Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
File:                     cc9bfce1-5e74-4c92-954d-8728969d8835.cer (raw, json)
Hash identifier:          WI2vU+ar4IBfAjoCukcvaUch/ehM5GmWi0XJGNtBgeI=
Subject key identifier:   59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858452C4B3FDDEAAD6A6C2CB63C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 11 Mar 2024 14:33:16 +0000
Certificate not after:    Wed 03 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 36552
                          AS: 46296
                          IP: 165.140.8.0/22
                          IP: 2602:fbe9::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:4b:3f:dd:ea:ad:6a:6c:2c:b6:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Mar 11 14:33:16 2024 GMT
            Not After : Jun  3 00:45:20 2026 GMT
        Subject: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:aa:fe:07:2d:b7:51:f7:8b:ab:b6:db:16:71:
                    42:e6:1e:dc:24:85:d8:6c:08:48:55:29:6b:50:a4:
                    b8:2e:69:84:38:a5:27:b0:50:d7:c9:ad:38:96:85:
                    7c:46:ce:37:a6:d0:e2:72:1f:2d:66:db:cf:2b:fd:
                    8c:d7:1e:24:d1:00:e7:5d:15:1f:e6:94:c1:22:23:
                    ce:8b:8f:89:51:88:be:fc:19:c8:33:1e:7d:8b:1b:
                    e2:21:79:b5:29:fe:f1:21:c8:da:c0:a6:26:07:b7:
                    1d:35:b9:7f:9c:e6:09:80:78:b1:ab:d8:0b:ef:b4:
                    ca:e2:5d:c5:01:bd:31:eb:38:21:a8:99:8f:09:25:
                    15:d5:00:13:c6:eb:d1:99:13:64:0f:40:71:57:53:
                    67:11:d9:33:85:c7:2e:49:01:bc:1b:10:2c:ed:3c:
                    0c:09:b7:85:c5:45:47:70:b2:5a:2f:9c:59:c0:d1:
                    04:c2:20:5a:98:b5:79:70:70:9d:d4:69:fe:23:a0:
                    8c:82:50:12:8e:70:ea:5a:26:a9:07:8b:53:a5:a0:
                    7f:aa:c0:b1:46:fb:34:61:67:6d:a5:77:ce:1d:67:
                    7d:17:c2:40:45:5c:26:4b:55:f6:f5:6c:9b:5d:52:
                    89:2d:cf:18:46:a6:c3:79:cb:a7:7c:6e:af:73:6b:
                    60:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.8.0/22
                IPv6:
                  2602:fbe9::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36552
                  46296

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:43:0e:ad:59:d7:76:63:b4:9d:86:83:94:c7:9d:25:25:fe:
         1b:4c:b9:9a:69:5b:16:a1:93:5c:68:ba:82:4d:f9:bf:8f:88:
         ff:3d:83:63:57:51:6b:d2:81:59:fb:0d:5c:33:0b:a4:94:81:
         22:bb:67:50:a2:90:75:86:41:fd:5a:75:0a:f0:7f:93:84:b1:
         d8:3e:f0:78:61:b5:91:e1:ef:fe:fc:03:a6:82:d5:e9:98:ac:
         3e:b7:28:ba:a6:cd:e1:ea:c2:32:4f:4c:76:c5:6a:d4:ca:c2:
         ce:b0:2d:7c:a3:50:95:80:af:29:c9:99:d0:e1:bd:90:dd:e0:
         2c:48:1b:7a:88:0f:39:6b:18:f3:02:e5:dc:84:2d:81:69:d7:
         02:81:de:3c:3f:76:d4:31:ff:96:0c:19:23:c5:8c:49:0c:98:
         c9:ca:4e:d1:ad:b8:57:23:9f:f7:c4:b6:3f:f9:cd:3c:06:5f:
         96:0c:a1:df:e8:c7:9a:85:9b:77:4a:51:43:24:f0:d7:59:dc:
         cb:29:77:10:41:a6:ad:bc:a1:25:00:48:3b:54:62:3c:ec:25:
         71:43:fd:87:4d:f7:99:fc:8b:ae:56:b3:97:37:e8:49:0f:29:
         49:b3:bb:3f:ec:c8:ca:63:de:a4:8d:c7:5b:b0:3c:c8:db:f2:
         50:6a:4d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----