Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer
File:                     3878fd50-eae1-4b38-a142-8eff8910579b.cer (raw, json)
Hash identifier:          K3laUTsqepklwKZrBqf2+wOcOfgmdU7hnXLwyoc9zSI=
Subject key identifier:   40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858461F6FC041256F0964F2681C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 06 Jun 2024 16:48:14 +0000
Certificate not after:    Mon 07 Sep 2026 13:23:57 +0000
Subordinate resources:    AS: 14807
                          IP: 23.180.104.0/24
                          IP: 2607:b7c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1f:6f:c0:41:25:6f:09:64:f2:68:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun  6 16:48:14 2024 GMT
            Not After : Sep  7 13:23:57 2026 GMT
        Subject: CN=3878fd50-eae1-4b38-a142-8eff8910579b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:88:d2:4b:e8:f0:15:33:f0:82:25:f5:91:80:
                    d1:7a:d4:36:9c:8e:aa:02:42:1a:f8:9b:1c:c2:03:
                    48:e0:60:a0:48:de:ec:71:2d:cc:55:3e:81:22:0f:
                    e7:97:95:3c:f3:c6:e1:01:d9:04:d1:96:f4:0d:94:
                    94:eb:83:2c:30:2e:af:36:e2:95:c2:cf:ab:c5:5d:
                    d3:ce:ba:93:a4:e1:d8:9e:a4:5f:a2:99:87:15:af:
                    17:1e:2d:e7:38:de:3a:74:1d:59:82:3a:95:bc:39:
                    44:8e:5e:5a:57:af:f1:61:39:46:35:88:13:d7:a8:
                    0d:55:7c:87:84:37:00:ab:a1:98:5c:56:c9:c2:4c:
                    e9:4c:fa:07:0c:b4:26:8e:ee:32:a7:7b:03:eb:68:
                    d9:de:fa:de:84:2b:73:f2:1e:65:0b:28:86:06:ea:
                    6f:71:ca:2c:3b:4e:4a:d8:2b:46:e7:32:ce:72:8a:
                    73:56:ab:20:d0:ec:35:16:2f:51:5e:38:1e:df:8e:
                    12:8c:d3:48:f1:2c:c2:a9:e8:73:a9:dc:c4:46:1b:
                    9e:4f:35:51:9f:e3:10:92:7d:4f:c1:d0:56:e3:cc:
                    56:d5:1c:60:41:09:05:48:8e:59:ab:de:a2:1f:04:
                    f7:cb:05:f5:50:72:2a:11:fc:79:3d:41:ba:4f:c0:
                    d7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.104.0/24
                IPv6:
                  2607:b7c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14807

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:6f:22:dc:ce:06:52:e2:d6:99:bc:7e:04:a0:b8:ed:e8:bf:
         e7:8b:58:6f:18:34:15:29:20:cc:e1:5e:3c:a4:e2:df:19:13:
         79:7d:1f:4c:db:71:da:93:22:ca:a4:09:81:f2:3d:14:8b:0e:
         d3:21:91:14:a7:7c:74:99:ed:43:22:06:30:bd:d4:a7:8c:2b:
         58:6a:e4:62:23:b1:33:21:d7:c0:80:f7:04:fd:23:9f:04:06:
         cf:6c:23:22:c3:4c:f4:82:83:97:b9:53:b7:3c:4b:47:dd:ec:
         de:8e:14:fd:11:9b:37:e3:e7:52:64:93:70:c2:bf:05:b4:a4:
         f8:d3:3b:2f:28:e1:aa:53:1b:b8:1b:3d:8a:a1:23:11:72:72:
         84:cb:db:c1:19:c8:5a:15:d2:8b:f3:0e:5e:a6:fb:05:44:50:
         37:66:91:25:ab:c0:cc:be:7d:a6:8c:79:c1:9d:d0:b4:a0:dc:
         94:fe:43:c0:c6:be:9d:9c:b5:61:92:fc:23:0e:22:8b:ac:48:
         c5:77:70:64:5f:1b:88:91:29:45:a6:78:9d:0a:1a:d1:f6:f7:
         bb:a7:06:50:e6:1b:a9:8a:a5:f1:e5:ed:8a:68:92:ef:d5:e2:
         18:c1:3e:a4:4e:29:8e:56:0d:af:53:34:a2:ce:a3:e7:0c:3e:
         16:d5:33:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----