Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
File:                     ec11d358-69b9-4c96-bf47-e3edd5cff218.cer (raw, json)
Hash identifier:          chF0nSBx06dmy2ypJq/MpQZZjZ0KqzcP9pXqe2py7Ww=
Subject key identifier:   A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584473C23C8ED3240C5DBDA95680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 05 Jan 2024 12:08:28 +0000
Certificate not after:    Thu 09 Apr 2026 11:08:28 +0000
Subordinate resources:    AS: 54432
                          IP: 199.115.104.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:73:c2:3c:8e:d3:24:0c:5d:bd:a9:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan  5 12:08:28 2024 GMT
            Not After : Apr  9 11:08:28 2026 GMT
        Subject: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:08:c5:74:12:89:49:fc:fe:28:5d:6d:25:
                    a4:db:20:ec:9b:0d:8d:48:13:be:10:bd:0f:2d:2d:
                    28:43:88:a8:cf:87:3a:d0:77:2f:47:8b:db:09:1d:
                    88:08:6c:c8:4e:cf:14:d3:82:e2:f3:ad:d7:c3:21:
                    d8:5e:03:88:f3:86:c4:0f:d8:64:09:97:fb:88:5b:
                    58:a1:64:3c:3c:3b:28:5c:7b:05:83:82:67:76:64:
                    01:1a:f9:1f:33:c8:f1:19:ef:d5:6f:b2:19:b1:61:
                    ec:8c:0e:47:80:41:5a:da:92:ef:67:08:4c:b6:65:
                    83:1f:6d:47:04:65:ff:c8:1a:a5:47:ae:1a:21:b9:
                    b7:7b:4d:f1:01:3a:99:30:a4:42:2e:36:47:6d:cd:
                    eb:56:e9:89:bd:0a:fd:11:0d:9a:ae:c5:be:02:a5:
                    20:3f:39:18:6f:32:65:1a:e2:fd:ab:f6:8e:b7:ec:
                    c1:a6:54:9a:1e:b4:da:c7:90:37:ec:aa:e3:44:5f:
                    2e:ad:4c:5d:a8:fe:c6:ff:c5:2b:24:49:e4:47:d0:
                    a6:97:9d:1a:c9:3d:7a:38:29:66:e8:5b:a1:f9:2b:
                    90:28:71:34:c6:1d:10:0d:3d:b7:c8:35:e9:85:31:
                    a4:1f:5c:fb:9b:f3:d3:33:f9:12:bc:95:06:ff:2e:
                    e2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.104.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54432

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:22:ab:31:6c:a9:e9:94:d3:40:be:08:0e:7a:4d:24:28:2d:
         ce:22:98:fb:f7:1c:18:a1:3f:34:db:e5:82:4e:b9:05:36:a7:
         29:42:7f:e1:40:89:0b:f3:25:cf:84:cd:63:c3:99:7b:34:fd:
         0f:4b:ce:e0:6a:f9:22:2f:f4:5c:01:74:e8:b9:94:5d:90:f9:
         80:02:e0:7f:27:f7:7f:92:b1:11:4f:50:c7:2d:f2:2c:6e:c1:
         4d:06:87:88:4c:72:3d:ed:8a:ff:4e:4d:1e:27:d2:4e:a0:ef:
         04:17:11:24:5e:de:b9:92:f1:71:6a:25:d6:0e:23:88:82:13:
         05:b8:2b:8e:7f:90:c4:d2:98:a3:b2:92:f5:61:be:3e:e7:4d:
         17:ce:09:28:71:11:69:da:98:32:5f:52:b9:42:c7:58:df:0b:
         50:ff:af:62:b7:0f:68:f5:6a:05:a9:67:dd:99:18:03:14:f0:
         47:13:93:d0:1b:c9:74:37:19:d6:95:51:81:c6:f7:dd:77:f8:
         fd:e8:0c:16:70:66:22:73:40:7f:50:af:77:d7:9c:77:39:42:
         da:99:dd:50:8d:53:35:ac:71:93:90:93:5f:42:90:9d:06:5a:
         44:8d:53:e9:d2:bf:91:b6:59:52:80:a5:55:f0:9b:9b:e1:64:
         7e:69:56:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----