Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer
File:                     15164b64-0a30-43c7-b7d1-dda370c303f8.cer (raw, json)
Hash identifier:          Qgk3uowPuFAXam1Sxvgker7nxPGwydTV/rwz9OQj3LI=
Subject key identifier:   60:FC:2D:3B:F2:7B:1B:67:6C:0F:C3:29:85:FE:B2:B9:05:43:B3:01
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858459FF112DE80F0E31C839FF180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 22 Apr 2024 00:45:20 +0000
Certificate not after:    Sun 26 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 11135
                          IP: 199.102.136.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9f:f1:12:de:80:f0:e3:1c:83:9f:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Apr 22 00:45:20 2024 GMT
            Not After : Jul 26 00:45:20 2026 GMT
        Subject: CN=15164b64-0a30-43c7-b7d1-dda370c303f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d1:32:a2:df:5c:1e:fb:30:d6:cf:fa:c7:eb:
                    82:09:c8:bb:a5:71:24:69:c2:e3:97:e8:f9:97:38:
                    8f:95:62:18:bd:4f:4f:2d:c2:57:05:7d:b2:0f:60:
                    de:24:98:62:46:1c:4f:3b:f0:b6:42:fe:85:ed:eb:
                    9c:77:87:e2:33:fc:74:98:cf:a3:ee:6c:84:1c:67:
                    51:02:8a:60:c0:5a:b3:99:fc:42:e3:48:99:2f:48:
                    0f:e4:14:1f:63:1c:f6:b9:fe:3b:e3:52:fb:6e:a0:
                    ed:24:c2:a0:ef:94:7d:c7:81:98:6e:a2:04:eb:01:
                    c9:1f:4c:88:ab:08:94:93:b1:69:a7:9a:04:f9:5a:
                    72:1b:fa:72:f4:da:91:c9:75:28:15:74:9e:68:6b:
                    86:d4:3f:f3:fb:1e:1a:71:ff:55:54:4a:f3:a5:d2:
                    65:6d:9f:5e:5d:a1:b2:52:d7:a8:43:44:fe:2b:2b:
                    56:21:35:6f:79:ff:14:fc:f2:6f:70:e9:af:b1:42:
                    81:c3:69:30:e4:7e:ec:bf:74:da:a5:59:f3:c4:d1:
                    bf:c5:ce:60:13:6d:15:cd:8b:23:06:4d:fd:c5:d5:
                    76:f1:b3:67:72:fc:8f:b2:06:12:5f:54:d8:46:ab:
                    f4:32:25:ab:ea:58:6f:d8:48:60:43:ef:ca:56:a7:
                    dd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FC:2D:3B:F2:7B:1B:67:6C:0F:C3:29:85:FE:B2:B9:05:43:B3:01
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.102.136.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11135

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:4a:44:1a:f5:1d:f1:d6:5d:62:a7:df:1f:7f:49:3f:4c:db:
         f1:f5:c9:07:7d:56:90:2e:5d:7f:41:20:e8:33:34:30:f1:c1:
         67:26:e2:71:41:9d:a9:be:93:dc:14:0e:eb:f1:ef:7d:21:0f:
         21:75:aa:99:39:77:1b:56:c7:83:0e:1f:27:f9:ce:d2:b7:87:
         2e:9a:4e:7a:a1:98:3f:4c:4a:ae:30:1b:e5:6d:aa:cc:00:6a:
         8c:83:eb:2d:42:6e:bc:52:59:cb:7c:db:d0:35:59:3e:96:62:
         ef:66:e9:ec:03:76:f2:c1:09:0e:b5:3d:90:22:d8:4f:48:a9:
         ab:54:00:50:59:b4:9e:16:ee:9b:18:9e:58:64:1d:bc:ea:25:
         40:e0:85:e0:19:dd:9a:7d:fb:3e:1b:19:71:1e:3b:48:4a:bb:
         58:ad:d5:ba:14:87:27:c4:69:85:a5:04:b0:ce:a3:e6:86:c2:
         7f:9f:e9:f5:03:09:3f:07:7f:30:c9:00:f5:59:eb:58:4e:b1:
         88:3e:8b:2f:45:6b:63:1c:69:57:9b:42:f3:6a:8d:7e:bc:c2:
         b0:bd:bb:3b:8c:81:12:31:97:86:fe:02:9c:02:25:b0:d4:53:
         e4:9d:08:b2:9a:46:7f:eb:0f:b3:09:c8:f6:f2:85:66:8f:5c:
         d2:ef:e3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----