Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer
File:                     c235459b-705a-42fb-9059-b6a9bf0c853f.cer (raw, json)
Hash identifier:          rwsReKew/9I468Zg2+5k6TB0oytiNfkpinImajRGXNs=
Subject key identifier:   15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858467C7D1EA3C1344912C710F980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 10 Jul 2024 00:45:21 +0000
Certificate not after:    Tue 13 Oct 2026 00:45:21 +0000
Subordinate resources:    AS: 393905
                          AS: 398865
                          IP: 136.175.187.0/24
                          IP: 164.152.122.0/23
                          IP: 216.245.176.0/23
                          IP: 2602:2c0::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7c:7d:1e:a3:c1:34:49:12:c7:10:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Jul 10 00:45:21 2024 GMT
            Not After : Oct 13 00:45:21 2026 GMT
        Subject: CN=c235459b-705a-42fb-9059-b6a9bf0c853f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6c:35:f9:3d:16:e0:2d:d2:f0:be:16:57:d8:
                    b7:18:68:3f:36:29:4a:2d:61:eb:8c:40:36:1f:fe:
                    3f:8a:68:7b:58:70:21:cc:9a:8a:8e:fb:31:52:35:
                    af:da:0e:25:9d:fd:bf:25:d4:c7:6c:e5:8f:47:4c:
                    62:c0:c5:07:bb:58:e1:b3:d5:71:42:a3:14:9e:24:
                    bd:dc:84:a6:e1:ef:38:26:6e:fe:fa:14:3d:28:5f:
                    95:33:44:9d:f8:73:87:3a:0d:20:58:33:d8:b4:e1:
                    9b:a5:38:a5:99:20:7f:46:21:c8:ba:29:43:35:ec:
                    e0:65:05:5f:80:1d:b9:8a:f0:df:14:c5:56:67:5e:
                    4f:5f:6d:7c:3c:89:f1:2f:ad:df:57:68:7a:9f:4e:
                    14:99:83:40:a2:a0:91:08:80:d9:37:b5:07:8b:b2:
                    73:dd:d2:77:2f:ad:95:8f:74:62:65:67:7f:38:ce:
                    44:7c:9e:b4:47:ed:c5:ea:73:33:fe:81:90:d0:bb:
                    56:11:35:0f:1e:fe:d5:47:b1:4a:c2:d7:5e:95:a2:
                    df:7f:6e:ca:82:81:35:ab:ee:6b:28:89:51:c3:f9:
                    95:69:2d:89:3c:89:6d:e9:f5:92:8f:71:d8:35:bd:
                    84:64:ab:08:53:3d:74:2a:15:16:d1:c3:40:40:64:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.187.0/24
                  164.152.122.0/23
                  216.245.176.0/23
                IPv6:
                  2602:2c0::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393905
                  398865

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:c9:3b:9d:51:77:90:4d:cf:90:74:88:82:13:01:31:63:f6:
         d3:bc:db:f0:35:68:29:b7:69:e7:ce:2a:03:56:9f:bc:79:32:
         fd:84:4b:c2:26:67:2e:9c:e6:83:78:46:63:5a:df:80:f5:50:
         af:4e:36:f0:38:d9:01:4d:ed:89:3a:e5:ec:e7:8f:72:be:8e:
         09:98:9d:59:4b:d5:63:98:ac:32:21:5b:9b:68:d2:a2:4d:0e:
         95:c8:42:0b:fb:6f:67:86:a2:93:3e:14:8f:2f:81:4a:2b:72:
         a2:b7:77:06:54:16:56:1e:37:cf:25:c5:0e:e7:6c:db:ce:d2:
         0e:a4:0d:5d:96:5a:47:d5:1f:1d:8c:81:1e:33:59:43:14:22:
         b6:e5:2c:38:28:31:57:89:14:d7:35:8a:c7:36:3f:db:ca:65:
         41:64:18:88:96:54:bc:bc:ac:31:c7:f6:ca:34:fe:ef:8c:58:
         c8:28:2f:2f:51:22:32:5d:cd:5b:e6:44:16:16:3b:6a:32:27:
         c0:fa:80:7c:fa:0a:8b:df:e7:89:21:53:b7:10:cd:c0:85:03:
         10:e2:ed:a7:9e:a3:94:75:9b:f2:51:f5:9b:e0:1e:6f:83:92:
         dc:0d:a9:3e:a3:00:52:de:e2:c1:c8:ff:3c:95:1f:ed:65:d6:
         91:2a:24:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----