Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67.cer
File:                     fc3e43f1-7036-46e1-946a-c9e7a67efa67.cer (raw, json)
Hash identifier:          lXb/ZbVKCVylQpyl7+W2PtqiyDTv1WUdc1w2Sj7LhwE=
Subject key identifier:   D0:62:53:48:F7:DB:E4:10:64:33:BE:C3:2B:02:93:C1:6C:53:B4:85
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843FC7827EFD27F44843918C500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 23 Nov 2023 18:38:00 +0000
Certificate not after:    Wed 25 Feb 2026 18:38:00 +0000
Subordinate resources:    AS: 40119
                          IP: 2620:fc::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:fc:78:27:ef:d2:7f:44:84:39:18:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 23 18:38:00 2023 GMT
            Not After : Feb 25 18:38:00 2026 GMT
        Subject: CN=fc3e43f1-7036-46e1-946a-c9e7a67efa67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:30:40:ea:94:06:62:da:15:b7:d7:6b:b9:87:
                    8a:34:7a:12:61:71:4c:4f:f0:cc:6c:fa:51:0a:06:
                    a3:44:47:c9:84:25:7c:7b:55:19:18:6f:15:1c:25:
                    6e:cb:47:5e:bb:eb:8c:4e:da:96:2d:91:06:66:ad:
                    29:7a:81:c6:37:d2:d7:62:20:14:98:58:24:7d:db:
                    41:e5:e6:63:91:22:35:3a:fe:34:f8:81:1f:09:c3:
                    f1:fa:dc:9f:db:77:50:8c:24:c3:ad:d7:9e:61:2b:
                    a2:33:f1:42:e8:ca:63:e1:90:ec:67:8e:27:d6:eb:
                    7b:89:42:d1:65:eb:8e:be:a7:4a:33:1e:0a:2d:53:
                    2d:41:d5:cf:76:0b:4e:3e:b7:21:dd:49:85:40:46:
                    73:2b:a7:ea:57:b5:a6:5c:65:22:85:bb:e1:9a:55:
                    d7:9a:b2:24:3d:94:bf:2c:a7:88:4f:12:6c:20:74:
                    75:cb:36:e6:6b:6b:d0:39:f2:47:7d:26:1e:b8:77:
                    a4:57:92:ac:01:35:09:e6:af:df:b3:28:4e:16:76:
                    5c:4d:b0:80:0c:0d:f5:99:6f:3d:5c:9f:86:c6:e9:
                    af:22:91:bd:4c:c1:12:a2:be:eb:de:df:3a:25:8f:
                    98:25:b6:d5:1e:f1:98:7f:46:d8:91:b3:46:b0:64:
                    bb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:62:53:48:F7:DB:E4:10:64:33:BE:C3:2B:02:93:C1:6C:53:B4:85
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:fc::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40119

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:20:6d:2f:94:a4:ed:b1:a8:e5:2a:fc:04:89:5e:2b:67:a3:
         98:dd:04:21:f7:ce:c7:2b:4c:dc:79:53:00:4a:9d:96:54:11:
         dd:52:af:76:16:2e:fa:d3:9c:1a:00:cd:51:e7:96:73:34:f1:
         54:47:8c:ec:7a:49:52:73:f5:40:c8:17:76:ff:c1:61:70:3d:
         27:68:75:14:49:5f:00:cc:88:d7:63:3c:60:27:1d:38:16:1d:
         4c:bd:33:fe:a9:17:c7:5a:e1:31:ce:db:3f:6b:6f:47:af:68:
         f4:7b:c9:78:d2:04:97:4a:c6:46:b5:c4:cb:48:f2:4d:aa:89:
         fe:c0:b1:4d:59:b0:aa:72:44:86:64:6c:96:dd:44:cb:1e:86:
         76:35:e4:85:a2:17:4a:57:d4:be:82:09:ea:af:80:88:36:95:
         93:7c:8a:bc:66:9c:ee:08:a3:8f:89:2c:5e:71:e7:2b:c9:fd:
         f5:8b:a9:73:6c:0b:de:25:e8:b8:5a:74:a3:2d:c0:b1:4a:62:
         24:db:c6:b2:75:a0:af:8d:cc:cc:d1:77:f5:2a:9f:59:8d:17:
         4d:36:ac:26:1f:65:12:b3:fe:11:9f:e3:b0:ff:92:5f:b5:25:
         9d:95:10:d7:29:44:fd:98:74:b5:60:88:f7:bd:ba:0c:50:03:
         5a:54:8b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----