Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00b188f3-29bc-40fb-9fbb-ab274edaa4d8.cer
File:                     00b188f3-29bc-40fb-9fbb-ab274edaa4d8.cer (raw, json)
Hash identifier:          NmTAF81CX4uPCjHfAGtTCaP+JSsRDOoNarckICAr63k=
Subject key identifier:   91:F1:11:E5:5D:00:DE:79:56:9E:EC:AF:B5:D0:5A:A0:30:B9:4F:A7
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584586D0EBAEF976D857A8B0675B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00b188f3-29bc-40fb-9fbb-ab274edaa4d8/00b188f3-29bc-40fb-9fbb-ab274edaa4d8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00b188f3-29bc-40fb-9fbb-ab274edaa4d8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 13 Apr 2024 00:45:20 +0000
Certificate not after:    Fri 17 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 993
                          AS: 400105

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d0:eb:ae:f9:76:d8:57:a8:b0:67:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Apr 13 00:45:20 2024 GMT
            Not After : Jul 17 00:45:20 2026 GMT
        Subject: CN=00b188f3-29bc-40fb-9fbb-ab274edaa4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:21:88:36:9e:44:77:3b:a3:39:b4:89:d8:d5:
                    e6:84:91:ee:97:a0:ad:ad:25:75:ab:40:90:10:98:
                    68:10:f3:a3:85:25:6c:2c:17:34:49:28:38:f5:c9:
                    89:f1:87:41:9f:95:32:7a:a9:26:9a:ac:41:b9:d1:
                    f5:7f:f6:14:ab:08:00:39:72:ee:7c:70:42:37:34:
                    56:e8:8a:cd:d3:b8:82:79:3d:8e:0f:fb:f5:19:89:
                    07:9a:c5:7e:b7:af:44:ce:c7:04:b8:46:9c:3b:4a:
                    1b:3a:1f:05:bd:b7:87:f1:05:35:51:37:65:9d:91:
                    17:5c:56:18:31:48:5b:19:16:ef:3d:bf:86:c4:cb:
                    9f:ee:0c:c7:43:a1:f7:84:d6:09:df:f0:97:36:ef:
                    04:cc:8c:d3:61:45:3a:96:be:98:5c:e7:77:90:0e:
                    79:92:62:f1:5c:2a:fd:06:17:e2:3a:9c:43:d7:1c:
                    ae:c1:ad:de:41:8f:d8:cb:b0:06:ca:15:15:67:76:
                    00:ed:33:d4:46:c7:0f:72:93:c7:a2:c8:fa:13:65:
                    32:05:7a:b5:82:7b:8e:b6:e1:ab:d7:77:02:75:bf:
                    0f:bc:2a:c0:d1:17:b8:cd:fe:a1:b8:17:10:a4:91:
                    f0:6e:ef:c0:1b:6c:10:35:85:c1:e0:85:33:1d:63:
                    f3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F1:11:E5:5D:00:DE:79:56:9E:EC:AF:B5:D0:5A:A0:30:B9:4F:A7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00b188f3-29bc-40fb-9fbb-ab274edaa4d8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00b188f3-29bc-40fb-9fbb-ab274edaa4d8/00b188f3-29bc-40fb-9fbb-ab274edaa4d8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  993
                  400105

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:d1:71:a9:57:5f:f9:ff:cb:15:e1:48:f7:3f:fc:c3:f8:1b:
         70:b6:07:07:4e:af:c7:1a:76:c7:9b:f3:21:eb:59:01:bf:08:
         6f:1c:6e:2f:ad:fd:87:12:26:91:d8:8c:6e:7d:24:a5:ca:55:
         9b:8f:a4:a0:29:85:42:1c:ba:7a:52:fe:16:a8:d9:ad:f6:4e:
         23:9a:1b:7a:0f:fc:dd:75:22:f9:94:d9:5b:a1:f5:c2:94:f4:
         0a:3a:00:d9:ac:02:02:32:7f:9c:8e:3b:1a:52:a6:cc:f2:6a:
         8f:d2:8d:e6:28:e9:fe:e7:88:de:cb:20:99:06:e1:6d:cc:3a:
         93:6b:d4:1f:f7:cf:29:59:22:c4:0b:82:d0:c9:4c:68:6b:1a:
         cb:a5:65:a7:15:22:34:dc:2a:eb:e7:e3:43:e9:45:e7:83:f4:
         b4:d6:70:94:d8:ac:22:06:c6:c4:98:fa:d9:d1:ef:56:0e:70:
         25:80:69:82:78:ee:1d:fa:e6:aa:37:c5:b0:4f:26:68:bb:7d:
         47:d7:09:3e:6d:c9:81:69:77:09:6a:8f:e8:69:ae:f9:3f:a3:
         52:d6:21:16:d2:5f:d7:72:7e:6c:b0:ee:cf:30:2e:5a:0e:01:
         85:73:f6:35:b5:2b:5f:09:62:40:b4:eb:76:90:7b:dc:86:49:
         b9:76:31:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----