Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e7a76ed-aad7-4a90-869d-287ed4033c11.cer
File:                     6e7a76ed-aad7-4a90-869d-287ed4033c11.cer (raw, json)
Hash identifier:          gTvsErNYxBS3ebGbnuLzJPF7q99KCLvHwgXlxy6gwAY=
Subject key identifier:   8F:7C:D6:4B:96:0B:FD:D1:B0:BB:E0:F4:9F:DE:D8:75:BA:63:5B:BD
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584573462099DF16A4ADC2B13080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e7a76ed-aad7-4a90-869d-287ed4033c11/6e7a76ed-aad7-4a90-869d-287ed4033c11.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e7a76ed-aad7-4a90-869d-287ed4033c11/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 06 Apr 2024 00:45:20 +0000
Certificate not after:    Fri 10 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 395856
                          IP: 199.119.88.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:46:20:99:df:16:a4:ad:c2:b1:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Apr  6 00:45:20 2024 GMT
            Not After : Jul 10 00:45:20 2026 GMT
        Subject: CN=6e7a76ed-aad7-4a90-869d-287ed4033c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:2d:40:3a:f6:3e:81:5b:6a:52:f9:8b:d5:
                    42:87:43:be:98:01:da:10:39:53:56:62:ec:99:5f:
                    ea:03:76:9a:93:68:2f:56:f2:6a:79:f7:49:63:75:
                    b3:3e:a0:62:0b:de:f7:87:d3:48:3b:a4:83:a9:9f:
                    5e:5f:f2:16:45:46:a1:f3:22:3a:58:fd:58:02:c0:
                    af:4e:c1:72:38:80:4b:32:9d:8f:d1:5f:f7:5e:b1:
                    ab:d1:17:93:29:a0:a4:67:2a:e2:22:e4:24:8c:df:
                    13:66:44:54:96:2d:79:25:bc:d9:97:56:3c:cd:9b:
                    39:12:80:ae:a8:25:aa:4c:89:b0:cd:a4:29:b1:ee:
                    b3:8a:2a:e2:86:93:1d:20:b2:33:b5:e5:4c:6b:f9:
                    4e:37:c8:5b:ac:c5:70:3d:06:20:9b:0f:6a:d2:30:
                    99:a8:e8:6f:99:4e:29:64:ea:5f:8e:d5:5e:35:0e:
                    6e:7d:b8:41:1c:3d:01:1a:25:60:83:1e:a1:6e:9a:
                    9e:d2:6b:1a:b1:cb:e4:ae:83:92:16:f5:5a:f4:e1:
                    b6:e4:9a:2d:20:74:15:4f:4b:4b:3b:3f:cc:ac:48:
                    32:d7:d1:dc:c4:43:91:96:71:c7:1f:e8:6c:3f:70:
                    26:ac:b3:4a:d2:d7:93:ad:49:1d:fb:34:5d:a4:25:
                    88:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7C:D6:4B:96:0B:FD:D1:B0:BB:E0:F4:9F:DE:D8:75:BA:63:5B:BD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e7a76ed-aad7-4a90-869d-287ed4033c11/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e7a76ed-aad7-4a90-869d-287ed4033c11/6e7a76ed-aad7-4a90-869d-287ed4033c11.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.88.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395856

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b4:96:83:d7:1f:b3:56:13:ae:a2:57:9b:16:e5:ba:80:76:
         8c:1d:7a:b6:fe:0e:f4:4a:9b:06:60:52:67:57:89:cf:d6:6d:
         d3:5d:75:c9:7d:ad:f7:84:8c:6b:ea:24:1f:64:c8:ea:f3:f7:
         03:7c:6d:f0:87:6b:3b:b6:aa:42:e5:a6:91:3a:f2:4e:69:4b:
         d4:99:b7:58:ad:a1:80:db:68:21:85:f4:e6:d0:67:19:d6:f8:
         b3:cd:e3:76:c1:1a:5f:8d:a9:20:bc:3e:aa:6c:05:e0:73:46:
         d3:74:7d:6a:b3:7f:72:a0:78:24:dd:8c:0c:42:33:39:93:87:
         29:72:19:16:a4:01:d3:58:99:4e:49:04:ef:c3:02:0b:e4:6c:
         f3:78:9b:ef:ff:94:28:5d:bf:65:fb:55:81:03:ed:26:ad:0a:
         dd:04:76:b2:98:04:f0:48:f7:7e:ac:16:6d:fc:83:bb:36:b9:
         c2:b0:bd:e9:f2:63:b5:5f:36:bb:64:ba:ba:59:52:46:35:40:
         ca:2c:66:a0:60:1d:2d:70:19:69:18:94:2e:ac:64:e6:02:0a:
         37:1f:eb:7b:ac:db:7d:55:04:7e:01:0e:98:1a:86:04:d0:86:
         82:90:36:7f:25:b5:c3:51:96:0a:e3:6b:ba:85:cd:04:ec:f2:
         98:a1:ca:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----