Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/026f05e7-b1c2-49bd-9069-8ce87549f2e6.cer
File:                     026f05e7-b1c2-49bd-9069-8ce87549f2e6.cer (raw, json)
Hash identifier:          99sAHOQDrH8ue+t5RWhPZ5EX9bKv8BFgEtpQO03XaRM=
Subject key identifier:   78:DA:90:D2:77:EF:FE:E0:AD:82:5C:8A:16:67:FF:95:90:FF:95:75
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858462D446AE644E14B38144C71C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/026f05e7-b1c2-49bd-9069-8ce87549f2e6/026f05e7-b1c2-49bd-9069-8ce87549f2e6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/026f05e7-b1c2-49bd-9069-8ce87549f2e6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 11 Jun 2024 15:42:14 +0000
Certificate not after:    Sun 06 Sep 2026 16:42:59 +0000
Subordinate resources:    AS: 401123
                          IP: 23.181.72.0/24
                          IP: 2602:f8ba::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:44:6a:e6:44:e1:4b:38:14:4c:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 11 15:42:14 2024 GMT
            Not After : Sep  6 16:42:59 2026 GMT
        Subject: CN=026f05e7-b1c2-49bd-9069-8ce87549f2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:55:e8:57:d5:e9:27:c3:d0:64:ea:7d:cc:
                    52:10:72:56:90:6c:55:11:8c:4c:60:cc:c8:d1:be:
                    7e:6e:58:49:85:44:cf:df:f7:cb:0d:de:57:2a:82:
                    3b:16:1d:a9:e0:81:1d:0c:6a:d1:f0:04:cb:be:97:
                    bf:de:5a:55:5e:0b:5a:f5:44:30:33:3d:4f:1f:ac:
                    4a:fe:6a:8d:c0:b3:42:48:a0:2c:bf:87:1b:25:be:
                    16:0e:a0:2f:bf:b3:7a:7f:fc:02:a8:85:dc:83:b0:
                    10:23:77:10:b9:1f:40:c2:d6:ee:3a:e6:8e:f1:76:
                    19:2f:e7:b0:96:d5:a7:5a:b2:7e:6c:3f:e3:88:2c:
                    e2:1a:3f:15:d4:72:76:ae:10:de:2c:e1:7b:c5:af:
                    85:90:e9:80:e0:9c:40:3b:98:51:48:7c:32:5a:a4:
                    07:3e:c2:6f:c1:f5:35:0d:10:a1:f4:5a:dd:bd:22:
                    9c:1d:be:bc:2b:ff:c2:72:ce:8d:ff:65:e1:e5:1c:
                    0f:8b:af:b8:a0:d4:89:1a:9e:6c:d7:ed:d0:b6:48:
                    2a:7a:23:fd:f2:ea:17:12:3e:f5:a0:ef:2a:87:e1:
                    c8:fa:69:1a:7b:99:73:41:9a:a7:81:f5:1d:c9:83:
                    c0:54:be:3a:bb:99:2a:62:b3:3c:cc:d7:01:6e:30:
                    2a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DA:90:D2:77:EF:FE:E0:AD:82:5C:8A:16:67:FF:95:90:FF:95:75
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/026f05e7-b1c2-49bd-9069-8ce87549f2e6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/026f05e7-b1c2-49bd-9069-8ce87549f2e6/026f05e7-b1c2-49bd-9069-8ce87549f2e6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.72.0/24
                IPv6:
                  2602:f8ba::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401123

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:4e:5a:ac:2b:93:18:72:9a:66:a4:72:94:69:a9:62:4d:e6:
         e4:8b:5b:7b:e2:ee:7f:63:69:6c:01:b2:0e:b1:9e:47:e1:43:
         3c:3f:1b:d1:ec:5e:81:b5:5e:5d:9f:14:03:68:4d:aa:28:01:
         21:58:80:10:bc:e4:cf:5c:13:14:08:89:a4:dd:29:99:f9:c3:
         1e:02:18:5d:4f:7b:01:16:5d:35:23:f5:2a:65:55:b1:f8:45:
         8e:8a:4d:9e:82:c5:bc:52:90:9d:f3:cf:71:49:d2:76:ee:00:
         df:18:f5:eb:b8:1d:e7:bc:4c:a4:df:07:5a:85:54:59:f8:85:
         4b:e4:6e:7c:1e:cd:af:33:fc:a4:5b:93:f0:b6:31:53:29:01:
         24:e0:4a:26:51:f8:fe:72:f7:36:56:7d:c9:80:f5:04:3d:31:
         2d:2c:ed:c0:a4:5e:3f:71:13:84:65:28:c9:8a:ff:58:1c:fd:
         bc:0e:fa:8e:1b:3c:ce:2b:ea:ee:7e:96:f1:cc:10:57:06:c0:
         4c:48:24:a9:44:19:c6:4f:80:8c:b9:fa:91:5e:32:6b:17:85:
         09:81:c2:25:a3:a8:90:97:1a:fb:12:16:10:5a:b7:2f:81:43:
         c7:10:94:65:86:7f:49:1c:51:77:6a:a6:b6:a6:eb:1e:d0:e7:
         db:5b:9e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----