Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ebb8d539-978b-485c-ac2b-80793596ecb3.cer
File:                     ebb8d539-978b-485c-ac2b-80793596ecb3.cer (raw, json)
Hash identifier:          i4K2u2lxDpyxVK/Sq49VzTnDKRGs3s7AiyzuhDVhkYo=
Subject key identifier:   94:7D:66:4D:F2:4E:54:FB:1B:79:20:9B:17:11:A3:EE:7F:69:00:92
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846416D5BACD8D0B304565C7680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ebb8d539-978b-485c-ac2b-80793596ecb3/ebb8d539-978b-485c-ac2b-80793596ecb3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ebb8d539-978b-485c-ac2b-80793596ecb3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 18 Jun 2024 21:00:54 +0000
Certificate not after:    Mon 21 Sep 2026 21:00:54 +0000
Subordinate resources:    AS: 15116
                          IP: 216.21.96.0/19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:41:6d:5b:ac:d8:d0:b3:04:56:5c:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 18 21:00:54 2024 GMT
            Not After : Sep 21 21:00:54 2026 GMT
        Subject: CN=ebb8d539-978b-485c-ac2b-80793596ecb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cf:57:fa:b8:d3:ab:47:b3:9e:8a:49:8f:f9:
                    6f:1e:00:7f:ae:6a:26:61:c1:2c:e0:6c:21:14:ce:
                    fd:62:5a:91:3e:b8:60:eb:01:2e:53:79:89:56:5d:
                    c4:c7:9a:c6:e6:17:04:7f:fd:9e:32:38:32:ae:b3:
                    ed:a4:95:61:f3:0c:53:77:68:2f:a7:7a:28:d1:c8:
                    90:4f:fe:e9:c6:56:99:a4:1d:48:df:ef:af:1a:3f:
                    40:b1:f7:b2:76:96:9f:fd:83:01:e1:43:d1:5e:b4:
                    83:cb:91:f9:a0:d6:09:7f:04:b1:d4:49:40:c1:05:
                    8a:a6:85:da:0a:b4:28:2f:4a:11:24:84:42:b2:91:
                    1f:1b:42:d6:00:c0:55:a6:78:1a:d0:59:b6:06:90:
                    19:bb:31:06:cb:1c:57:93:b0:c6:3a:bd:c3:ad:52:
                    26:3b:0e:4e:35:46:53:ca:6f:12:6f:f9:86:a4:6e:
                    c6:23:6b:f6:57:f9:85:75:5b:38:04:97:fa:a4:22:
                    48:69:f6:47:eb:96:08:0a:18:63:2e:d9:59:6b:e9:
                    f5:2d:65:aa:63:8c:d6:5b:ac:c5:f2:ad:ea:ef:05:
                    75:7d:46:0b:ea:a1:51:7a:8d:50:1c:6b:70:14:e1:
                    a7:c6:ad:93:78:0d:60:2a:c5:27:78:76:5c:0d:47:
                    a8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7D:66:4D:F2:4E:54:FB:1B:79:20:9B:17:11:A3:EE:7F:69:00:92
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ebb8d539-978b-485c-ac2b-80793596ecb3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ebb8d539-978b-485c-ac2b-80793596ecb3/ebb8d539-978b-485c-ac2b-80793596ecb3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.96.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15116

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:73:1a:d3:b3:ef:11:f7:97:a9:83:1f:0e:4e:c1:f5:a4:00:
         bd:b5:2a:2c:ec:13:55:9f:a3:ef:f0:5e:c9:d2:90:59:26:4b:
         6f:0b:a5:6c:2d:bf:ad:f8:8d:4d:3b:d8:7d:90:56:6f:17:4c:
         b2:4a:d7:f8:3a:11:55:dd:92:2b:17:30:a1:9c:02:12:28:8d:
         97:96:38:b8:b2:98:ca:7a:82:3b:cb:00:bb:42:dd:cc:00:d4:
         6e:61:7e:bc:44:20:d7:88:26:ea:1d:1f:d2:41:a3:61:8a:9c:
         1e:cc:4e:ff:f9:41:3c:ac:45:37:4d:09:41:cb:8b:48:35:45:
         c6:1d:79:44:08:9d:14:5e:a8:d4:b3:06:c2:89:d7:d1:ad:03:
         e2:15:cd:9a:ab:0c:a9:5c:a0:06:9f:e5:0d:82:8e:ff:49:17:
         6a:5f:60:00:ce:a9:6b:32:af:f3:2a:90:b2:e3:c8:19:7c:17:
         02:2a:06:13:dd:fb:fc:1f:f7:5c:6b:bb:46:95:9b:92:15:18:
         6e:13:06:76:3b:29:12:5a:2a:de:8c:f5:7c:e6:95:7d:96:b6:
         41:5c:95:42:d9:da:5c:1a:20:0e:57:8c:bd:32:96:80:a1:20:
         1d:6f:9e:22:23:d4:5d:27:5e:c6:10:95:d9:d7:db:5a:f2:d4:
         7e:ce:22:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----