Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d.cer
File:                     d51683a9-b5b7-4347-877e-9bc1487de10d.cer (raw, json)
Hash identifier:          d+khOWxYdsYjB8GR5Tab+beh41eszoSfLUlh+/99jKY=
Subject key identifier:   51:AA:E5:91:FE:0F:F0:77:E6:E1:74:DA:BF:FB:13:24:75:A0:93:38
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845E273AE7CAB9C442DC70D1768
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/d51683a9-b5b7-4347-877e-9bc1487de10d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 15 May 2024 20:31:51 +0000
Certificate not after:    Tue 18 Aug 2026 20:31:51 +0000
Subordinate resources:    AS: 21925
                          IP: 104.245.64.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e2:73:ae:7c:ab:9c:44:2d:c7:0d:17:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 15 20:31:51 2024 GMT
            Not After : Aug 18 20:31:51 2026 GMT
        Subject: CN=d51683a9-b5b7-4347-877e-9bc1487de10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b1:1f:6e:ba:7e:59:e5:ff:a0:b8:3e:bc:52:
                    25:2f:12:95:3a:e0:b2:5b:20:75:0d:c7:26:f5:3c:
                    d9:1b:7a:53:69:b9:e6:f9:e1:ae:e3:b2:4a:2f:52:
                    00:da:80:b2:6d:23:ed:c8:4f:67:d0:bb:fe:09:0f:
                    4f:43:cb:03:f2:50:ce:5c:a3:39:31:9f:24:68:21:
                    f9:f6:f9:0b:f6:d5:33:0a:6b:00:36:08:3f:e8:10:
                    20:c2:d2:d0:11:3c:1c:fc:86:49:83:3f:7b:77:8d:
                    6b:84:58:c4:f6:4b:df:98:0b:b2:3c:a8:77:bb:dd:
                    96:d3:f5:11:17:cf:69:17:c2:4c:52:9c:c3:1e:53:
                    fe:60:59:e0:c4:a7:d7:12:b5:74:c5:ad:89:48:6f:
                    e8:d7:e7:ae:51:f4:b3:53:03:1e:92:5a:11:81:21:
                    cb:38:ad:c9:23:70:78:60:df:94:6a:d1:11:f4:05:
                    fd:31:b9:00:ba:a0:83:5a:65:0e:ab:d2:8e:02:f1:
                    b4:6d:b0:ca:3a:27:81:0f:6c:3d:bb:a8:78:32:61:
                    c1:c7:dd:08:06:40:c4:fe:83:ea:a7:71:a2:af:5a:
                    45:46:76:03:2f:cb:59:49:f0:56:e3:53:4b:84:4a:
                    f1:8c:8d:83:21:b2:2e:2d:5a:55:e3:59:52:35:35:
                    44:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AA:E5:91:FE:0F:F0:77:E6:E1:74:DA:BF:FB:13:24:75:A0:93:38
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/d51683a9-b5b7-4347-877e-9bc1487de10d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.64.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21925

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:f8:6d:f7:2e:b6:ea:cd:a7:9a:34:57:47:76:b0:5d:ac:1f:
         e3:26:17:df:74:1a:5b:0e:35:0f:2c:21:72:21:fe:2d:ed:4b:
         68:00:73:72:eb:a3:c1:46:2b:87:2b:9f:ff:48:86:21:04:62:
         f3:db:29:b0:d6:65:85:e2:5f:5d:25:e2:fc:96:4f:44:c9:90:
         60:9a:cf:cf:ec:be:f5:50:0b:06:43:76:ae:f9:e1:c2:02:f0:
         69:f1:66:63:0a:d0:34:52:65:5f:b7:dc:08:c9:68:a3:2d:9c:
         c5:15:84:1e:a1:57:94:dd:4d:58:19:9f:ce:5b:35:ec:d3:f7:
         b9:97:f6:f2:cb:da:8d:71:4d:85:84:9f:3a:9b:91:f2:44:47:
         5d:a7:f9:88:40:d3:c0:ef:4f:6c:a2:58:78:8f:4a:0f:90:c3:
         da:b8:ac:11:29:02:1d:3c:62:45:12:ab:62:1f:bc:79:3e:ca:
         c0:3d:5c:2b:39:11:a1:56:65:f2:2a:fd:ec:83:b4:5c:82:07:
         2d:73:27:a7:ab:e6:05:19:7a:24:86:ea:e4:b8:fd:6d:33:b2:
         a7:b9:0e:65:e0:7a:90:95:e7:94:70:82:6f:f7:ef:30:53:1f:
         24:74:ba:f0:f1:5a:bb:1a:dd:33:5b:cd:55:8a:cb:2d:e9:b7:
         2c:af:11:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----