Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab.cer
File:                     fa43a831-b765-4adf-a0f0-2882a5c07fab.cer (raw, json)
Hash identifier:          tw9EtvW383IZlHvITyLvneaymkODb/L2h7+xX5e8cxI=
Subject key identifier:   9C:35:79:44:C0:A9:CD:B1:60:B2:B5:B0:EB:CA:07:42:1D:14:DA:9C
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858435A7F15BF35528440AECEAF00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 26 Sep 2023 18:11:01 +0000
Certificate not after:    Mon 29 Dec 2025 19:11:01 +0000
Subordinate resources:    AS: 396842
                          IP: 23.135.160.0/24
                          IP: 199.193.60.0/22
                          IP: 2602:fe6c::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5a:7f:15:bf:35:52:84:40:ae:ce:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Sep 26 18:11:01 2023 GMT
            Not After : Dec 29 19:11:01 2025 GMT
        Subject: CN=fa43a831-b765-4adf-a0f0-2882a5c07fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a8:8c:5f:2c:67:14:4c:c6:6a:92:3b:ef:6c:
                    bc:67:4a:fe:44:d8:9b:ca:13:54:70:96:77:d9:48:
                    0f:72:6f:04:3f:b7:2a:01:af:d6:8a:bf:66:21:2f:
                    05:93:b5:24:95:5d:ad:54:01:f6:13:6a:59:4a:8c:
                    40:65:45:e5:47:f6:3b:14:66:cc:6a:5a:86:c3:89:
                    71:55:11:c2:37:e0:a9:7e:e3:99:6c:d9:98:78:a6:
                    00:7d:74:63:94:b3:90:f9:85:6f:d3:f9:72:a2:ce:
                    d0:ab:55:a2:e8:ad:96:6f:35:2d:48:19:fa:d3:86:
                    b2:a5:f5:cc:a7:94:a3:cc:b0:c5:cd:fe:2a:80:fe:
                    11:c8:9b:8b:46:ac:90:d5:75:32:3d:60:e9:ab:21:
                    af:ec:0d:b6:65:c1:5a:3e:97:38:2a:93:42:45:07:
                    e5:d3:2e:c6:99:ab:c8:ad:d2:48:c5:ff:2a:44:eb:
                    ac:b0:54:b7:d2:4a:cc:a7:7f:06:1f:3e:d4:8b:12:
                    36:7f:93:9f:73:5c:ad:83:b1:c5:d9:f5:56:96:95:
                    3f:1e:96:fe:67:1c:ff:60:a8:c8:47:5e:5e:b4:1c:
                    da:46:19:70:26:fb:44:a8:2b:9b:6f:16:5a:7b:ea:
                    38:16:e4:5f:2e:45:65:15:5c:7a:4c:87:71:93:6e:
                    6a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:35:79:44:C0:A9:CD:B1:60:B2:B5:B0:EB:CA:07:42:1D:14:DA:9C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.160.0/24
                  199.193.60.0/22
                IPv6:
                  2602:fe6c::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396842

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9f:a3:af:bb:5a:55:64:e5:1b:24:48:54:7e:1f:9c:c9:4d:
         8e:c7:a6:6a:ce:c4:78:f5:fd:70:df:3e:f3:00:75:3c:5d:0f:
         db:1c:af:35:1c:1a:8c:39:72:4b:92:5f:b4:5c:b4:f3:96:ba:
         9a:06:4d:12:37:aa:b3:61:35:0d:2a:d0:f6:ce:38:ce:c2:ec:
         b8:db:be:73:3f:ca:68:9d:e5:db:b3:98:3b:9d:45:8b:95:3e:
         3b:5c:ac:32:21:da:7c:22:a7:af:16:56:51:58:7b:e5:99:18:
         7f:b3:32:56:b0:3c:96:36:b0:71:e1:38:e4:9d:95:77:2a:6d:
         02:11:04:ad:ca:81:fe:1d:cb:2f:02:ce:13:54:ce:42:d6:0c:
         33:28:99:76:a1:e7:27:a9:b0:b4:9c:ab:f7:c1:f4:95:37:c7:
         84:cb:64:5b:fe:0f:c3:fe:1f:f5:c8:57:e7:0c:b3:17:fb:e8:
         8a:ae:32:f8:0c:d5:83:c5:5e:4f:63:6d:66:96:66:54:f2:ca:
         f9:89:ae:a4:5e:3d:9c:2d:49:0c:6b:bd:56:90:16:0a:b4:73:
         0f:c3:03:15:26:8f:55:d4:63:36:6a:ce:33:df:63:fd:b6:89:
         ba:3f:32:ef:ee:b9:b7:ce:57:a9:ab:2d:5f:4c:e1:0f:0a:a1:
         0f:67:58:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----