Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer
File:                     f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer (raw, json)
Hash identifier:          pKPFxfud7FIDchl6J8gmrrpyuQI0jrtTztQd019e9NA=
Subject key identifier:   C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843F4D17E80ED1B330E6A300BA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 21 Nov 2023 00:51:33 +0000
Certificate not after:    Mon 23 Feb 2026 00:51:33 +0000
Subordinate resources:    AS: 40924
                          IP: 23.165.24.0/24
                          IP: 2602:816:7000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f4:d1:7e:80:ed:1b:33:0e:6a:30:0b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 21 00:51:33 2023 GMT
            Not After : Feb 23 00:51:33 2026 GMT
        Subject: CN=f01f7e0b-00cb-47a2-8e20-033b3567cc6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:03:fd:17:8e:ad:dd:f8:ef:0f:03:31:7f:
                    a0:59:3e:8b:c2:eb:d0:04:06:94:89:e8:0c:99:ae:
                    61:46:e2:28:33:31:c7:aa:45:f3:cf:35:4d:d5:5d:
                    17:9a:bf:d3:8c:ae:64:47:67:d2:56:da:56:94:e3:
                    e1:cb:08:2f:81:e3:70:d9:d3:e7:13:b9:1d:69:d9:
                    48:1b:bf:84:50:82:66:95:e4:81:47:40:20:93:b7:
                    35:a5:3c:a0:1a:a4:61:10:bd:46:95:8d:92:66:f9:
                    f8:9f:7a:0c:2f:ee:6c:5a:ab:03:10:eb:65:a1:32:
                    97:83:e1:29:26:ba:14:63:0c:55:a4:2d:93:d3:30:
                    a0:cb:a8:db:a7:97:37:7a:79:7b:d6:9b:0b:07:e8:
                    14:88:35:23:2b:0c:7b:0d:33:8c:42:1a:7f:58:3f:
                    08:a4:99:e0:9e:26:4a:b6:eb:7a:dd:27:1f:f0:24:
                    ed:cf:29:e3:99:3a:9e:5b:f3:b8:fa:6e:88:06:07:
                    a8:68:d8:55:b7:ad:4b:6a:17:23:91:96:a8:c8:7d:
                    60:8f:22:02:95:c8:d5:7b:33:38:d4:25:5d:aa:3f:
                    c7:4c:b6:86:21:ef:11:76:a9:a4:99:aa:bb:1f:a6:
                    fd:2e:cc:78:31:b0:4b:54:a9:52:2e:31:d9:d2:48:
                    b9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.24.0/24
                IPv6:
                  2602:816:7000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40924

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ea:5a:5c:84:7d:dd:10:36:67:d0:fe:e2:f7:00:df:36:e9:
         e7:d1:7a:a8:ec:90:b8:3a:b5:68:cc:50:65:f2:ab:1d:85:48:
         70:aa:8d:f8:05:0a:16:06:1d:63:4b:d1:ff:49:5b:e9:d8:a0:
         57:6f:45:19:5a:68:13:0a:30:8b:08:89:47:ae:d7:d4:15:df:
         27:25:8e:0c:7f:2b:ef:c0:77:b4:9c:a4:40:fa:da:af:7c:ce:
         59:f7:53:d6:ea:b6:7a:14:28:dc:c4:cd:29:6c:34:bf:3f:37:
         57:43:56:11:3e:0c:d2:d6:47:14:ee:70:1d:c7:e5:a0:b6:c9:
         59:49:4e:b2:2e:9d:fc:f2:eb:1d:07:0b:e3:6c:9b:d4:b6:07:
         db:b7:95:56:61:a7:86:f9:75:3d:2f:0b:1b:74:72:b7:05:a3:
         76:b5:32:30:a3:28:0c:ed:d2:03:69:55:c0:38:de:35:3c:c5:
         1c:fd:7b:45:97:4f:45:d0:a3:6c:05:e4:8a:5b:bd:04:7a:cf:
         55:b0:9a:62:f5:2d:ca:cb:82:1a:5d:46:1c:2e:05:61:98:88:
         0b:47:f7:e8:7e:00:19:d1:02:cb:0b:a3:14:ac:d2:07:98:dd:
         e8:dc:0f:8e:7e:09:99:6c:e9:d3:3c:48:ef:8f:f9:5e:0c:f6:
         85:a5:d1:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----