Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb.cer
File:                     db3a4466-554c-4a7d-9803-eceac12519bb.cer (raw, json)
Hash identifier:          zauv7cbdOhOLXprbM2hc7lQ7RC7wLaXIBHpThA5g0PY=
Subject key identifier:   DF:C1:84:7A:4C:76:6B:D7:EB:4D:50:5D:47:52:BC:DF:54:A4:70:3B
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858460967B2D11A48948A99FE88E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/db3a4466-554c-4a7d-9803-eceac12519bb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 29 May 2024 19:24:14 +0000
Certificate not after:    Fri 21 Aug 2026 04:00:06 +0000
Subordinate resources:    AS: 401065
                          IP: 23.179.24.0/24
                          IP: 2602:f8ec::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:09:67:b2:d1:1a:48:94:8a:99:fe:88:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 29 19:24:14 2024 GMT
            Not After : Aug 21 04:00:06 2026 GMT
        Subject: CN=db3a4466-554c-4a7d-9803-eceac12519bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9f:94:ce:ca:04:cd:96:ed:25:34:d5:ba:bf:
                    df:95:d1:12:ae:7f:2c:68:fa:76:40:7b:ce:f1:a4:
                    4c:db:eb:ed:6b:0f:b7:46:cc:9c:4c:43:81:18:7b:
                    3d:eb:74:09:f4:25:77:c6:33:1a:af:d7:d3:3a:4f:
                    1c:9e:bb:95:1a:36:31:15:ea:c9:f7:d3:31:56:1b:
                    91:de:4c:33:02:a2:34:dc:da:e5:84:a9:c8:30:5d:
                    07:8d:22:ed:9f:53:23:f4:59:73:d4:08:64:e1:2e:
                    7b:f9:19:62:06:5b:f3:18:35:b4:48:55:6f:7d:b7:
                    35:a3:a4:d4:4b:01:6e:95:3a:32:5d:df:0d:ee:98:
                    57:9a:6f:10:77:80:49:c6:56:f0:bf:0c:1d:8c:ea:
                    9e:63:8b:a9:56:95:93:e0:33:5b:30:83:0d:34:48:
                    a1:f2:bb:7a:dd:ce:bf:3f:c2:81:af:c7:61:a6:52:
                    62:b8:4d:58:ec:72:4d:99:23:17:81:27:67:c3:00:
                    b5:7f:15:6a:20:1f:ba:73:99:2a:8f:fa:34:0a:9d:
                    41:93:cd:31:0a:f8:98:d8:f2:ed:f8:18:ad:4f:96:
                    39:c9:5a:41:e3:66:48:0e:fa:6a:c5:9d:9b:98:47:
                    18:b3:5c:ee:c3:bd:d2:b4:94:2b:37:d8:ca:dd:96:
                    e6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C1:84:7A:4C:76:6B:D7:EB:4D:50:5D:47:52:BC:DF:54:A4:70:3B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/db3a4466-554c-4a7d-9803-eceac12519bb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.24.0/24
                IPv6:
                  2602:f8ec::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401065

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d2:eb:8f:53:9a:34:7e:a8:86:8b:6d:27:a3:eb:8f:15:0d:
         7c:e1:1f:f8:d6:e2:fc:4f:87:39:f4:ca:ea:88:d7:ca:b3:5e:
         85:95:b1:bc:1d:65:f7:d3:8c:16:1d:1a:7f:f7:c1:8c:0f:c4:
         f7:9c:45:a6:19:29:f1:4a:bb:84:3c:c8:40:c6:b6:f2:c7:46:
         95:1b:c1:d1:9b:93:6a:71:4e:ed:48:58:4d:7e:45:ad:de:86:
         95:f1:de:41:74:3b:18:12:50:b0:24:57:74:14:a6:6b:a8:53:
         00:48:fb:44:59:96:34:65:a7:c0:d0:cc:1a:af:0a:be:58:63:
         4a:2a:bd:73:67:7e:bd:9b:72:73:b3:33:58:2a:4b:1b:1b:46:
         40:74:5a:d3:f8:99:20:be:60:b5:ed:40:39:19:88:d2:89:be:
         e2:62:42:ab:07:79:40:38:2b:cc:de:48:65:69:62:4a:5d:13:
         2a:e0:4a:2e:63:e3:0f:b7:8f:2e:51:78:c7:f1:b0:0a:38:44:
         7e:9b:ed:8b:39:0d:3f:85:b8:75:19:e7:f2:94:6d:e0:07:94:
         96:72:a2:02:c5:98:ff:0e:94:61:ce:ca:dd:67:ef:0a:5d:60:
         7d:5c:6c:7b:10:b2:46:14:3f:d3:da:eb:87:c2:b3:9d:98:fe:
         96:55:fc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----