Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796.cer
File:                     5e4e9a46-06dc-462d-a10c-710a3c461796.cer (raw, json)
Hash identifier:          cYIPe+UdNjODCzfDbAlYHexZCp0OOgXy27952AqvXds=
Subject key identifier:   7C:40:0D:39:C8:EA:17:EC:66:AD:20:06:D4:15:6B:F8:0F:DC:FB:4C
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858460BE8205A274D0E05FF51DC80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/5e4e9a46-06dc-462d-a10c-710a3c461796.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 30 May 2024 16:54:37 +0000
Certificate not after:    Wed 02 Sep 2026 16:54:37 +0000
Subordinate resources:    IP: 192.88.242.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0b:e8:20:5a:27:4d:0e:05:ff:51:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 30 16:54:37 2024 GMT
            Not After : Sep  2 16:54:37 2026 GMT
        Subject: CN=5e4e9a46-06dc-462d-a10c-710a3c461796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:97:5f:d5:85:34:43:be:41:5b:49:22:01:1f:
                    da:47:43:0f:6a:1c:a0:2e:c1:fb:02:ed:22:5f:f7:
                    3b:3b:ec:2e:15:d5:6d:af:a8:f7:a7:58:5a:e1:13:
                    b0:3b:76:ff:1f:b3:27:d0:13:12:c5:ee:98:5f:3e:
                    35:0c:31:6f:32:ab:c0:14:7f:d2:88:60:61:f7:11:
                    d6:b5:fb:9d:2c:ac:5c:ca:2c:2b:66:56:e1:9e:8e:
                    99:de:cf:8f:00:46:d0:f1:7a:24:be:96:39:5a:b4:
                    3e:2b:44:ff:aa:03:89:e4:7a:8a:4d:ca:fc:fb:d7:
                    e2:fc:ee:ee:c0:59:e6:ad:b8:17:33:13:99:75:10:
                    c2:da:8c:d9:6c:cd:d3:13:e4:ae:60:54:1a:2f:a9:
                    ba:17:67:e1:e1:20:96:8b:ea:e0:0b:5c:d2:12:73:
                    b4:38:cf:eb:25:38:26:c1:64:39:19:e7:34:f0:1a:
                    38:40:88:82:7a:9c:1f:00:92:d3:e6:5a:49:0b:b0:
                    17:e9:66:ae:af:a8:cb:69:0b:18:97:ae:ad:98:cc:
                    fb:b9:42:b8:97:20:18:f3:d1:b7:fe:7b:12:b1:f2:
                    d1:92:cb:3f:2e:de:99:72:85:36:59:cb:47:c6:11:
                    4a:37:c9:6f:57:0a:47:02:30:5a:40:0e:fd:f1:5d:
                    c3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:40:0D:39:C8:EA:17:EC:66:AD:20:06:D4:15:6B:F8:0F:DC:FB:4C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/5e4e9a46-06dc-462d-a10c-710a3c461796.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.88.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ba:59:94:3b:bf:17:91:a3:a4:0f:40:e1:4a:f8:66:de:6b:
         c4:e1:2f:ef:b1:2e:f7:60:18:f1:5a:74:0c:c1:ef:76:02:25:
         57:46:49:b9:5b:98:18:4c:87:ed:44:8e:e7:2f:b3:35:a5:7c:
         d4:f2:29:69:9e:9b:04:69:fc:7a:9e:d9:68:4e:02:c8:15:fa:
         48:7e:f5:eb:94:fb:4d:50:c5:0e:17:25:15:78:b6:93:e8:ae:
         a8:c9:d3:b6:4f:16:de:13:98:11:8f:d1:03:c7:6c:72:96:6f:
         a3:0d:30:1f:e5:5a:56:30:92:32:0d:3c:7e:12:66:fe:71:c5:
         57:b9:67:99:d7:3e:e8:16:74:8d:ce:0a:a8:26:2d:cf:1c:c3:
         e7:0a:30:dd:33:56:89:4b:8b:6b:d1:a2:2b:28:b9:47:71:79:
         19:27:5c:4c:73:bf:0b:33:2c:73:e1:ea:e7:85:bf:65:2f:f3:
         f7:f2:7d:c8:6c:40:ec:79:c3:9c:9b:42:c1:62:86:f4:af:9f:
         a6:81:07:05:c4:3b:19:31:e7:c0:3d:40:28:65:f8:12:f2:76:
         70:31:86:78:74:04:8f:41:85:9b:d2:91:b2:f2:dd:ea:db:0b:
         79:ca:eb:d5:6c:61:4b:1c:65:50:b1:aa:b3:70:23:b2:47:12:
         37:82:64:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----