Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d.cer
File:                     f8cb8abc-eb90-4175-a744-ecca7be34b7d.cer (raw, json)
Hash identifier:          tMNh3u22arhx3g8XA2aQq0Fx3sBQbPQiW99MZ2YrKcY=
Subject key identifier:   1F:85:60:57:29:28:E3:90:5E:97:AE:31:40:29:ED:3B:76:3B:79:BF
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584508B009F4D5CB4A7A52CAF160
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/f8cb8abc-eb90-4175-a744-ecca7be34b7d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 27 Feb 2024 20:27:14 +0000
Certificate not after:    Mon 09 Mar 2026 14:21:50 +0000
Subordinate resources:    AS: 17278
                          IP: 192.231.231.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:08:b0:09:f4:d5:cb:4a:7a:52:ca:f1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Feb 27 20:27:14 2024 GMT
            Not After : Mar  9 14:21:50 2026 GMT
        Subject: CN=f8cb8abc-eb90-4175-a744-ecca7be34b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4d:01:27:db:8c:44:57:78:b3:22:97:98:5d:
                    2c:11:2b:89:aa:b4:1f:57:e6:fa:2f:e2:e3:73:b8:
                    6a:e2:a9:30:4d:4e:23:fa:83:b6:40:fe:86:37:f8:
                    c5:6d:a0:6d:01:ad:14:71:a1:ff:3f:77:9d:3a:9d:
                    11:70:f3:7c:57:1c:b1:df:0f:8d:61:60:26:f6:45:
                    e5:99:bf:7c:16:56:3a:cb:c7:b6:1a:06:cf:ea:46:
                    01:91:39:42:86:4e:53:ce:3e:f8:23:de:17:a0:d3:
                    7a:15:7f:a2:af:61:96:12:15:bd:c9:d3:34:a1:96:
                    ac:72:8b:41:46:69:59:9f:20:7e:34:05:94:20:b9:
                    36:c7:2d:a4:fc:89:bb:81:47:78:1d:d8:bc:22:97:
                    f7:29:9d:c7:7f:2d:13:8e:52:f5:c2:ad:b5:03:8d:
                    12:e5:67:b7:29:51:51:07:e7:86:b1:88:ed:b2:0b:
                    12:34:50:4a:eb:2c:14:5e:fe:39:c1:89:26:75:d1:
                    3a:e4:4a:3d:f3:31:a7:6c:c1:d3:4f:37:44:46:2f:
                    68:9f:25:13:d9:97:f2:dd:a4:d4:08:90:d0:de:bc:
                    69:1f:75:a5:c6:21:61:21:c3:dc:72:17:39:44:56:
                    43:13:27:1d:70:ad:68:e1:91:f7:22:78:bc:d2:01:
                    a2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:85:60:57:29:28:E3:90:5E:97:AE:31:40:29:ED:3B:76:3B:79:BF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/f8cb8abc-eb90-4175-a744-ecca7be34b7d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.231.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17278

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:73:69:c3:53:ef:80:86:15:3f:1f:59:71:72:c5:9b:70:ac:
         c3:0a:43:5d:35:3d:1a:a3:6a:9f:58:92:3c:3f:8d:72:33:89:
         5c:41:64:06:ca:de:95:f3:73:87:90:ef:b9:cc:0b:ef:9e:5e:
         a4:c0:44:0c:6c:b4:bb:79:5d:c8:f5:d8:89:37:e4:6a:5a:ec:
         fb:4c:11:ae:2e:51:b1:f4:f0:d0:00:2a:b2:c6:f1:2e:3e:80:
         a1:24:4b:98:5b:59:5b:d0:79:21:94:61:29:45:72:d2:cc:e9:
         46:82:dd:e1:32:17:cf:6c:69:c8:b9:0d:a2:f0:09:0c:1d:78:
         0f:66:9b:4d:08:61:b8:6f:de:23:10:a8:d2:7a:0a:67:95:f5:
         23:f9:a4:2d:fb:96:38:25:f0:88:5e:67:de:dc:1f:8f:4e:29:
         96:80:5f:12:71:f7:2e:bb:8e:bc:be:61:90:d1:3d:db:de:47:
         9e:32:88:5c:3d:8f:5c:b8:5c:11:77:9f:5d:b7:21:2e:e9:cd:
         f8:ce:f2:05:aa:80:d2:98:6d:48:ef:6c:e3:33:fc:d9:3f:bd:
         47:24:ff:c6:4c:5f:1c:96:a7:3e:0a:c8:a2:4b:97:d8:e4:fe:
         35:19:4a:80:ea:43:df:a7:a0:36:4c:5e:82:a6:7c:8b:98:ce:
         80:3a:be:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----