Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer
File:                     e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer (raw, json)
Hash identifier:          ZqODYsWpMcC1qcniBJfSTk7hlm/w5VYsT39SwT581Vk=
Subject key identifier:   88:6C:52:4A:DC:FA:78:E7:28:41:14:40:67:D4:3D:2D:BB:C7:F5:56
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858439D2F603DA2EA652694F6D080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 20 Oct 2023 15:29:34 +0000
Certificate not after:    Thu 22 Jan 2026 16:29:34 +0000
Subordinate resources:    IP: 199.202.104.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9d:2f:60:3d:a2:ea:65:26:94:f6:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 20 15:29:34 2023 GMT
            Not After : Jan 22 16:29:34 2026 GMT
        Subject: CN=e90f54fd-200a-4b2f-914b-2bc8530b5d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1a:57:56:5a:3a:78:08:2e:3d:d1:35:26:d4:
                    e1:3d:ec:a4:82:00:42:1f:2e:3b:6c:f7:69:67:21:
                    b6:51:ad:13:ae:f0:ad:7d:78:ab:3d:fc:d2:e4:7e:
                    63:6f:7c:62:95:82:7f:94:46:78:08:54:7e:14:37:
                    2e:f6:f2:19:c5:a9:fe:70:93:9e:38:3f:64:d7:ba:
                    1b:94:cd:87:61:fd:34:83:ef:fd:cb:62:55:f6:e2:
                    d8:8d:9e:d2:6c:9d:96:28:9b:cc:cb:af:a4:2a:52:
                    d1:87:8c:07:37:78:dc:20:2e:e8:be:05:f2:ec:ff:
                    53:17:7d:f5:b4:ac:31:f4:9d:3a:32:db:eb:7c:ee:
                    c5:7e:5f:73:c1:15:ed:52:df:2c:c6:55:b9:45:05:
                    66:80:ab:a6:70:ed:8c:dd:47:33:68:55:11:2a:67:
                    93:64:85:19:c0:ea:e1:a7:9c:4a:fa:8e:41:a6:80:
                    b5:69:b6:6f:50:a3:f6:18:1b:65:e3:34:a4:8e:31:
                    ff:0f:24:3c:07:39:71:b9:24:7e:4d:15:3a:91:19:
                    33:8c:75:8f:98:53:73:d9:43:3e:bc:d0:94:47:0f:
                    58:9a:25:bf:c2:ca:cb:2a:d8:f1:dd:22:35:8f:82:
                    3f:0d:74:f3:47:32:ff:ae:de:5f:b9:2d:96:e5:a1:
                    b8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6C:52:4A:DC:FA:78:E7:28:41:14:40:67:D4:3D:2D:BB:C7:F5:56
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.202.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:cd:0f:08:a3:a2:13:17:8f:92:df:61:8c:a5:cd:f7:96:08:
         83:f2:27:06:0b:d0:57:c8:7b:f5:4a:df:0b:8e:aa:40:c0:b8:
         b6:50:b6:bb:af:2f:35:34:bb:99:b6:5b:aa:69:78:87:e5:3d:
         65:0b:38:16:46:fb:b4:97:f3:04:f6:b1:c9:86:93:8f:fc:03:
         f0:5f:c5:51:ff:c2:25:2f:4c:b3:9e:83:72:93:40:c0:a7:9f:
         68:ab:6e:00:97:46:b8:ca:bd:76:21:90:f4:2a:5b:69:5c:4b:
         c6:a1:ee:73:bd:ce:fb:d0:d5:ac:b3:e3:79:36:8b:b8:0c:f9:
         be:8f:69:5f:90:4b:b1:08:81:2b:33:2f:ae:cb:d8:04:f9:b7:
         98:0e:08:42:9b:3e:31:42:49:20:71:a4:34:16:9d:2e:fd:63:
         f0:13:d3:3a:10:c7:9a:72:64:b8:f8:79:2c:4c:b2:d6:0e:fe:
         6e:7c:9b:83:e3:c5:06:c2:19:8f:46:40:b6:6d:3f:d3:32:42:
         c6:4d:b9:60:62:89:4d:e7:cb:2d:41:20:92:df:3f:9f:fb:2d:
         83:01:39:96:44:cc:f9:87:11:4e:b2:01:de:dc:1f:5a:4f:d5:
         04:9c:e1:ef:6b:5b:c0:37:ed:f5:f9:0c:9c:7d:64:cd:16:84:
         ce:7a:60:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----