Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
File:                     8baf6f06-4472-4c79-8a01-5c338d64c402.cer (raw, json)
Hash identifier:          fPecSrqrnU7gZp4ViBepH0cw80IZB6VNkEQhTQlGNQo=
Subject key identifier:   95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584622ED50B8842AFF9161C07CD0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 07 Jun 2024 22:48:39 +0000
Certificate not after:    Thu 10 Sep 2026 22:48:39 +0000
Subordinate resources:    AS: 401082
                          IP: 2602:f8b4::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:22:ed:50:b8:84:2a:ff:91:61:c0:7c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun  7 22:48:39 2024 GMT
            Not After : Sep 10 22:48:39 2026 GMT
        Subject: CN=8baf6f06-4472-4c79-8a01-5c338d64c402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:11:6f:1b:fd:c6:5c:96:00:58:68:4f:64:60:
                    89:2c:ad:f6:bb:cd:00:b7:0e:97:84:d6:9b:33:fe:
                    f4:ba:44:47:4f:0a:b0:54:7a:f5:e2:ef:1f:83:a8:
                    78:d1:23:42:98:56:67:61:bb:cf:4f:97:00:86:16:
                    85:3b:2b:98:c1:a0:a1:66:97:5e:e5:70:19:13:8a:
                    2d:4f:69:9f:9f:2a:46:5c:2e:a9:2f:68:18:af:8d:
                    4b:0b:64:ed:89:20:61:6c:72:13:3d:46:f6:31:87:
                    ce:01:ef:87:4f:be:39:8d:c0:d0:bf:68:95:d3:89:
                    10:ee:ee:87:ed:b3:9a:68:7c:0f:8c:6f:9d:93:e7:
                    6a:10:13:df:e8:c3:0e:6b:33:bc:ce:f0:3b:5d:71:
                    ad:4b:5f:53:03:5d:aa:2a:41:da:95:9f:8f:bd:a8:
                    e5:72:b2:ec:d3:ec:65:55:2d:cc:fa:54:6f:a0:c6:
                    54:96:15:6f:37:b8:eb:a5:79:95:42:79:ab:e5:50:
                    95:45:99:57:7e:be:0b:85:ea:4a:c4:59:f0:0d:35:
                    e1:a4:c6:59:88:32:9b:35:f1:27:2e:0b:3b:b2:4e:
                    61:c6:a2:9d:2c:00:f4:32:b3:65:9a:92:65:e0:1c:
                    87:17:34:b1:13:43:80:b7:cc:e8:51:3d:c4:92:ef:
                    fa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8b4::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401082

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:5f:20:46:da:9d:89:44:90:02:a4:50:aa:dc:19:ed:15:d1:
         9d:66:93:52:85:76:85:33:47:9d:25:d3:08:c0:4c:39:37:f2:
         df:65:e9:65:28:3e:87:83:59:bf:f9:0a:84:49:7f:a1:9e:3a:
         1d:68:d7:a1:a3:8f:93:8f:45:86:9a:53:a7:0e:bd:03:64:ce:
         b9:f2:ee:66:d7:bc:d9:60:e7:6f:f6:73:df:8b:7f:5b:2c:30:
         8a:a9:12:49:7a:a2:96:7b:32:3f:c4:f8:e5:d1:43:bf:a7:12:
         78:98:fc:65:78:8c:e0:8d:77:4d:31:eb:f0:de:99:7b:f0:ec:
         09:a2:e7:5c:54:f5:bc:1c:2a:8f:40:5f:2b:b6:ef:42:29:94:
         9a:cb:5c:da:7e:b0:68:1c:5e:73:da:c5:32:54:b4:71:fc:14:
         fa:d6:b0:0b:00:ed:74:6c:87:5f:ef:94:1f:bd:eb:c2:6b:03:
         6a:da:e8:7a:8f:85:e1:45:b8:d1:c6:3f:e1:03:5e:5d:85:f1:
         83:35:53:bb:23:96:4f:88:b7:61:bb:2b:d4:00:6f:bf:11:96:
         30:d3:1c:8e:3c:47:52:5d:c9:76:54:95:11:95:01:35:17:52:
         a2:f2:e0:b5:a0:a1:35:b2:af:eb:f9:c9:aa:22:bb:c3:d6:13:
         7e:d8:3c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----