Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer
File:                     ec3472d2-073b-458a-8e0f-7ee77169574a.cer (raw, json)
Hash identifier:          +PC4e9EbLcXuFxiu1SUq0dIs5jakh8txEmsEegrekPs=
Subject key identifier:   72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858451A3C7CB878ECF8E4AD813CC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 05 Mar 2024 03:18:58 +0000
Certificate not after:    Mon 08 Jun 2026 02:18:58 +0000
Subordinate resources:    IP: 2602:f957::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:3c:7c:b8:78:ec:f8:e4:ad:81:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Mar  5 03:18:58 2024 GMT
            Not After : Jun  8 02:18:58 2026 GMT
        Subject: CN=ec3472d2-073b-458a-8e0f-7ee77169574a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ef:44:b9:ec:4c:47:57:d9:05:4d:97:d1:60:
                    03:ea:e7:92:42:da:d4:8a:82:9e:e6:1f:01:d1:f5:
                    4b:d7:7e:a4:3e:c7:9a:fa:a5:16:1a:f7:bf:ad:41:
                    12:fc:ad:5b:89:23:08:33:27:22:f1:3c:7a:e6:ff:
                    52:4b:63:c7:b9:ce:ea:55:18:a4:70:ec:6c:48:30:
                    63:de:78:55:71:ba:86:66:ca:0f:00:7f:ce:c1:bc:
                    1d:8c:b9:80:87:4f:bd:c1:6f:03:06:27:61:7a:36:
                    62:49:a5:7e:43:c0:98:55:29:0c:44:ab:3f:60:1f:
                    30:17:09:c1:b8:85:e6:93:0b:33:51:b2:61:92:b9:
                    3e:66:a7:17:1f:9c:52:3f:95:2e:ee:91:6e:af:68:
                    8c:71:91:80:fc:8d:ed:f5:cd:11:54:24:00:b5:60:
                    57:1d:d0:d6:2d:d7:8d:9c:36:c9:01:27:af:9c:01:
                    01:00:3e:08:bf:26:2d:81:ef:b0:32:ce:52:4f:22:
                    6f:00:d5:24:16:79:3a:f0:f5:5b:1d:35:a5:57:78:
                    32:f7:25:6d:93:e3:9a:9d:59:a0:09:89:6f:74:2c:
                    4c:8c:f0:4e:90:65:06:9e:d3:a2:53:03:36:fe:c0:
                    db:c7:a0:2a:53:35:fc:fe:d1:26:27:53:d5:2e:fb:
                    b9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f957::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a8:5e:b5:89:24:09:de:28:0e:6e:a3:63:2d:f9:44:1e:0b:
         6f:7e:e7:46:12:5a:fc:f2:63:3a:db:cd:f2:d6:d5:68:5b:2e:
         15:57:63:8d:8b:da:88:61:44:88:88:0a:f7:52:09:a0:ba:88:
         3b:dc:24:e5:8b:1e:09:d4:16:11:b5:03:78:3c:8b:88:a6:66:
         39:c0:e1:04:0d:cb:ea:3f:c6:27:7f:8a:62:e4:c4:72:c2:7f:
         94:14:e7:49:cc:1f:6c:39:56:6a:0d:51:69:e2:ce:c6:c4:0d:
         47:54:db:7e:cc:93:ca:05:f5:c3:cd:4e:57:33:36:1f:08:5c:
         95:d2:56:29:68:70:74:c4:46:4f:82:bc:8c:c8:9a:50:2a:9f:
         29:1b:09:ea:12:8a:43:4a:c2:37:fb:c1:19:91:db:77:60:0e:
         83:99:e8:40:c3:b0:40:fe:bd:a3:79:96:cf:b4:13:d0:a2:3c:
         af:ba:ad:d4:fc:28:69:11:43:cc:5e:26:3d:3b:b5:b1:ca:40:
         05:ee:70:55:32:b5:33:09:1f:be:d9:fc:58:7d:9e:26:d4:2c:
         72:2c:17:d4:b8:8e:d5:00:12:06:61:38:f7:67:be:4f:30:48:
         0b:bf:8f:05:cd:d2:5e:44:58:0d:16:0e:c6:10:8a:89:0e:50:
         b4:5e:3f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----