd:2d:8e:db:0d:f9:99:c7:
                    21:72:48:77:12:c9:0d:ee:a9:cf:85:ca:dc:3e:54:
                    d7:f1:fd:d8:a1:06:66:9e:d6:4f:73:e4:35:86:8a:
                    63:5b:b2:f6:9f:2d:2c:b6:83:72:24:a4:46:07:ef:
                    be:4a:53:08:74:72:3d:6a:a0:25:83:79:d1:f9:dd:
                    df:a0:8d:f5:53:a5:9d:e9:28:87:ee:7b:75:70:30:
                    e7:0e:d6:5b:72:32:61:ae:7c:4a:79:88:86:d0:e9:
                    1a:af:e9:5a:13:aa:2a:b6:8a:a7:06:61:08:89:b1:
                    83:6c:1c:7e:f2:41:48:ba:77:04:9a:72:8f:84:67:
                    7c:e0:08:aa:5a:9a:d4:08:52:fa:ba:23:44:2b:ee:
                    1c:cf:96:6d:43:dc:dc:ab:1b:af:c1:fd:ae:88:9a:
                    fd:81:c7:96:d2:e8:70:a9:90:a9:94:28:5d:cd:61:
                    dc:ce:0e:2c:40:36:9f:15:a8:45:fd:fe:9f:24:c4:
                    29:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:af:32:eb:d6:e0:68:a4:d9:a6:9a:2d:e2:c0:31:e1:c0:96:
         1b:de:a4:49:04:5e:54:7d:c4:89:2b:04:5b:c9:4c:e0:d6:76:
         31:d1:1d:7b:87:f7:5c:56:6e:78:b2:cd:13:0d:f0:01:e9:cb:
         8a:25:da:86:eb:39:0b:1f:bd:94:be:58:c8:50:ac:55:ec:43:
         c7:63:26:54:48:db:48:de:b6:1e:39:5e:4f:dd:49:28:05:92:
         c9:72:79:56:bd:5f:16:44:b2:ca:a1:b2:4a:05:6b:19:f6:07:
         db:f8:95:c8:78:11:8d:4d:e5:da:40:09:23:a3:26:01:90:de:
         7d:3b:34:47:79:89:67:c4:7d:40:45:9b:fe:70:36:6a:44:db:
         c9:ec:e4:04:7c:55:0c:3b:33:2f:1c:c1:c3:e4:2d:fb:98:af:
         ff:33:c6:91:68:ed:bd:9f:b9:ab:1f:ab:86:b5:7a:8c:1e:cd:
         c8:b6:82:e9:75:70:28:d4:03:12:2a:b2:a8:76:0c:9e:a5:3c:
         1b:bb:4b:40:9b:6e:0f:80:df:19:77:8b:60:6a:1c:fb:da:ae:
         81:da:5d:85:b4:8e:d2:48:d9:bf:ef:99:79:44:a9:0b:1e:33:
         90:bf:fa:f1:d1:24:56:2d:ef:7f:d2:38:52:31:ff:78:a8:00:
         ff:83:a8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----