Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/017daff1-6a0f-45af-8ab5-802438ab1ef5.cer
File:                     017daff1-6a0f-45af-8ab5-802438ab1ef5.cer (raw, json)
Hash identifier:          RVW9zHvwW3XEqDtAwO0jEmAAc54qfQjHNXwsHjT0u10=
Subject key identifier:   B7:DD:88:25:05:2C:1F:7A:79:57:E2:86:9B:AB:FB:B3:30:D1:2A:C6
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584562860803CA4E4DABDD475600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/017daff1-6a0f-45af-8ab5-802438ab1ef5/017daff1-6a0f-45af-8ab5-802438ab1ef5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/017daff1-6a0f-45af-8ab5-802438ab1ef5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 31 Mar 2024 00:45:21 +0000
Certificate not after:    Sat 04 Jul 2026 00:45:21 +0000
Subordinate resources:    AS: 396903
                          IP: 148.59.43.0/24
                          IP: 2620:4c:2000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:86:08:03:ca:4e:4d:ab:dd:47:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Mar 31 00:45:21 2024 GMT
            Not After : Jul  4 00:45:21 2026 GMT
        Subject: CN=017daff1-6a0f-45af-8ab5-802438ab1ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:41:64:9a:80:5f:12:7e:0b:53:30:2f:d0:
                    e4:85:89:d5:d8:25:24:63:25:ed:5c:39:d1:21:d3:
                    31:be:7e:87:24:8c:b0:7a:73:cf:88:06:f3:08:9f:
                    6a:83:1d:92:0b:41:d0:46:ef:d2:7d:31:c1:59:4a:
                    f1:00:a3:b1:2b:53:3b:4d:36:69:21:c0:1e:21:74:
                    02:4a:f6:e1:c1:91:63:85:05:26:0f:e6:eb:f9:e2:
                    c4:53:46:7b:70:43:6d:f4:df:d1:ca:0a:58:65:f3:
                    22:74:3b:1e:df:e5:75:3d:10:6f:68:03:58:d9:a8:
                    b1:1c:39:a5:90:83:f0:4f:b4:b0:3b:a4:45:01:8e:
                    98:1b:df:ec:58:f1:44:98:ee:7e:c2:5d:4d:50:6d:
                    63:01:35:af:67:da:28:a8:ef:3d:88:c8:27:dc:d0:
                    f6:43:50:83:4b:60:9d:d7:1f:3d:62:96:94:d1:22:
                    7a:6f:e1:41:9a:eb:4b:94:1b:0f:82:7d:f9:45:d8:
                    0a:20:65:96:a0:16:ae:1d:df:07:4b:ac:c3:f8:49:
                    48:8b:97:bf:af:a0:1f:df:3c:d3:b9:e6:cf:95:90:
                    58:5d:f6:4c:b2:b0:9a:48:c9:8a:f2:0a:ea:80:31:
                    a8:77:ca:fb:26:ad:c6:4a:39:9f:1b:30:a3:25:58:
                    ba:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DD:88:25:05:2C:1F:7A:79:57:E2:86:9B:AB:FB:B3:30:D1:2A:C6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/017daff1-6a0f-45af-8ab5-802438ab1ef5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/017daff1-6a0f-45af-8ab5-802438ab1ef5/017daff1-6a0f-45af-8ab5-802438ab1ef5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.43.0/24
                IPv6:
                  2620:4c:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396903

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:bd:5a:29:6b:41:b9:f5:56:d9:c9:39:bf:de:8d:b9:73:75:
         ea:cf:29:a4:24:86:d0:2a:73:aa:0c:3d:53:50:97:27:49:19:
         b9:31:87:d8:82:f2:59:57:82:6f:73:55:3d:65:d7:1b:fc:5d:
         36:5a:7e:60:ac:c5:9c:8a:f0:98:ed:dd:d6:4a:98:8f:30:80:
         23:16:6e:bb:d3:48:15:21:93:d7:85:4d:26:ed:b8:02:5f:bf:
         08:e5:86:2a:4f:a0:f0:6b:88:5c:18:14:9e:09:5a:df:8c:e3:
         02:3b:36:7a:57:83:74:2e:03:e4:2e:ef:32:37:f8:84:62:6c:
         da:a2:25:6d:9c:e9:94:d3:db:7b:86:22:a8:db:23:6f:e9:f5:
         9b:59:19:4a:74:19:74:28:f8:df:a4:ad:41:3d:4d:9c:14:6d:
         29:24:17:aa:e7:6a:36:c9:bc:ff:96:2e:24:bb:af:3d:a1:67:
         e0:9d:3a:79:de:cd:05:75:fc:35:63:c4:63:5a:82:a8:9a:7a:
         ad:3d:13:bf:5e:10:8e:84:25:33:92:1b:7f:d8:59:f7:14:3f:
         7e:24:bf:0b:40:53:9d:53:9e:c4:54:5e:56:f4:54:95:21:65:
         74:f9:52:a5:07:fa:5c:48:08:09:e2:4e:77:bb:6f:61:1e:d2:
         e7:92:72:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----