Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer
File:                     d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer (raw, json)
Hash identifier:          nHQzT1MSLLkDIRdhKROWYU3dYhXWvM3lJioCEImJcSM=
Subject key identifier:   BD:39:CD:79:F4:8B:24:EF:8F:69:8D:DC:3F:98:CD:0C:AB:81:F8:9A
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858435D3333092319D3A112DD4D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 27 Sep 2023 17:25:32 +0000
Certificate not after:    Tue 30 Dec 2025 18:25:32 +0000
Subordinate resources:    AS: 395660
                          IP: 2620:133:b000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5d:33:33:09:23:19:d3:a1:12:dd:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Sep 27 17:25:32 2023 GMT
            Not After : Dec 30 18:25:32 2025 GMT
        Subject: CN=d169cca5-b6c2-41f4-a92f-e74d5713d2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:e2:0f:12:92:cd:a7:01:bc:d7:3b:bc:7d:
                    24:59:86:c6:18:fe:53:9e:ed:03:e4:3b:62:21:0e:
                    34:97:93:e2:bf:12:78:3e:8e:14:af:1c:6f:49:9b:
                    1e:29:8f:de:b0:3b:a0:b3:36:de:39:98:da:bd:75:
                    21:d8:a2:51:7c:f9:17:9e:6b:08:32:d6:c9:f4:07:
                    7b:43:51:29:62:65:17:62:98:84:5e:15:df:cd:0a:
                    5b:ba:0f:ca:69:38:3e:df:6a:a0:03:4a:34:ca:6f:
                    06:05:b2:a8:38:46:b7:4a:ed:ea:89:02:1a:b8:2c:
                    1b:4d:a8:ec:2b:46:29:2e:d6:2d:3f:88:b2:36:fc:
                    2d:5f:2e:0b:0a:d0:f5:13:6e:27:5b:ef:35:18:e8:
                    48:45:0b:67:75:14:9c:53:1e:38:b4:0e:ed:f5:ef:
                    71:9e:92:90:bd:2e:63:0c:74:e3:69:7c:69:36:01:
                    17:42:ca:2f:c3:65:31:4b:20:30:da:52:2c:8a:45:
                    b3:8f:1f:59:ec:9a:57:1c:7a:23:dc:af:d1:80:72:
                    3e:01:18:84:73:da:5c:f2:8e:e5:ac:d6:15:7a:c1:
                    10:90:eb:98:f5:72:c0:94:b5:01:c4:5d:c2:3a:7e:
                    9b:33:9e:df:4d:a7:12:f8:90:36:7f:4c:5b:e0:18:
                    4c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:39:CD:79:F4:8B:24:EF:8F:69:8D:DC:3F:98:CD:0C:AB:81:F8:9A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:133:b000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395660

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:85:6e:35:cc:a4:d0:fe:5c:50:9c:2a:c1:34:d5:d6:4a:4e:
         b2:51:a2:1b:71:77:1f:ca:aa:8f:87:89:85:b1:9f:13:88:f1:
         73:0f:48:9f:cc:ce:a3:ed:b3:12:0e:33:1f:31:d8:03:de:45:
         06:52:c2:1c:7a:b8:6b:03:90:15:fe:89:47:ac:36:d6:e1:14:
         78:fe:a1:1d:b7:9e:bd:25:2a:ea:2b:80:dd:e9:14:12:aa:66:
         fc:01:d0:4d:f1:4b:f4:ea:cd:b6:cf:fc:9f:5a:0a:ea:90:c2:
         26:86:19:68:70:53:4b:14:2b:12:0f:21:64:e1:1c:2c:aa:42:
         c7:ef:4a:dd:d5:4f:49:97:0f:b6:39:8d:8f:97:04:c6:3a:f5:
         bb:8d:24:6e:15:bb:27:69:9f:c6:bf:38:ce:0b:5b:e3:d1:f8:
         47:53:99:4d:4b:26:d1:11:e6:d2:3d:07:ac:22:0b:63:f0:6d:
         62:2c:15:23:57:80:2c:d8:d5:7f:25:e1:2e:09:67:98:77:b2:
         61:35:0b:ad:8b:ba:58:a3:cf:fb:7b:8a:ef:42:ec:da:1c:e6:
         8b:c5:d8:97:30:1d:9a:92:df:6c:c6:70:b5:75:69:3a:3e:49:
         73:41:b5:c5:70:81:9f:b9:cd:17:ce:ab:0a:a9:5a:72:0c:a4:
         7c:15:c7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----