Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer
File:                     8637a780-1944-4d75-b623-0c10c96f56eb.cer (raw, json)
Hash identifier:          Pw0ci6eIWg5Mo5pD/hZGNOn6dDQWGvmcVsjrTY4WZ8A=
Subject key identifier:   97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858463384034C755334C685120D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 13 Jun 2024 21:25:14 +0000
Certificate not after:    Wed 16 Sep 2026 21:25:14 +0000
Subordinate resources:    AS: 401133
                          IP: 2602:f8a3::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:33:84:03:4c:75:53:34:c6:85:12:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 13 21:25:14 2024 GMT
            Not After : Sep 16 21:25:14 2026 GMT
        Subject: CN=8637a780-1944-4d75-b623-0c10c96f56eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:07:c8:3a:da:08:f2:45:ea:a2:d9:21:96:e2:
                    e6:20:07:49:1b:c0:40:6a:f4:4a:90:1c:88:d3:96:
                    1d:11:8a:aa:07:c3:6f:8e:88:63:7a:84:d3:5f:a1:
                    22:64:11:5e:8e:9b:6e:57:46:de:05:52:6b:eb:c3:
                    37:ec:21:be:1f:a1:8c:be:28:62:eb:7e:ec:4a:b0:
                    9d:bc:50:8a:17:81:f3:d6:79:ff:a6:3e:e9:bd:00:
                    48:da:93:e9:0a:c7:49:d4:19:9f:13:15:db:f7:ff:
                    92:88:cf:0a:b0:bf:e8:b1:ae:06:2e:ab:80:67:e7:
                    39:b9:8b:a2:f2:0e:f0:52:60:bd:b6:26:05:86:c9:
                    5a:95:c8:40:ad:00:b9:8f:5d:15:41:82:75:d4:5c:
                    49:0a:a1:89:50:a3:3f:8e:b3:9e:87:b0:2a:c6:67:
                    94:03:5d:0e:1a:d0:96:3d:01:24:f7:56:f3:69:04:
                    29:63:a8:a8:aa:44:ef:6b:98:08:f8:79:8b:86:4f:
                    ee:40:21:87:98:b7:87:1d:58:1e:68:32:b3:b1:c9:
                    c3:d3:a2:d8:e3:2b:f8:36:ad:ed:73:3d:6d:1b:ce:
                    84:dc:be:42:7d:19:f2:1d:0d:aa:f1:14:35:54:66:
                    39:39:d2:0a:46:ee:8b:32:d9:25:03:30:22:aa:57:
                    ea:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8a3::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401133

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:8d:c4:ae:52:f1:1f:46:cb:30:88:43:f1:8c:67:49:74:84:
         02:dc:00:28:ca:79:ca:03:a6:2f:63:e4:66:8e:e4:39:ea:29:
         e4:d7:5f:fe:a2:bc:e2:22:72:a4:35:0c:85:69:59:2c:31:db:
         4c:6a:1e:3d:00:e4:6d:0e:d2:bf:5e:32:f2:6e:89:91:eb:a4:
         6b:93:35:6b:4f:56:d1:80:14:7d:27:c3:7d:36:40:68:25:e2:
         38:35:a0:25:5c:c3:ad:83:d7:e9:7b:bd:9c:6a:52:0c:57:d1:
         8a:bd:6e:5c:fb:0b:1b:b8:48:75:08:8f:7a:f7:ae:bb:39:e8:
         47:b8:19:43:4a:8a:dd:84:5a:22:4b:8c:f3:db:f1:e8:15:fa:
         78:01:84:ea:ef:7a:89:2a:b6:60:24:2b:85:d7:4e:a3:dc:4b:
         ff:60:81:63:d7:ba:70:a0:30:09:4d:c2:78:ea:3e:56:a4:a4:
         51:b0:8a:8a:b3:d1:40:df:bf:8b:37:e4:29:80:dd:ad:dc:27:
         2c:d9:09:0e:83:cf:26:ab:4e:6b:23:f1:b0:f7:84:78:5e:c7:
         97:ac:60:ad:db:8d:4f:a5:db:0f:74:9d:36:90:b7:2f:da:94:
         58:89:08:91:1e:03:3f:ce:88:f7:64:77:17:ce:84:66:95:a9:
         1d:f1:7b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----