Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c4c7d4e7-4e62-4286-8bdb-03bcda0afc5b.cer
File:                     c4c7d4e7-4e62-4286-8bdb-03bcda0afc5b.cer (raw, json)
Hash identifier:          4fhyF+mR6DwQgI3JRojsPYe7VVsrPU7BE9bmC79k1Ic=
Subject key identifier:   FC:6A:DE:D1:48:DA:9D:3B:65:34:AC:C0:0E:CC:1C:D1:46:E2:FA:35
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285843A6A337748E3B6C0FB0D99BC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c4c7d4e7-4e62-4286-8bdb-03bcda0afc5b/c4c7d4e7-4e62-4286-8bdb-03bcda0afc5b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c4c7d4e7-4e62-4286-8bdb-03bcda0afc5b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 24 Oct 2023 00:45:15 +0000
Certificate not after:    Mon 26 Jan 2026 01:45:15 +0000
Subordinate resources:    AS: 399464
                          IP: 2602:fbb3::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a6:a3:37:74:8e:3b:6c:0f:b0:d9:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Oct 24 00:45:15 2023 GMT
            Not After : Jan 26 01:45:15 2026 GMT
        Subject: CN=c4c7d4e7-4e62-4286-8bdb-03bcda0afc5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:20:bc:07:43:ef:83:b1:d3:4c:8a:2c:e7:
                    af:a8:09:d5:4d:df:d7:24:27:35:15:0b:61:01:c6:
                    fb:bf:c5:8c:00:48:ae:1a:47:b6:cc:b7:ae:c1:b7:
                    93:b9:cf:48:33:bc:e2:2b:3e:ba:7c:36:8e:b7:14:
                    94:ce:f8:7d:5a:25:59:dd:b0:df:e3:ad:74:00:75:
                    c5:21:e8:0e:64:7d:35:e9:5f:fd:14:18:7b:b5:9a:
                    f0:1e:ea:6a:3e:df:4a:62:64:e1:66:78:7d:8b:c3:
                    69:54:d5:48:e8:82:22:4c:06:99:0b:61:0a:9f:a9:
                    fa:c5:32:3d:ef:d9:43:10:fa:8a:43:db:df:7e:20:
                    84:23:36:f0:ab:8e:8e:cd:2c:80:aa:c7:85:48:04:
                    f8:0e:51:b7:60:a6:15:2b:54:d6:cb:d7:75:73:bd:
                    cf:87:6c:80:17:8b:01:f5:dd:5a:2d:89:b5:e9:bd:
                    bc:1b:0d:aa:26:73:12:7c:49:a2:88:8e:5e:8b:87:
                    00:6a:3f:be:11:64:d9:56:61:18:fd:da:0d:46:02:
                    61:93:65:0b:ea:20:12:37:56:79:fd:eb:a7:fe:98:
                    28:6e:85:6f:1a:f8:39:ed:f6:24:a8:05:ec:8e:c1:
                    d3:d9:4e:12:ba:3e:da:93:78:8a:68:41:c2:29:72:
                    ed:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6A:DE:D1:48:DA:9D:3B:65:34:AC:C0:0E:CC:1C:D1:46:E2:FA:35
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c4c7d4e7-4e62-4286-8bdb-03bcda0afc5b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c4c7d4e7-4e62-4286-8bdb-03bcda0afc5b/c4c7d4e7-4e62-4286-8bdb-03bcda0afc5b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbb3::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399464

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:4b:cc:5a:88:24:53:ba:7c:95:1f:03:db:86:42:ff:86:a1:
         c8:31:d1:5f:63:a7:73:fc:6e:3d:97:5c:9a:e3:63:74:18:0f:
         cd:47:37:d8:10:e7:40:32:91:d5:a4:1d:83:ec:c9:65:0f:d1:
         fa:c0:0b:4a:0a:d8:c3:ea:57:c3:e2:18:48:50:3a:ee:56:4f:
         e3:89:09:2c:f5:f6:e8:40:c7:53:64:b9:19:1b:e9:21:cc:51:
         cb:99:be:f6:ec:b3:6d:b2:47:d6:82:95:da:dc:f6:e6:a7:6a:
         de:1d:6f:27:93:19:ba:d6:41:f2:74:84:29:3a:a6:3c:87:08:
         e1:be:bf:24:fd:08:98:36:3a:9d:c4:02:aa:b8:75:7f:0d:dd:
         88:ed:a5:9f:ee:6d:7a:60:8f:90:f5:68:b2:ed:73:b7:83:d8:
         81:09:4d:79:74:c5:f5:cb:f1:76:2e:2c:7f:68:67:54:4b:f0:
         4f:57:c8:6b:cd:bc:48:d8:28:c8:59:8a:06:5d:ad:34:5b:ce:
         39:1d:75:b4:74:01:46:09:e6:32:3c:26:09:ab:28:f9:6d:ca:
         77:4c:75:c7:6e:d4:42:9e:c4:25:d1:90:b8:f9:94:90:f3:e4:
         10:f2:23:91:1a:8f:65:67:95:9f:1d:33:23:20:fa:bc:35:14:
         22:25:1f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----