Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
File:                     0eb1645c-1aee-439b-8505-4341c9574690.cer (raw, json)
Hash identifier:          Ds69LYqQt403QkOGp0vSdq3wHpjvKr5Ggpka8BRXWLw=
Subject key identifier:   8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858462A82A043B961B8CC6DBB0A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 10 Jun 2024 16:00:09 +0000
Certificate not after:    Sun 13 Sep 2026 16:00:09 +0000
Subordinate resources:    AS: 396239
                          IP: 68.69.116.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2a:82:a0:43:b9:61:b8:cc:6d:bb:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 10 16:00:09 2024 GMT
            Not After : Sep 13 16:00:09 2026 GMT
        Subject: CN=0eb1645c-1aee-439b-8505-4341c9574690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1f:aa:65:b5:a5:89:41:86:3c:c7:b4:0b:c6:
                    e2:ee:c0:fd:c8:f1:d3:87:e0:e1:64:46:8b:1d:e7:
                    8c:94:3f:9e:ed:b6:c0:a0:80:15:04:fa:33:eb:4a:
                    ed:4a:68:35:4f:8f:24:72:a2:a5:9b:96:43:68:7f:
                    3b:03:39:a5:b5:29:e8:5f:57:2c:02:0f:01:15:a4:
                    9f:1b:81:b2:f0:e2:87:6b:60:74:f8:50:07:15:7d:
                    6d:e6:3e:b8:fe:dd:d2:33:e5:10:90:c7:84:6e:70:
                    2d:bc:94:be:90:68:b7:33:70:ef:e2:27:e7:90:e4:
                    2a:92:15:b3:85:4b:eb:08:3e:31:b8:68:bb:60:73:
                    3b:8b:0b:f5:95:c5:e0:b3:94:f2:15:a8:51:87:b9:
                    b5:74:86:7b:0f:af:da:7d:f6:4d:1e:ef:bc:58:72:
                    5b:b0:22:38:c5:c1:93:66:9b:0c:ed:49:a9:71:48:
                    e9:4f:d4:61:4a:e2:89:2d:05:b9:fd:d0:3a:b8:39:
                    a9:a6:3d:a3:29:77:b2:69:b5:c8:e5:99:f3:9a:52:
                    11:66:3d:ef:18:65:eb:e4:5f:86:b7:1c:21:3a:70:
                    53:98:b1:f3:4f:b5:20:a4:1f:dd:5e:31:31:3c:30:
                    07:69:a9:14:0a:60:53:ec:dc:7f:f7:a8:a0:1e:32:
                    e8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.116.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396239

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:56:19:c8:f5:19:d3:a8:c4:4f:7a:b1:ce:2e:b8:93:2c:d0:
         46:8c:9d:45:e8:54:21:16:d8:b5:25:d9:13:49:bb:b9:b0:19:
         91:cc:9a:44:bb:da:0c:c9:73:b0:e3:fc:a0:cc:08:b4:2a:87:
         6b:f4:15:4e:31:e5:9d:9f:35:8b:1c:92:e2:d5:4b:27:e8:79:
         d0:83:d2:57:d3:93:90:42:a3:2d:22:56:17:e2:6a:0f:ce:85:
         22:04:fc:94:42:83:db:d9:4d:df:b3:44:5b:75:47:0d:bb:87:
         f7:9c:6d:c5:72:3a:27:7f:fa:d9:9e:5b:70:19:d1:1e:f4:7c:
         6e:9a:08:5b:4f:1b:ce:34:dd:d0:08:eb:ad:8d:be:03:2e:c4:
         da:57:c5:68:7a:1b:5d:28:34:37:27:92:4b:81:55:0d:33:b4:
         1c:c1:59:2f:54:12:04:c9:64:22:91:01:56:08:10:f0:3b:66:
         93:a1:14:05:5e:35:36:9d:b0:fa:da:1a:67:e5:0a:8f:ae:2f:
         80:49:4a:f0:9d:08:52:a9:91:c9:5d:65:51:62:1f:1a:e8:5a:
         93:eb:7b:d6:21:55:58:89:57:bd:ca:d4:98:ba:46:90:fb:f1:
         a6:eb:bb:7c:de:a7:7e:aa:b8:a1:ed:6f:f1:37:1e:9c:93:73:
         8a:05:b2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----