Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bd910a80-a023-4390-9541-946646c20c08.cer
File:                     bd910a80-a023-4390-9541-946646c20c08.cer (raw, json)
Hash identifier:          +wy5TkCAri3ftMvYejoIIBYduYLv9EtzPwtI0scYCRI=
Subject key identifier:   8B:76:60:48:04:C6:0D:F7:D5:5A:6C:D7:1E:BF:D0:1B:F1:43:75:11
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285847DC5D31B4366DE6D800CF3100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bd910a80-a023-4390-9541-946646c20c08/bd910a80-a023-4390-9541-946646c20c08.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bd910a80-a023-4390-9541-946646c20c08/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 13 Nov 2024 01:45:33 +0000
Certificate not after:    Tue 16 Feb 2027 01:45:33 +0000
Subordinate resources:    AS: 396440
                          IP: 2606:f540::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:5d:31:b4:36:6d:e6:d8:00:cf:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Nov 13 01:45:33 2024 GMT
            Not After : Feb 16 01:45:33 2027 GMT
        Subject: CN=bd910a80-a023-4390-9541-946646c20c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:e1:42:3d:72:18:49:83:bc:a4:7f:b7:79:
                    6b:bb:83:73:99:9b:5e:dd:5d:94:a5:36:67:08:d2:
                    70:32:ab:a2:81:9a:4f:c0:53:d7:b4:4c:cf:31:c0:
                    76:ea:c6:09:41:57:c7:6c:ed:d2:6d:94:1c:b1:bd:
                    99:26:35:a6:b3:f4:46:10:c1:96:cc:d4:df:17:8e:
                    31:f5:98:dc:c3:e5:49:fa:60:d3:da:0c:9b:50:25:
                    02:ab:58:43:32:8e:9b:ce:63:6f:03:87:37:af:32:
                    72:47:42:19:b2:22:76:20:3d:f2:47:96:b7:d0:8e:
                    15:c3:6c:7b:63:e3:35:57:0c:ee:0c:35:14:6b:4b:
                    be:28:f4:f2:7d:b2:ef:84:dc:35:a5:78:67:e7:03:
                    51:18:d5:13:dd:90:45:2e:f8:72:eb:29:2b:24:88:
                    6d:c1:5b:17:f1:90:b1:e5:ca:8d:7a:9a:bd:e9:64:
                    87:70:e7:d7:99:fe:68:b4:f7:fe:f7:76:a4:43:ba:
                    b7:7d:3c:9a:6d:af:5b:e2:27:92:be:69:8c:9c:47:
                    c0:da:f9:02:3e:98:82:0e:cd:a7:25:ac:da:85:9a:
                    92:49:b4:2d:79:e4:38:57:28:49:ca:18:ee:88:89:
                    16:b9:0b:d5:33:f8:0d:5d:38:94:6a:eb:fa:2e:67:
                    1d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:76:60:48:04:C6:0D:F7:D5:5A:6C:D7:1E:BF:D0:1B:F1:43:75:11
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bd910a80-a023-4390-9541-946646c20c08/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bd910a80-a023-4390-9541-946646c20c08/bd910a80-a023-4390-9541-946646c20c08.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396440

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:69:f4:cf:88:02:2f:91:65:c5:f4:0c:83:62:8a:8d:44:5d:
         b6:8a:29:87:3a:81:1c:4b:b6:b9:59:c4:5a:c2:f2:90:7f:5a:
         11:09:46:40:d8:37:e1:18:d0:b7:be:13:6a:56:b9:51:c8:62:
         b4:3f:55:89:50:ba:df:e8:e3:fa:a1:ea:7f:48:5e:f6:ee:7d:
         2c:33:4e:0b:6a:a6:00:d9:8e:51:58:fb:3d:f1:9a:fc:91:68:
         0e:1d:a4:61:03:d9:bc:fc:f4:ff:fa:41:29:68:f9:1b:57:3a:
         d8:fd:a3:ba:5c:f0:70:ba:57:a2:2c:41:86:98:47:6c:29:01:
         fa:42:5a:56:9e:23:03:5e:8d:03:1b:c8:e4:24:2c:ee:0d:f3:
         7a:1b:3e:59:2b:17:56:8d:4f:f2:f9:0f:7c:87:1c:58:a6:75:
         b9:81:af:c3:3d:1c:47:76:20:45:73:c6:22:f1:eb:20:f5:f3:
         16:f9:8a:6f:9c:dd:76:c5:a9:3b:d2:5a:aa:64:bc:47:6c:94:
         53:f8:6d:5a:fb:c2:a4:9a:57:2b:9c:70:c1:54:f9:31:02:78:
         99:37:05:fd:16:0e:49:47:84:79:02:65:73:81:dc:c2:58:78:
         b1:82:f7:f7:d6:f0:24:ee:4f:d6:c9:d6:85:6c:7f:3f:4e:2e:
         ea:ce:81:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----