Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer
File:                     40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer (raw, json)
Hash identifier:          vdhJ+cYvXKKvsEDiZh3Qm6plWotNpj0HlUzsvyjDa4w=
Subject key identifier:   DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285844D9D84AABF5F9A1D3C98FA880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 11 Feb 2024 01:45:21 +0000
Certificate not after:    Sat 16 May 2026 00:45:21 +0000
Subordinate resources:    AS: 30574
                          AS: 31776
                          IP: 204.8.172.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d9:d8:4a:ab:f5:f9:a1:d3:c9:8f:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Feb 11 01:45:21 2024 GMT
            Not After : May 16 00:45:21 2026 GMT
        Subject: CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:ec:06:0b:2a:a1:58:9f:2a:a7:dd:8e:0a:
                    d0:b7:0e:c0:a6:01:5c:46:91:58:13:ed:6e:3d:44:
                    f4:f7:3b:73:28:ff:8e:c8:01:ad:95:c4:14:4b:43:
                    6f:05:9e:50:fd:a8:23:e3:3d:d3:ff:78:5c:c7:20:
                    79:55:d5:2e:96:f4:6d:09:a9:37:3b:29:84:c8:86:
                    43:19:5d:50:ec:8a:a1:cf:c1:a8:ff:0e:aa:2b:87:
                    a4:de:db:e8:68:07:2e:68:d3:56:e3:c3:81:0a:40:
                    1b:67:44:cf:aa:22:78:b0:24:49:f6:39:07:12:89:
                    1f:44:7a:ef:27:42:57:d3:c7:c2:5b:7a:0a:e3:a9:
                    ba:85:ea:96:09:3b:1b:f3:66:e2:50:c8:91:de:a1:
                    e6:b4:11:78:51:7f:29:d0:a0:03:c6:d1:6c:e9:8c:
                    4f:b5:db:6e:10:ec:48:91:70:73:f0:25:1f:1c:3a:
                    26:84:e4:81:84:37:5d:b9:04:56:af:2d:98:f1:8a:
                    fe:55:99:28:8b:99:5e:25:e9:72:31:a3:cf:fe:57:
                    82:41:54:d7:fb:f7:6e:c5:5d:a8:5d:f0:ab:06:be:
                    48:5a:f1:a7:0c:a7:29:58:9d:b0:94:e3:db:3f:52:
                    78:3f:6e:83:36:f5:d9:ba:51:78:e5:78:d5:08:31:
                    a5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.172.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30574
                  31776

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:1b:eb:a0:7d:6b:12:fd:f9:d2:8f:49:9a:56:62:d8:12:46:
         09:2c:d1:15:ea:c8:4a:66:f6:62:73:68:72:ef:2b:3a:31:21:
         61:6b:e0:68:2a:d4:ff:59:1b:f4:cf:12:02:a4:db:a2:71:26:
         82:a0:81:55:95:53:6e:66:3c:50:51:74:03:c9:53:03:81:5a:
         52:3b:56:3b:bf:d4:b0:97:57:41:46:f3:6b:92:41:e6:02:1d:
         c8:ce:fa:69:73:71:e5:a9:f4:cc:96:1f:4c:78:83:58:be:1a:
         81:e9:ba:84:b1:04:3b:a7:a2:b4:e6:d5:03:db:54:bb:73:49:
         4c:2c:c4:52:01:83:b0:42:f0:a5:45:54:31:6d:6a:e6:73:3c:
         9e:f1:bf:43:96:12:d8:cb:0a:61:e0:7e:ed:07:76:09:1f:ca:
         42:91:f6:2a:48:32:f9:04:70:db:b4:5f:bd:7d:ce:d1:7c:b0:
         7c:bd:95:72:c7:c8:b9:94:4a:43:25:eb:f3:a0:d7:3e:a1:3e:
         71:b3:6b:63:ba:ed:03:53:50:79:0a:63:49:59:48:bf:ae:cc:
         22:10:67:70:f7:48:e9:15:48:bc:4b:df:f3:bd:05:37:08:55:
         80:1d:d5:f7:68:b9:ae:82:d4:b9:80:4a:25:17:13:22:39:1f:
         58:26:04:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----