Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103.cer
File:                     a8355b3e-327c-45f5-af94-a965911c3103.cer (raw, json)
Hash identifier:          FYfyF4QPbD2uub1usPwmaLi93FKzCGk0kxbldKW6n94=
Subject key identifier:   DB:E9:94:34:6A:1B:51:8E:19:03:BE:F9:AE:F7:49:57:AD:82:8F:55
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285846E0FDC856C56130C839C2B100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a8355b3e-327c-45f5-af94-a965911c3103.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 15 Aug 2024 00:45:25 +0000
Certificate not after:    Wed 18 Nov 2026 01:45:25 +0000
Subordinate resources:    AS: 398551
                          IP: 199.181.82.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e0:fd:c8:56:c5:61:30:c8:39:c2:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Aug 15 00:45:25 2024 GMT
            Not After : Nov 18 01:45:25 2026 GMT
        Subject: CN=a8355b3e-327c-45f5-af94-a965911c3103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:aa:67:cc:2c:f0:b1:06:2d:ab:7e:db:07:
                    50:8c:a6:7a:69:42:46:d8:e0:d8:59:f1:b2:6b:73:
                    6f:cb:ca:09:c5:c2:55:a8:8c:40:c5:35:23:65:69:
                    50:51:02:4c:47:69:e6:ab:b6:44:52:87:64:27:3d:
                    c2:e9:4a:95:eb:32:1b:2b:72:c7:83:13:d0:37:cd:
                    9b:e1:51:67:74:21:9c:2b:d8:12:f9:98:cf:63:10:
                    96:3c:a9:eb:17:ec:63:45:66:c8:c6:25:f9:27:a5:
                    17:9c:88:c6:75:c1:80:91:6d:c2:3a:b4:34:c6:a2:
                    1f:a4:9a:e8:31:c8:e7:d6:83:b3:fe:e6:3a:96:2f:
                    e4:9e:c4:39:13:01:b2:fb:c6:11:a4:69:e1:91:a5:
                    be:9d:24:d6:5f:d9:f8:a4:0c:ea:20:7e:ff:9f:5d:
                    6a:ba:37:50:43:19:31:0d:95:93:1a:92:04:d7:65:
                    5c:e0:58:1c:de:26:a4:35:eb:b8:0b:4e:12:76:7c:
                    62:21:c2:ff:77:85:d9:c7:4a:cd:6d:ae:83:13:e4:
                    80:05:55:04:c0:3d:a0:58:da:57:54:74:95:d0:60:
                    ac:70:0e:0d:98:f3:92:a3:d0:8a:39:38:49:1c:56:
                    2c:cf:bf:90:34:9d:41:fa:86:81:6f:2f:f6:16:6b:
                    ec:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E9:94:34:6A:1B:51:8E:19:03:BE:F9:AE:F7:49:57:AD:82:8F:55
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a8355b3e-327c-45f5-af94-a965911c3103.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.181.82.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398551

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:1d:66:13:62:ae:df:15:e5:5b:48:dc:cf:91:03:58:49:71:
         13:86:f7:b7:2c:1e:b8:05:9d:c8:55:e3:d4:e2:3b:79:03:99:
         99:9a:a6:40:aa:ae:4a:cc:dc:3f:ac:d6:a2:3c:4b:4a:59:df:
         79:bb:98:dd:45:af:b3:45:51:e3:ff:23:a4:10:4e:22:91:ef:
         74:91:5c:05:f4:22:57:96:44:56:cb:a7:89:25:7c:f7:94:8c:
         59:03:f8:4f:c0:a3:df:92:bf:89:c2:dc:2e:50:62:cb:aa:b6:
         b8:8b:99:4f:7a:aa:8b:75:63:4b:51:fa:2f:e5:5c:ae:7a:03:
         a0:4b:d1:16:b0:26:6c:e0:eb:44:47:9e:c4:69:77:f9:aa:e5:
         13:78:9c:a8:19:46:5f:98:36:fb:a1:89:ed:cc:49:23:6b:96:
         ba:0d:36:c2:c2:c9:85:17:05:ec:72:cf:b6:ec:85:f9:b0:34:
         b2:fe:fe:39:84:94:fc:65:d9:22:c8:05:4e:bf:03:3d:bd:f8:
         58:9c:e4:e9:f1:fc:56:3d:10:fb:45:2b:2e:15:89:88:5e:0e:
         3a:db:b9:e3:2f:fd:98:11:7e:fb:d8:b7:07:89:6c:cc:f4:5c:
         6c:94:11:f0:3f:04:06:4f:9e:cd:bf:5d:67:99:29:36:c9:6c:
         e0:cb:86:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----