Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer
File:                     f8791c17-503c-4afd-9a0b-412c175e957d.cer (raw, json)
Hash identifier:          F+pr9vnhbEucJxZlxc5VPZclJo1jmMs3YeU5zpreyns=
Subject key identifier:   40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844F9D2D006D00F68A504650200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 22 Feb 2024 12:40:11 +0000
Certificate not after:    Wed 27 May 2026 11:40:11 +0000
Subordinate resources:    AS: 36344
                          IP: 69.168.224.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f9:d2:d0:06:d0:0f:68:a5:04:65:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb 22 12:40:11 2024 GMT
            Not After : May 27 11:40:11 2026 GMT
        Subject: CN=f8791c17-503c-4afd-9a0b-412c175e957d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:47:4c:3f:03:83:ad:90:bd:5e:22:60:97:ff:
                    b8:f9:3f:d0:cc:da:9c:2d:b9:04:9e:f1:81:dc:fc:
                    1f:29:70:ba:9b:e1:01:ec:85:ea:d8:21:b9:d8:84:
                    6d:de:60:93:0d:3a:eb:50:87:64:50:e2:c4:49:97:
                    03:4a:80:71:22:25:51:1a:88:a8:cc:4d:83:fb:bb:
                    9a:f1:42:29:3e:b9:1d:f2:8e:a2:7f:ee:b2:11:6d:
                    93:49:7f:ca:7e:37:cb:02:a1:4a:81:84:70:52:d3:
                    9c:41:59:e5:20:33:59:7c:6b:b8:01:9a:04:f4:58:
                    1e:f2:63:fc:54:9f:cc:44:71:4a:43:89:72:6f:8f:
                    78:92:a5:f1:f8:38:1a:31:6d:24:7a:37:82:3c:42:
                    b6:c2:06:63:13:47:1d:1c:41:be:8c:ed:ee:01:20:
                    dd:81:a1:32:78:3e:9f:2f:2d:fc:fc:3d:31:67:25:
                    43:eb:df:90:e6:b6:c0:3e:a9:9e:39:7c:1a:06:db:
                    0d:b9:f4:a1:0a:ea:5a:2e:ec:fd:76:2e:bd:fd:72:
                    ad:82:1b:20:ce:be:9b:a9:6f:a1:ed:2e:16:83:87:
                    7b:54:04:18:0f:3e:49:54:78:ba:d1:4c:bd:25:b1:
                    1d:59:9a:df:3a:43:47:ab:8a:2b:a7:20:4d:1f:d7:
                    a6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.224.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36344

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:a9:2c:6e:0a:96:02:7b:d0:1b:5b:27:ba:e5:7d:ed:1c:1e:
         a4:46:ea:a9:e8:45:17:cb:fb:0a:fd:da:94:95:bf:99:0e:b1:
         c0:60:ed:38:c8:30:38:a0:4c:ee:5e:2c:51:54:37:60:1c:02:
         cd:ff:7a:d3:ff:5f:56:a0:84:f0:51:03:14:99:fa:e6:75:c1:
         1d:ff:17:03:3c:aa:24:59:f0:a1:3e:24:43:72:d3:41:63:c5:
         2e:a4:78:ff:1f:83:25:a5:c3:1d:5f:53:ad:7b:56:24:00:f1:
         4a:cd:6b:8d:65:dd:4d:3f:dd:82:1e:dc:40:ee:ef:7b:d1:a1:
         0b:1c:4a:79:73:dd:33:a8:97:66:a8:2a:10:ac:7e:7f:eb:05:
         4b:39:0f:8b:88:d1:e8:e3:aa:68:f7:3c:b8:44:16:0c:52:8a:
         ee:09:1b:ad:89:9a:da:3c:6e:96:64:0b:97:bc:05:54:54:82:
         19:4b:d5:e6:cd:7a:32:b3:12:9f:84:d1:e9:6b:98:c0:11:78:
         1a:d4:2d:3d:8b:14:50:ec:e4:74:bf:71:d2:7d:14:ee:18:c9:
         9d:a7:e1:f5:f4:19:d3:3c:f2:61:19:e7:ac:05:5e:7c:11:f2:
         ac:ee:90:1a:13:a6:2c:9d:3c:d6:ce:92:f6:50:53:3a:4a:7f:
         b0:95:65:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----