Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer
File:                     d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer (raw, json)
Hash identifier:          /JIys1K3VbczneTY1SLUHblBgFiuaF4olWPuQDrVKiY=
Subject key identifier:   47:DB:1B:A5:CB:4F:8E:44:5C:C2:6C:2C:59:D7:62:B7:EC:A9:31:6F
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285844E23857506B30D6BC44212B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 14 Feb 2024 01:45:21 +0000
Certificate not after:    Tue 19 May 2026 00:45:21 +0000
Subordinate resources:    IP: 2605:3c80::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e2:38:57:50:6b:30:d6:bc:44:21:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Feb 14 01:45:21 2024 GMT
            Not After : May 19 00:45:21 2026 GMT
        Subject: CN=d671e95c-e484-4b53-91ff-e14d33eaa2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bf:7c:73:9c:4d:8d:08:88:d6:ee:bc:dc:53:
                    b5:34:fb:9b:f8:1d:be:a6:9f:fd:b4:9b:14:97:92:
                    60:e6:2f:be:8a:03:66:82:5c:7a:18:a9:e1:39:00:
                    b7:7a:3f:7c:b1:01:99:78:d3:6b:63:83:cb:99:a0:
                    7f:e2:6e:ab:d2:d6:fa:ab:87:81:71:1e:4c:26:0c:
                    bb:b2:f9:e1:18:f6:2e:1e:d3:75:17:f2:3b:ac:91:
                    af:b6:62:4e:9b:5f:8d:3b:3d:90:11:b6:60:d8:90:
                    5b:96:a9:8c:f1:9a:66:5f:39:fb:96:0b:92:1a:09:
                    18:ee:1f:12:9b:15:fc:13:dd:c4:f7:87:e4:24:d0:
                    9f:e6:93:7f:f9:9a:cf:a6:d6:ca:59:2c:24:4a:4c:
                    69:9e:a2:f7:74:fa:69:8a:5c:92:dd:d0:74:e2:27:
                    67:ae:20:0a:d3:5e:17:32:27:3f:08:f7:1e:1e:af:
                    33:64:aa:d8:0a:d3:d3:a5:6d:c2:09:a4:80:3d:2b:
                    0c:94:5e:53:a4:a5:8d:c7:36:70:95:12:0a:18:c3:
                    b9:83:09:37:c3:14:85:07:cb:9a:ed:e6:36:d1:8c:
                    5d:1c:62:96:7c:97:93:1c:64:5f:66:e1:45:ed:c4:
                    ec:5c:06:c9:e7:0d:a3:ce:1c:8e:0c:bb:4b:cc:c4:
                    eb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DB:1B:A5:CB:4F:8E:44:5C:C2:6C:2C:59:D7:62:B7:EC:A9:31:6F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:a4:4e:32:1d:67:28:01:1f:0d:bf:81:1d:fd:38:21:22:5f:
         cd:f6:9b:bb:24:d6:1f:79:b4:d6:8d:d8:22:31:5f:59:0f:e0:
         d1:9a:45:e3:48:22:eb:de:ad:d0:46:7d:a6:7b:4d:58:81:5d:
         09:5e:9f:33:68:c3:1d:54:da:99:06:8d:f1:7f:8b:c5:fb:c2:
         37:24:e7:b2:a9:22:f4:41:f6:25:e6:64:a0:67:d0:29:75:ca:
         d1:57:25:32:fd:a0:c6:e8:41:f4:18:93:36:f9:66:21:70:4f:
         00:77:57:d8:9a:5c:61:6d:b9:e3:09:65:5d:c6:d1:22:12:34:
         84:6a:f9:87:67:79:3d:f3:c3:ea:f7:62:e9:b8:22:9a:6f:9d:
         48:aa:69:ca:2a:13:16:6e:81:7e:96:1c:81:bf:8f:e8:a7:c2:
         02:c3:ad:63:29:ca:a3:58:12:27:29:bd:e3:12:b0:18:8a:f6:
         78:b2:63:d6:16:35:a0:c4:9f:23:a3:a8:33:5f:2c:60:ee:55:
         76:d8:29:6e:d4:58:1b:1a:4e:c4:90:e4:fd:85:3b:1e:81:8f:
         0d:80:2d:46:c8:a7:00:1e:5c:22:da:c2:cc:0f:ea:15:ca:f4:
         70:1f:43:c7:56:23:04:3b:55:7c:77:50:8d:57:ec:73:3f:6a:
         36:3f:e6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----