Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer
File:                     5599678a-c6a8-4921-aa0a-62a64b2f1631.cer (raw, json)
Hash identifier:          xY/Pdq9cqr2M7maD9fnrfQZcX1AaIeKGwrpW8QXH0tw=
Subject key identifier:   A7:57:A4:B1:32:85:CF:43:2E:0E:54:6F:2F:1A:B3:97:5E:12:40:5C
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845B5F65A25533E6B190273D2C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 29 Apr 2024 22:03:45 +0000
Certificate not after:    Sun 02 Aug 2026 22:03:45 +0000
Subordinate resources:    AS: 398437
                          IP: 170.39.36.0/22
                          IP: 2602:fd39::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b5:f6:5a:25:53:3e:6b:19:02:73:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Apr 29 22:03:45 2024 GMT
            Not After : Aug  2 22:03:45 2026 GMT
        Subject: CN=5599678a-c6a8-4921-aa0a-62a64b2f1631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:17:db:5d:b8:9d:dd:65:09:4c:ca:1c:fe:
                    b1:26:7d:63:2c:8b:45:dd:3f:fe:ef:81:28:e1:df:
                    5f:73:49:93:5f:b2:dd:36:f7:19:67:59:15:57:f0:
                    cc:0b:bb:7c:3a:72:1d:a8:a1:cd:91:3e:7f:fd:78:
                    aa:90:71:28:39:65:2a:b0:07:0f:4c:3b:bd:bd:d2:
                    0b:b4:3e:24:d3:43:9a:49:5a:3b:fd:0c:6d:2c:f9:
                    0b:b9:37:6e:a5:6b:a9:62:b9:cb:2a:b2:3e:f3:03:
                    9e:cb:82:da:50:78:71:55:08:66:5d:60:78:6d:71:
                    e4:ee:3a:d1:d0:ce:b2:d7:d0:56:c4:b7:d1:63:c2:
                    f6:32:26:63:a7:17:43:57:db:d0:c0:7e:20:3e:e9:
                    a8:71:78:e4:4e:fb:79:ca:aa:6a:89:5e:57:39:59:
                    66:3f:87:a2:00:57:fa:53:25:fe:b2:a2:08:1f:7f:
                    a7:6c:64:c3:56:e9:52:55:48:0f:1c:16:67:85:ab:
                    4a:f4:1e:5f:da:c5:9b:13:5c:e8:4a:74:a2:24:f3:
                    29:bc:ed:97:47:9f:cf:12:00:b4:9d:23:00:75:d5:
                    b9:0e:a6:ec:b6:00:6f:ea:67:59:a7:86:4f:d9:21:
                    b4:b8:f7:3f:8b:94:95:aa:4e:07:3f:09:2d:3a:c1:
                    2e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:57:A4:B1:32:85:CF:43:2E:0E:54:6F:2F:1A:B3:97:5E:12:40:5C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.36.0/22
                IPv6:
                  2602:fd39::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398437

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:8e:64:42:48:82:ba:3e:b5:e3:b4:cd:e6:c4:1f:08:ee:6c:
         48:7a:81:22:f1:26:5a:06:81:34:eb:a8:93:05:c1:db:42:e0:
         0b:5f:1d:1a:62:52:00:94:6e:54:b9:23:b8:1b:21:74:2b:b6:
         55:31:01:5d:82:99:c7:4d:91:61:01:3e:ba:5f:02:97:c8:6e:
         10:d2:34:7b:2f:0c:8b:82:31:15:79:09:9d:84:e5:77:db:f5:
         8c:00:75:71:54:8b:00:0e:bc:c9:44:cd:7e:3f:9e:ee:6c:e1:
         ff:eb:9b:52:f5:d9:c0:2a:f2:a7:2f:4a:12:af:5d:8f:44:e6:
         aa:eb:51:f8:50:97:dd:81:2f:4d:68:90:3a:07:cd:9c:a2:fb:
         3b:07:9c:b8:cf:28:cd:c2:dc:e9:65:27:8d:d9:ca:9c:9b:58:
         a4:23:89:cc:b4:34:e8:96:3d:4e:81:1c:a5:3d:a9:3f:1d:0d:
         d4:bc:1a:45:46:0d:63:c9:67:9c:00:f3:a7:fa:4e:69:91:fa:
         2a:12:27:b4:6d:c0:e1:1c:4d:a4:74:62:b8:a2:4c:fc:d4:40:
         4d:8a:bd:86:f6:c0:52:62:d6:99:31:87:3e:a6:65:9e:be:d2:
         54:48:f3:74:01:f4:32:97:bc:c6:30:d4:01:9a:d8:c3:a9:63:
         69:98:2e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----