Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07.cer
File:                     0c75fe19-a93c-4656-bf2d-b205565f9d07.cer (raw, json)
Hash identifier:          xErFq44WR5Tm83b1cWxIQJjevlpHIKkBrVBZs93qLv0=
Subject key identifier:   6D:14:45:B4:DD:37:4A:3C:63:2C:A6:D0:69:3E:98:46:CF:B4:7C:61
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285845B64688F9087CAB9B0E1BCE40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/0c75fe19-a93c-4656-bf2d-b205565f9d07.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 30 Apr 2024 00:45:18 +0000
Certificate not after:    Mon 03 Aug 2026 00:45:18 +0000
Subordinate resources:    IP: 204.209.208.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b6:46:88:f9:08:7c:ab:9b:0e:1b:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Apr 30 00:45:18 2024 GMT
            Not After : Aug  3 00:45:18 2026 GMT
        Subject: CN=0c75fe19-a93c-4656-bf2d-b205565f9d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:46:4f:61:fc:49:f9:24:fe:34:a0:f7:2d:59:
                    68:f7:40:c1:bc:33:ac:7c:bb:93:12:25:5e:83:8d:
                    ec:33:c8:af:ae:94:46:93:99:b1:9a:53:f4:6c:16:
                    94:c8:2b:4e:ad:7d:aa:f9:41:bb:db:6c:95:65:0e:
                    01:0e:be:6a:95:de:ac:8f:c9:92:8d:92:36:45:d9:
                    72:25:29:da:13:97:01:42:ab:7d:c8:36:d5:9e:d5:
                    b3:cd:a3:a8:3d:cc:f3:97:ba:fe:df:50:56:11:b1:
                    d0:ff:93:f7:b6:6c:0e:6e:94:8b:9f:28:6f:0d:4e:
                    7e:07:8b:51:dd:61:7c:4b:1b:45:47:6e:10:fd:23:
                    f6:75:1a:38:ca:af:8c:e7:0f:7e:56:cc:65:32:0e:
                    0a:75:c6:95:d3:15:c5:38:a3:35:c1:9b:8b:ee:9f:
                    9d:20:73:4f:a4:83:47:36:33:06:bc:7a:9e:ff:d6:
                    9a:40:36:a4:25:23:33:c8:d4:e5:4e:c0:cb:2f:e7:
                    c4:ec:9f:9a:17:ec:a0:b5:e4:77:ef:ed:37:48:5a:
                    3a:94:36:b0:23:ec:12:81:41:36:23:27:08:1b:b8:
                    f9:9a:b6:0b:f0:ba:78:67:1d:15:05:f9:61:b5:db:
                    10:46:77:6c:79:15:fb:34:75:43:ad:eb:1a:53:a0:
                    95:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:14:45:B4:DD:37:4A:3C:63:2C:A6:D0:69:3E:98:46:CF:B4:7C:61
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/0c75fe19-a93c-4656-bf2d-b205565f9d07.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f3:4f:de:1f:1f:74:7d:b0:f0:3a:07:4d:46:b1:8c:6f:97:
         42:93:2e:29:2f:69:19:d7:be:13:a4:18:16:0a:bf:cd:09:78:
         cb:e4:4b:20:30:b5:60:61:9c:1b:87:71:77:bd:2e:0c:c9:76:
         56:bc:56:5c:e9:92:41:23:d2:7d:b5:30:5e:39:86:8e:2e:f5:
         a2:9a:e2:19:30:3f:8e:90:ef:17:08:f8:1b:37:ba:21:4c:50:
         cb:5b:0c:ff:65:19:db:ff:31:98:d4:8f:d6:97:33:3b:67:8a:
         f9:f8:70:f5:49:b2:9a:34:f4:15:51:94:76:64:6e:30:42:ee:
         9e:34:b1:61:94:d0:4e:0c:d9:ec:17:3f:77:8d:f9:d2:6a:65:
         a8:77:37:92:60:42:4c:dc:5f:6f:d7:ab:5e:c0:04:98:e1:5d:
         1a:f9:c3:d5:c6:c3:fa:f5:f2:80:86:dd:7d:4a:97:67:58:52:
         0e:cb:2e:c2:bd:ed:d5:92:93:73:5d:14:bd:0d:e0:13:e3:ba:
         16:1c:b5:5a:24:1f:a1:ae:c3:02:77:83:c9:e9:0a:48:fd:55:
         92:d1:41:04:fd:b6:d6:4f:96:0f:45:cb:f2:f5:7d:48:36:02:
         96:97:92:be:47:5a:22:39:c1:59:93:37:a3:69:cf:e2:6f:7c:
         16:7c:cc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----