Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651.cer
File:                     edc22fcb-2cab-42b3-9bab-80acf203c651.cer (raw, json)
Hash identifier:          fX2y285ic06LReSo6kvBIw2DDKzhkQrXCpHBwK5DFEE=
Subject key identifier:   1B:E8:D7:95:EA:09:62:1A:66:A6:BC:DB:0F:57:FA:45:3C:97:B5:80
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285844473B80CBEA9BDC6874566040
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/edc22fcb-2cab-42b3-9bab-80acf203c651.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 20 Dec 2023 13:21:25 +0000
Certificate not after:    Tue 24 Mar 2026 12:21:25 +0000
Subordinate resources:    IP: 66.6.56.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:47:3b:80:cb:ea:9b:dc:68:74:56:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec 20 13:21:25 2023 GMT
            Not After : Mar 24 12:21:25 2026 GMT
        Subject: CN=edc22fcb-2cab-42b3-9bab-80acf203c651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2e:bd:c8:9e:44:01:33:47:90:84:6c:61:45:
                    0a:3c:66:b3:cc:7a:53:95:f7:51:97:81:69:00:28:
                    17:88:ba:e8:d9:67:ba:0d:cd:15:62:87:75:9d:90:
                    bd:c5:81:2f:1b:59:4a:aa:f9:9d:93:95:06:48:2f:
                    84:a8:6b:d4:7e:ca:a2:b3:f4:5f:34:00:82:b3:87:
                    2c:7c:06:9a:b6:1b:64:92:04:7a:05:fb:42:2f:d2:
                    48:2b:a5:44:ca:36:dd:f6:31:20:ed:d0:55:d8:4f:
                    ca:e3:57:52:a8:ba:d0:4d:fb:58:25:44:c3:21:12:
                    8e:f4:e9:2b:8c:a1:c4:e8:44:42:f6:12:b8:cb:0a:
                    80:c0:b1:14:45:8a:92:22:03:9a:a8:45:0c:b1:75:
                    af:dd:ce:6b:ef:a4:db:69:19:9c:98:cd:05:79:1a:
                    e1:f2:7f:44:bb:ac:31:59:17:77:0d:22:35:5d:79:
                    f2:02:e0:bc:17:7b:2c:21:3b:3d:1b:3a:42:01:f7:
                    04:b0:90:4c:29:a6:13:8e:7b:41:27:68:86:b9:de:
                    6d:80:c9:c2:cb:22:28:e5:ee:d5:c2:e5:b0:22:cd:
                    9a:c2:ef:94:df:6f:6b:23:16:03:89:1e:42:12:a5:
                    1b:7e:3d:b2:82:00:f2:c8:3d:da:f9:df:45:0c:38:
                    9e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E8:D7:95:EA:09:62:1A:66:A6:BC:DB:0F:57:FA:45:3C:97:B5:80
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/edc22fcb-2cab-42b3-9bab-80acf203c651.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.6.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d4:7e:83:6f:e0:13:14:54:52:e8:9d:17:fb:09:0e:72:f4:
         ac:bd:de:89:05:c4:2e:eb:6f:42:6f:e3:f2:f0:f0:f8:53:79:
         ea:5e:fa:b2:04:ed:6f:0f:bb:ca:02:bc:dc:d9:6f:da:c4:6e:
         42:58:c9:c1:65:d5:db:ff:89:ce:1a:63:ec:06:25:48:17:27:
         bb:9b:8a:28:78:5c:7e:a9:f8:f5:27:b6:82:a0:7c:a1:3a:12:
         b4:2f:0f:dd:55:64:c8:a2:4a:34:73:92:38:7e:0e:cc:8d:44:
         ea:c2:bd:1b:d7:67:5f:c3:d0:c0:f4:a6:a8:cf:d9:3f:54:f4:
         ef:a4:d4:81:80:7c:63:6c:e2:55:5a:77:3f:a7:e6:2e:c2:29:
         5a:c7:21:3a:0e:8e:d3:79:aa:3c:a4:e3:16:93:74:51:a1:12:
         83:d0:9c:ef:ba:b1:34:d6:b7:57:94:d3:c8:77:4e:e4:88:db:
         e3:f8:e3:03:36:a6:1b:6a:23:a5:9b:4a:90:88:f9:3d:46:de:
         8c:1e:2d:22:c8:13:0c:0b:79:b6:22:00:f8:34:0f:2c:8b:14:
         2c:8d:92:74:97:46:ff:ea:b9:b3:7b:df:12:d2:24:16:28:b7:
         b6:ca:f8:68:e5:7f:77:bd:7d:61:a8:63:ab:17:89:8c:4d:2b:
         8b:bf:3f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----