Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a26643-503a-4bbb-8e27-91a23e3e3204.cer
File:                     12a26643-503a-4bbb-8e27-91a23e3e3204.cer (raw, json)
Hash identifier:          SQ7zrVoMBz9/D08wIeKbmDOp1WwrV4Q9SYztCUtu0RI=
Subject key identifier:   5C:BC:F6:1B:3D:16:E9:74:1E:42:2E:6F:CE:29:F9:5E:9D:E6:C5:99
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328584777BEBC83E5DDEA332F353900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a26643-503a-4bbb-8e27-91a23e3e3204/12a26643-503a-4bbb-8e27-91a23e3e3204.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a26643-503a-4bbb-8e27-91a23e3e3204/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 08 Oct 2024 00:45:27 +0000
Certificate not after:    Mon 11 Jan 2027 01:45:27 +0000
Subordinate resources:    IP: 192.104.61.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:be:bc:83:e5:dd:ea:33:2f:35:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Oct  8 00:45:27 2024 GMT
            Not After : Jan 11 01:45:27 2027 GMT
        Subject: CN=12a26643-503a-4bbb-8e27-91a23e3e3204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:53:68:da:81:b2:39:8d:4c:ed:97:25:b0:
                    7e:b1:d6:82:3c:e7:ee:b4:a5:bc:e7:5c:23:91:c6:
                    c6:08:59:9b:4b:53:78:4b:a7:63:c9:e0:68:5f:33:
                    03:07:b7:14:bc:db:14:10:9c:d5:48:9d:d8:9d:58:
                    06:45:e7:15:55:b2:77:7a:34:94:c9:b4:04:52:91:
                    26:17:2a:4d:2c:31:35:b9:6c:bd:bd:08:39:4e:b3:
                    e2:c7:0c:5a:63:02:54:bb:d7:f5:92:4d:3b:3d:46:
                    e2:77:15:1d:48:ea:52:8b:39:e9:a1:35:d7:f8:81:
                    31:96:79:ac:cc:0b:ab:ab:d2:14:b6:b2:90:ae:ce:
                    29:6a:f8:44:f3:bd:54:67:76:68:c7:23:d8:64:8b:
                    a2:d5:13:ff:68:32:1b:a8:b9:88:ee:e4:5d:e1:b0:
                    62:8d:70:7f:4b:ee:ae:eb:2d:92:ba:73:1b:5b:87:
                    04:0b:15:1f:bb:30:d6:8f:97:3f:eb:ec:c3:95:ac:
                    33:72:99:19:15:2f:fd:86:ae:85:43:35:49:8d:1a:
                    ab:5c:0e:30:14:dd:6a:ab:2a:45:44:d1:d8:15:97:
                    09:f4:43:e3:ad:75:06:7d:39:ce:0e:83:4b:35:ec:
                    15:a3:a9:fb:4d:b9:dd:6f:c6:7c:89:02:6c:46:3e:
                    d2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BC:F6:1B:3D:16:E9:74:1E:42:2E:6F:CE:29:F9:5E:9D:E6:C5:99
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a26643-503a-4bbb-8e27-91a23e3e3204/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a26643-503a-4bbb-8e27-91a23e3e3204/12a26643-503a-4bbb-8e27-91a23e3e3204.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:4a:e8:b3:dd:c0:26:f1:b3:6b:75:ae:af:95:8a:79:03:84:
         9a:9a:ff:98:73:9a:43:91:1a:49:c5:97:d8:f8:8a:27:f8:cf:
         b5:cf:de:13:64:91:ea:c7:48:e3:2a:85:11:98:31:a2:da:61:
         bc:a1:3c:fd:86:50:11:b3:15:a4:6b:73:07:2e:40:84:2d:2c:
         34:d8:f0:9c:a0:93:61:56:7f:15:e1:aa:01:e7:d4:a8:c2:2c:
         18:5c:3b:4c:c6:0e:cd:42:46:2c:24:9b:47:23:3d:2d:0f:42:
         cc:8d:be:1e:fd:7c:3b:fd:81:ff:d1:ac:b6:ab:fb:2d:e5:7c:
         75:17:7d:4f:4c:71:6a:8c:9b:d8:1b:48:00:18:fb:f2:5a:c4:
         30:b6:94:44:8f:08:b8:19:45:47:af:fe:28:7e:c3:94:99:d4:
         3f:65:83:12:9d:40:82:35:28:8f:69:a9:7f:a8:32:24:c1:36:
         d1:0f:0e:79:6d:0c:39:cc:4a:36:bd:e8:3d:b5:7a:81:4e:62:
         fb:62:70:1a:8a:42:6b:aa:26:dc:17:07:55:c8:40:2d:62:18:
         86:84:21:bc:d3:50:ff:3f:84:15:96:09:c6:87:e5:2f:78:11:
         6e:a8:fc:6c:b5:3a:df:9f:d0:c8:9c:b4:ce:00:51:af:7e:bf:
         e7:aa:ca:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----