Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer
File:                     74b205b0-206e-45a4-8d98-55b99a30a8f4.cer (raw, json)
Hash identifier:          aqOEdo/NKuGnuOmvs39J0j//4Id+P0f2AFCmOpksN0Y=
Subject key identifier:   F6:1C:B4:58:8A:47:30:C2:B8:C6:BA:47:E0:F6:EB:21:66:10:89:39
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285847D6C7D15505164B005D872B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 11 Nov 2024 01:45:32 +0000
Certificate not after:    Sun 14 Feb 2027 01:45:32 +0000
Subordinate resources:    AS: 12155
                          IP: 65.75.240.0/20
                          IP: 199.36.192.0/21
                          IP: 2602:fe7d::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:c7:d1:55:05:16:4b:00:5d:87:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Nov 11 01:45:32 2024 GMT
            Not After : Feb 14 01:45:32 2027 GMT
        Subject: CN=74b205b0-206e-45a4-8d98-55b99a30a8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1a:7f:7c:7c:e6:1b:df:15:ca:1f:7d:60:86:
                    3f:ac:b3:fb:cd:3c:3c:8c:54:a1:2b:2e:7b:b6:5c:
                    48:69:86:e4:f8:59:e8:0e:2e:e6:25:1b:60:b5:7c:
                    91:d3:dd:a2:8c:07:30:3e:a5:d2:f4:87:3b:3e:a7:
                    9c:82:5d:13:71:1b:9a:01:42:b5:37:b3:c4:eb:cb:
                    4d:11:d9:31:be:5a:66:fd:dd:34:ba:02:c9:3f:e9:
                    76:9b:8a:89:70:37:3a:71:c1:f4:b7:d9:7d:ed:3a:
                    f4:ce:23:09:ba:30:39:8e:93:0b:f3:ec:99:cf:86:
                    7d:ea:43:ba:df:ce:bd:00:de:2c:98:86:16:91:15:
                    e7:2e:0e:4e:1f:c5:c8:a4:30:1d:b7:17:fc:49:f6:
                    a3:83:de:01:d3:a6:94:95:4f:1b:79:ac:37:da:57:
                    db:a4:a2:d0:44:3f:97:6b:d9:5d:2d:10:f5:fa:01:
                    97:17:a5:fd:ec:45:86:d7:23:bb:65:5e:48:39:b3:
                    7e:fd:99:f5:74:96:23:0e:ae:c4:cb:bf:65:a9:33:
                    a7:15:e9:b4:a9:a6:55:ba:b4:d2:31:f6:71:37:e8:
                    37:2c:69:37:bd:b2:e1:08:32:0e:12:8f:08:f3:85:
                    14:7b:30:1f:3d:0b:83:04:a6:fe:3f:e6:6e:4c:e4:
                    f6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1C:B4:58:8A:47:30:C2:B8:C6:BA:47:E0:F6:EB:21:66:10:89:39
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.240.0/20
                  199.36.192.0/21
                IPv6:
                  2602:fe7d::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12155

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c1:c6:18:a9:b4:77:95:0c:d3:7e:8c:29:76:d4:28:d3:ca:
         16:6f:dd:5c:71:e8:ea:1a:b2:77:58:59:dc:00:34:82:2a:fc:
         0f:7a:89:fb:80:c7:a3:5e:ed:c7:62:87:4c:5e:32:d9:72:71:
         04:0b:c9:96:51:f5:6b:e8:a2:85:18:cf:d2:ef:2a:f0:df:64:
         8b:b0:07:65:66:ee:50:b8:62:e5:c4:cf:ad:e0:7c:85:92:1c:
         18:b3:77:4c:1c:3a:82:61:f1:50:4e:13:ed:b5:fa:4b:75:5a:
         0d:86:03:43:73:d9:88:e9:9d:66:37:6e:aa:f1:fc:09:33:01:
         2c:de:38:ac:05:6e:f4:73:1f:85:ee:9d:8a:1d:91:5f:a1:07:
         2f:a8:a9:fb:c9:bf:13:26:b4:8d:46:ec:f1:f8:19:fa:7d:cf:
         df:cb:4c:ca:c1:e8:02:10:ec:79:9c:c9:e7:90:25:50:ea:ea:
         27:b5:a7:65:0a:e6:f7:1e:b6:a9:55:20:6b:cb:fc:e9:38:34:
         75:3d:fc:e6:3d:ea:66:1f:bd:cf:5a:6b:6c:93:59:26:44:26:
         88:7f:5b:c0:b0:56:53:af:3c:4d:bb:09:74:1e:1a:6b:fa:e7:
         07:89:7c:04:cf:27:dd:17:e9:45:09:37:86:45:b0:65:a1:80:
         05:16:66:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----