Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
File:                     b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer (raw, json)
Hash identifier:          OHw+O6/UAo6r6NJffAVGlNexTsQWTx7EfqyiPtcVDFU=
Subject key identifier:   67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858448617C094080252E4B9A7F440
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 12 Jan 2024 01:45:18 +0000
Certificate not after:    Thu 16 Apr 2026 00:45:18 +0000
Subordinate resources:    AS: 63139
                          IP: 2602:fa80::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:86:17:c0:94:08:02:52:e4:b9:a7:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jan 12 01:45:18 2024 GMT
            Not After : Apr 16 00:45:18 2026 GMT
        Subject: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:fc:9e:c2:7b:1d:ae:43:e1:6e:27:e4:6f:
                    24:18:fa:30:03:69:9b:46:8e:bc:60:f4:6c:06:ce:
                    57:e9:32:79:de:46:28:5a:c5:1f:8f:dc:f5:75:b5:
                    35:a9:79:80:5c:55:4d:1b:c4:a3:34:4f:6e:25:52:
                    3d:45:d9:ed:b7:bc:b9:3d:1f:08:31:69:50:26:89:
                    ce:5c:a7:02:b9:b7:dc:4a:17:2a:b2:96:a9:73:61:
                    c8:17:57:b2:1f:c9:a6:c1:c0:03:39:f5:f3:b1:51:
                    83:9e:ac:fe:f3:8a:1b:30:3c:38:a8:00:4e:60:86:
                    57:29:6f:f6:e4:76:a3:a0:48:18:c2:c6:8c:e2:f2:
                    10:ba:bd:b1:0d:d7:a2:46:12:d7:40:04:11:3e:b0:
                    36:aa:c4:77:08:82:29:7d:77:13:b4:da:2a:f7:58:
                    62:4e:49:1d:2b:90:b0:e6:a3:c3:f2:67:0b:f6:9c:
                    ef:6a:62:16:8f:33:36:e5:b3:1d:06:a7:ac:59:cf:
                    86:30:04:c6:52:fb:f0:cb:e8:e2:aa:e9:e1:c7:90:
                    c6:45:96:a8:0b:31:a6:d8:28:6a:1f:09:dd:e5:94:
                    13:3f:75:71:68:0a:3d:e5:cf:ba:76:55:da:59:ed:
                    4f:c4:e9:09:1d:c4:4e:7d:34:61:7b:01:20:be:34:
                    31:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa80::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63139

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:cb:3e:35:f0:18:1e:0a:f2:88:65:06:84:fa:5b:14:84:66:
         8f:c6:e2:c2:aa:e8:55:fe:42:45:04:4a:78:98:84:5b:05:31:
         4c:d8:59:91:e4:86:44:b0:fe:1b:ec:c4:33:05:b0:a8:80:8b:
         08:9d:37:8f:95:bf:0f:cc:e3:fc:37:36:24:e3:ca:29:74:84:
         ea:3c:a8:49:da:c7:75:38:7f:b1:59:99:7a:78:f5:17:ff:31:
         53:72:4f:4e:2f:87:d1:05:96:34:b9:dd:01:71:9a:88:27:49:
         f2:e1:65:62:90:9c:2d:23:79:59:2c:cf:3f:3b:71:6e:50:70:
         e8:73:04:a1:cb:b6:16:e2:81:27:fe:0c:5d:c3:f6:d8:5b:32:
         6b:11:4b:14:4e:39:4f:24:5b:38:a1:48:a5:62:33:20:f3:f2:
         2e:98:26:14:f4:15:65:d9:1b:f0:a3:e6:1c:3c:d8:31:22:11:
         3c:ee:61:61:59:89:9c:ce:ca:ad:10:a3:5f:c8:74:a1:ab:01:
         1f:8d:8d:de:c2:7f:a6:e8:92:55:31:33:8b:d9:51:9c:6a:a4:
         92:a5:7d:72:3a:07:42:00:96:71:26:a4:19:cf:f5:ec:02:2d:
         a4:cf:d8:17:e0:d2:7a:ad:a4:8a:71:47:d0:cc:c5:d5:41:a6:
         ba:4e:97:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----