Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055.cer
File:                     fce46eeb-4860-4c58-a01e-b357cd55e055.cer (raw, json)
Hash identifier:          bf/hQ5mBdHUA0GXKewzcNWLXmiOugRa9mZs8jzwgAwI=
Subject key identifier:   7A:15:3E:25:DA:09:EC:39:48:A4:91:CB:25:93:76:4E:FE:8F:EB:2D
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858439500285161E5A36BE57F1800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055/fce46eeb-4860-4c58-a01e-b357cd55e055.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 17 Oct 2023 17:07:58 +0000
Certificate not after:    Mon 19 Jan 2026 18:07:58 +0000
Subordinate resources:    IP: 205.237.24.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:95:00:28:51:61:e5:a3:6b:e5:7f:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 17 17:07:58 2023 GMT
            Not After : Jan 19 18:07:58 2026 GMT
        Subject: CN=fce46eeb-4860-4c58-a01e-b357cd55e055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7d:20:96:fc:42:36:b7:dc:a2:e5:df:3c:d0:
                    89:99:c0:22:1f:9f:f3:f1:9d:da:91:c0:34:18:c3:
                    b9:e8:cd:7f:ac:de:3c:1f:e6:d4:b4:bb:97:a5:ae:
                    27:34:ad:09:bc:88:b2:44:3c:f3:65:ac:4d:48:12:
                    45:96:82:47:7d:31:88:d5:9a:01:7c:37:2e:a1:6b:
                    11:ea:bc:45:eb:c1:4a:ae:64:40:01:d0:49:85:b1:
                    32:26:d1:37:a5:45:ff:c4:15:cb:ca:5e:d1:10:59:
                    8a:ba:26:e0:7f:ec:fe:a2:40:96:8d:39:52:44:fc:
                    aa:e9:de:3e:a0:4e:4e:26:7e:bb:6c:82:ae:c1:10:
                    11:d0:b5:dd:6c:75:31:73:bf:ef:70:b5:a8:05:de:
                    30:ed:10:2b:4e:30:5d:26:e3:4f:6c:73:8f:cd:5f:
                    6e:95:0a:60:f2:4e:cb:bf:f7:f1:76:ca:48:65:f3:
                    d2:11:da:9c:3a:b5:98:f6:bb:83:2c:85:ac:a8:45:
                    de:db:b1:4f:64:02:f3:c3:5b:37:7c:d4:5d:ed:0f:
                    69:04:34:a1:26:34:52:aa:3d:99:58:cd:6c:31:38:
                    82:60:0b:b2:88:48:88:34:3c:62:fd:dd:b8:eb:34:
                    67:e0:3f:5b:92:81:79:9c:52:5e:56:33:92:99:2a:
                    4b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:15:3E:25:DA:09:EC:39:48:A4:91:CB:25:93:76:4E:FE:8F:EB:2D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055/fce46eeb-4860-4c58-a01e-b357cd55e055.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:55:a1:06:b7:8a:dd:d2:99:9f:ef:13:09:e4:e2:cf:83:b6:
         54:b5:72:97:cd:30:e2:30:b1:46:4c:56:ac:47:28:4b:e0:8c:
         9a:00:c0:dd:9b:9d:a5:d1:51:41:1d:a7:32:27:84:be:3e:2f:
         b2:d6:23:56:05:43:bf:cb:6f:60:1e:a2:18:06:d1:c7:9e:73:
         3d:44:03:39:0e:b1:64:c8:42:da:0a:88:58:6a:0a:96:f8:9a:
         18:70:45:8c:f4:ba:fd:cc:ac:73:f3:0e:78:fd:b7:aa:30:08:
         a1:a7:a7:3f:19:7b:c4:04:c5:02:5e:1b:c1:05:b0:2a:e2:b3:
         19:14:d9:e3:96:ad:e5:fb:2a:59:65:15:c4:99:4e:9f:4b:32:
         26:dd:6b:fe:9a:c8:59:d3:72:d3:2f:63:50:de:df:b5:1b:f3:
         93:4f:34:a7:9d:11:66:d9:5c:90:d2:8e:12:65:d2:a3:32:9f:
         97:0a:ce:d2:db:f8:1a:38:60:8d:8c:94:d2:01:91:da:fd:47:
         1a:73:82:cf:7d:d0:fa:73:80:61:ff:5b:7e:8b:bc:0b:09:47:
         67:4e:6c:ec:6c:24:82:70:0c:98:22:13:a0:bc:46:2e:9c:34:
         ec:f1:aa:16:e5:25:be:af:2d:e0:be:07:54:fe:ce:50:76:32:
         0d:4e:44:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----