Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eaa0d5e2-9fae-47ad-8388-100f764ac828.cer
File:                     eaa0d5e2-9fae-47ad-8388-100f764ac828.cer (raw, json)
Hash identifier:          JcBc1XvyCtSoWR38N0/o+NOco3JNayOXLvadp5J7YcM=
Subject key identifier:   C6:66:58:6E:4F:66:E5:F8:BF:8D:E6:AC:DC:D6:0C:70:E5:BA:81:F0
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858440CF5C3126A129103406E6B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eaa0d5e2-9fae-47ad-8388-100f764ac828/eaa0d5e2-9fae-47ad-8388-100f764ac828.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eaa0d5e2-9fae-47ad-8388-100f764ac828/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 29 Nov 2023 16:24:01 +0000
Certificate not after:    Tue 03 Mar 2026 16:24:01 +0000
Subordinate resources:    AS: 11529
                          IP: 148.183.0.0/16
                          IP: 198.74.8.0/21
                          IP: 2602:272::/36
                          IP: 2620:a5:e000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0c:f5:c3:12:6a:12:91:03:40:6e:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 29 16:24:01 2023 GMT
            Not After : Mar  3 16:24:01 2026 GMT
        Subject: CN=eaa0d5e2-9fae-47ad-8388-100f764ac828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:f0:c5:d0:4d:71:c0:bc:af:a4:d4:f6:d9:
                    c7:75:4b:5f:2d:d1:a7:50:82:19:80:f8:17:51:c4:
                    fc:91:a7:58:b4:35:d1:aa:7d:23:85:83:60:2f:ec:
                    f4:90:63:f4:ed:38:72:ab:31:16:e6:a0:4f:ee:49:
                    04:31:25:0d:b9:7d:62:e8:15:f4:f9:c2:74:e5:65:
                    11:6e:6b:1b:62:49:af:5f:50:7f:11:b1:5f:7b:39:
                    02:70:13:99:5e:33:6e:71:72:35:19:6a:01:62:a2:
                    ec:50:66:89:e5:93:c4:c2:22:14:4d:f1:13:e4:bd:
                    b8:18:8a:f6:8d:26:f2:39:27:44:bc:13:28:98:c7:
                    71:19:27:1f:07:26:1f:1b:86:91:53:d0:bd:c3:87:
                    de:33:1d:29:8b:e2:9f:f2:27:df:4f:23:29:70:2d:
                    ce:4a:f1:03:3c:6f:92:ab:ab:57:2f:de:36:cb:2e:
                    db:49:af:1d:06:02:22:ab:ee:30:d3:f3:c6:62:6f:
                    cc:e1:d3:8e:eb:40:d0:17:f4:d4:d9:01:c4:4c:b2:
                    11:64:33:69:bc:90:5b:8e:64:ad:26:77:04:e8:85:
                    4d:6f:62:69:86:cc:da:32:0e:d1:10:11:d9:3d:5b:
                    6c:1c:9b:84:de:31:04:d1:ad:8b:f8:c6:b9:40:78:
                    06:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:66:58:6E:4F:66:E5:F8:BF:8D:E6:AC:DC:D6:0C:70:E5:BA:81:F0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eaa0d5e2-9fae-47ad-8388-100f764ac828/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eaa0d5e2-9fae-47ad-8388-100f764ac828/eaa0d5e2-9fae-47ad-8388-100f764ac828.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.183.0.0/16
                  198.74.8.0/21
                IPv6:
                  2602:272::/36
                  2620:a5:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11529

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d3:dd:c4:26:5f:a0:41:f0:16:37:72:98:e1:ed:7c:0d:88:
         db:1c:f9:21:ab:bd:ce:99:98:b9:ac:00:58:fc:4f:0f:8d:ab:
         80:8d:5d:5d:29:b5:3b:b9:b5:0f:84:85:df:5a:ab:87:b6:2b:
         93:f9:16:67:ba:6c:7c:d9:90:47:90:5d:2a:8b:db:56:cb:86:
         7a:04:7c:3d:6b:0f:77:4f:b7:07:f7:83:32:6d:13:99:c3:12:
         f2:34:94:a7:ae:9f:69:5b:fc:65:41:e7:a6:2e:91:93:c8:8f:
         bf:64:ac:b6:ea:5e:52:ae:dd:90:39:a8:3d:6e:67:83:7f:4a:
         cb:7d:65:bf:fc:22:2e:2c:ba:9e:f9:86:a5:cf:6a:65:ea:82:
         ec:21:00:dd:b2:68:17:23:40:d8:df:6f:af:cd:9e:1c:a4:b7:
         f7:b7:fa:03:0c:de:2d:56:e9:61:db:3b:4e:20:9d:95:81:75:
         5a:bc:bc:fd:d2:ff:9d:a3:64:7e:3c:b4:2e:d4:39:d5:bf:be:
         4e:df:eb:b2:d2:c9:ab:af:82:ab:7a:60:8c:e7:cc:d2:6d:ea:
         5f:be:b8:f4:8e:36:68:4d:a8:82:37:3e:12:c7:f7:fe:f5:cc:
         de:d8:8c:06:21:c2:6a:97:13:94:92:41:a5:10:c4:77:df:18:
         cb:1c:93:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----