Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e.cer
File:                     e3bd1f87-8818-4b01-a7e8-514858edd50e.cer (raw, json)
Hash identifier:          I0bNsVsTe+n2aYDpVS3OL+m8gA9kriwLG7mUp3r9uME=
Subject key identifier:   2D:95:2F:80:9F:58:C0:47:70:47:3E:79:F1:B9:A8:93:FB:D1:B4:C1
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285844BCA2DAC443786E31DE4EA300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/e3bd1f87-8818-4b01-a7e8-514858edd50e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 31 Jan 2024 14:39:14 +0000
Certificate not after:    Wed 08 Apr 2026 12:55:03 +0000
Subordinate resources:    IP: 23.170.136.0/24
                          IP: 2602:817::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:bc:a2:da:c4:43:78:6e:31:de:4e:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan 31 14:39:14 2024 GMT
            Not After : Apr  8 12:55:03 2026 GMT
        Subject: CN=e3bd1f87-8818-4b01-a7e8-514858edd50e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:13:33:28:89:a9:55:a8:fc:18:a3:a3:95:05:
                    17:e1:45:d7:c2:d8:b7:d1:97:a1:3b:5e:6a:d1:56:
                    53:1c:76:3c:23:94:b4:78:78:87:a5:be:60:8a:4d:
                    78:21:a4:61:68:25:b3:22:0e:ad:85:49:cb:7c:85:
                    a8:4a:f5:ec:44:63:6c:12:85:e2:f8:e0:3c:d0:03:
                    41:a3:c2:96:b8:ed:84:7e:0e:49:7b:34:74:36:08:
                    48:8a:d6:d9:c8:7e:28:15:47:3e:7a:f6:56:32:81:
                    fa:9b:f0:cb:f0:97:4e:d1:59:51:d5:a6:26:6c:bd:
                    0a:4e:6b:29:40:2d:2f:ec:4f:e6:d7:e4:4c:b0:26:
                    d9:08:f6:a6:8f:6b:9b:9d:d6:f4:aa:af:95:bc:c9:
                    75:53:88:9b:e6:f4:ea:ce:86:a7:a5:4e:4b:d7:f4:
                    04:18:b3:b0:39:aa:f4:d1:e2:d8:0e:29:34:0f:29:
                    e0:5f:ee:2c:38:cc:46:2d:e4:6a:0f:ee:1f:93:6f:
                    8f:12:a6:3d:c5:54:e2:ee:96:cd:31:67:c3:d8:e2:
                    7a:3e:3b:bc:70:04:5a:94:36:db:a5:e8:14:b2:52:
                    76:37:f8:ca:1d:80:50:93:2f:dd:f3:f5:fa:0d:ba:
                    f0:f3:72:84:73:ab:fa:b9:85:e7:97:9a:ec:8e:de:
                    03:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:95:2F:80:9F:58:C0:47:70:47:3E:79:F1:B9:A8:93:FB:D1:B4:C1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/e3bd1f87-8818-4b01-a7e8-514858edd50e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.136.0/24
                IPv6:
                  2602:817::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:7e:0f:f5:cc:32:32:76:59:d2:bd:6e:e9:5d:c7:bc:83:25:
         05:ca:e3:b3:1f:32:aa:8b:8d:7e:5c:b5:4c:50:27:e6:d2:07:
         43:cc:66:8f:64:4f:2e:c9:91:c8:4a:71:e1:46:23:ff:2b:ea:
         ef:1c:d3:8a:e8:16:8b:37:d8:c6:5b:e2:52:dd:ba:c9:76:f2:
         a1:b0:be:c4:4b:44:f0:28:22:c9:a4:1a:b5:db:aa:82:9a:4d:
         a9:78:3f:42:ff:d0:4f:14:d8:0e:5b:16:1b:f3:27:c4:bc:75:
         a4:b3:6a:0f:3b:2c:df:4f:c0:6b:02:97:eb:3e:1f:8f:94:b4:
         51:85:3e:f6:ae:ce:85:82:47:1f:b4:44:0a:6d:94:ab:67:da:
         e8:46:e1:42:e9:62:0a:72:97:56:a1:5c:a0:4f:5e:46:f1:34:
         93:8b:4a:01:ad:ae:a5:07:d1:d2:5a:87:01:1e:e5:f3:fe:11:
         9c:7e:c5:d0:9a:6b:d6:b3:7c:80:0b:cf:15:c9:96:eb:5f:5d:
         67:e7:85:63:9f:4b:9c:a6:27:3a:44:6a:ba:bf:07:c0:cb:bb:
         8d:a0:bd:84:cf:7a:b4:5e:d0:18:23:c4:8b:e5:b7:06:1c:e4:
         03:3a:a9:4d:81:5f:c1:08:31:a5:0c:e2:53:52:ff:f9:27:9d:
         25:b4:3d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----