Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer
File:                     1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer (raw, json)
Hash identifier:          bo3a9ihdTqHWjP38aEyLzBdjw97JyAsrlfBFeLGA8Dw=
Subject key identifier:   31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285847D3FD23C2DD4F84BBF0038BE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 10 Nov 2024 01:45:33 +0000
Certificate not after:    Sat 13 Feb 2027 01:45:33 +0000
Subordinate resources:    AS: 18507
                          AS: 18628
                          AS: 36822
                          IP: 204.10.8.0/21
                          IP: 208.112.128.0/17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d3:fd:23:c2:dd:4f:84:bb:f0:03:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Nov 10 01:45:33 2024 GMT
            Not After : Feb 13 01:45:33 2027 GMT
        Subject: CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:15:46:de:35:1e:f8:51:89:ab:1f:25:53:e9:
                    92:81:4b:79:8d:0f:1e:b8:d5:63:40:3f:bb:d3:ca:
                    fb:21:0e:bc:9c:b7:cb:d8:3f:1c:6b:28:74:10:dc:
                    f8:fe:0d:ee:15:ef:67:e8:ed:cd:5b:95:e4:68:1c:
                    f2:03:7a:f5:43:2f:93:a0:4a:3d:1d:b1:4c:17:28:
                    ad:dd:9d:15:01:f1:0a:a8:6a:c0:02:d1:37:a2:a8:
                    fc:a2:1b:d2:1a:ec:ef:39:13:cc:15:69:70:7c:1c:
                    5c:b1:70:4a:a9:ac:2d:60:74:ee:97:ed:d2:7d:99:
                    c7:54:1a:15:42:e5:99:4f:3b:1a:2a:f2:7a:05:ae:
                    85:12:5e:14:22:57:1e:15:fd:2a:23:f9:0a:42:7e:
                    7a:cd:2d:f8:a9:c4:b6:3e:6d:08:37:d4:30:44:c7:
                    56:3e:ed:22:82:a2:e1:c5:8e:05:4b:95:a7:f9:08:
                    c4:50:3f:ff:e7:d2:aa:0e:a1:19:cd:0a:dd:24:53:
                    a2:19:1b:f1:be:42:ab:49:d7:d9:16:a6:6f:60:f8:
                    79:e7:db:7a:8e:e9:20:2c:9a:ee:fc:0b:44:a4:52:
                    ef:b5:d2:bb:1d:d4:ce:d1:87:b9:1c:a8:24:4c:ee:
                    33:00:bf:49:d9:86:1d:f8:60:90:3b:ea:2d:4b:8d:
                    06:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.8.0/21
                  208.112.128.0/17

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18507
                  18628
                  36822

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:dd:d7:1f:67:5e:6e:7d:0b:a4:c2:cc:9a:6c:32:75:9d:43:
         65:97:95:b5:bf:cb:01:59:2d:d8:16:65:88:21:19:6c:72:ec:
         7f:d4:77:28:ed:75:cd:3c:78:48:0c:64:45:f0:c9:36:36:f0:
         16:79:dd:eb:2d:1d:32:bb:d2:2f:49:e3:f2:88:6c:56:d5:63:
         ce:db:29:e8:c9:6b:67:ff:77:6c:51:9f:c6:92:a0:1b:3b:51:
         ca:ce:a9:4e:02:9b:4a:81:d1:c8:f5:34:80:4a:7b:54:67:00:
         11:b7:2a:31:e7:ce:9c:be:67:d1:29:42:ba:81:0e:04:b2:8e:
         8d:c9:fa:27:4b:7a:cd:b6:9f:f4:09:26:e8:16:41:dc:42:6e:
         1c:a3:21:94:c1:20:69:88:eb:d9:9f:5b:c6:d4:e4:98:17:98:
         b1:70:e2:c2:a9:bd:c5:19:c0:34:32:f4:e3:e2:69:1b:53:21:
         56:58:9b:a8:63:06:50:18:9b:43:20:7d:4b:e0:c8:25:18:5e:
         e3:58:b0:38:48:99:0c:33:bc:45:ec:e6:aa:3f:dc:5e:88:00:
         70:c0:e9:09:2b:bf:8a:eb:1c:81:26:c0:f5:43:92:b7:9f:65:
         86:86:74:31:7a:29:e6:82:d3:91:07:9f:cf:4c:ca:39:74:fc:
         6f:c9:8d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----