Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/027f00cb-62dc-495e-83a4-8bf75045d1c4.cer
File:                     027f00cb-62dc-495e-83a4-8bf75045d1c4.cer (raw, json)
Hash identifier:          YKJrq1QDHpScSJ3oB2Bb4Z6jYsT0d531jDaRZDUkMNU=
Subject key identifier:   CF:8D:6C:4F:E0:4E:08:9F:92:10:9D:D2:75:4F:E9:49:3C:BA:EF:73
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858462E51F4F5E11B920BA2458240
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/027f00cb-62dc-495e-83a4-8bf75045d1c4/027f00cb-62dc-495e-83a4-8bf75045d1c4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/027f00cb-62dc-495e-83a4-8bf75045d1c4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 12 Jun 2024 00:45:20 +0000
Certificate not after:    Tue 15 Sep 2026 00:45:20 +0000
Subordinate resources:    AS: 14775
                          IP: 104.36.88.0/22
                          IP: 162.250.204.0/22
                          IP: 2602:fe29::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2e:51:f4:f5:e1:1b:92:0b:a2:45:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jun 12 00:45:20 2024 GMT
            Not After : Sep 15 00:45:20 2026 GMT
        Subject: CN=027f00cb-62dc-495e-83a4-8bf75045d1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1c:05:df:6f:f9:e9:ad:1e:7e:95:30:4e:72:
                    fe:5f:b0:2a:9f:63:28:46:31:7d:17:f0:f6:a1:e4:
                    e1:cd:c9:0e:1b:24:09:1f:a3:aa:8f:45:b8:bc:ee:
                    c4:03:e1:d2:9f:f6:6e:e8:5b:51:08:be:dc:99:f9:
                    5c:b4:e1:d2:5a:d3:59:38:da:8c:98:01:95:9a:be:
                    0c:7b:7e:48:c5:74:44:00:4f:d5:06:39:58:d3:fc:
                    52:b2:c0:44:c5:26:7e:04:7e:c8:db:b8:32:30:9c:
                    cb:63:37:64:f4:91:5a:d5:ad:5a:1f:f9:32:ea:97:
                    01:da:21:2f:91:3a:87:44:e0:4e:72:55:88:d2:d5:
                    fe:1a:72:50:2c:74:ee:a9:12:26:2c:8c:10:21:76:
                    f7:11:76:dd:17:12:0f:ae:22:e4:60:5a:5a:8a:c4:
                    35:31:9e:42:a8:61:68:a8:6f:27:e8:78:6a:ee:4e:
                    ce:26:a1:6e:3e:7b:b4:d4:33:06:76:b7:4d:c2:0a:
                    b5:1a:15:0e:8d:7b:5a:b9:c7:a5:64:e9:ed:4e:8f:
                    e8:ab:4e:1f:0e:63:aa:9c:f7:09:5a:f0:ce:8f:87:
                    8a:22:4a:90:c7:0b:6b:66:fa:09:a5:4a:db:bd:ca:
                    90:6e:c5:64:44:c7:1a:a4:dd:7f:78:e5:18:9d:e6:
                    1e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8D:6C:4F:E0:4E:08:9F:92:10:9D:D2:75:4F:E9:49:3C:BA:EF:73
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/027f00cb-62dc-495e-83a4-8bf75045d1c4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/027f00cb-62dc-495e-83a4-8bf75045d1c4/027f00cb-62dc-495e-83a4-8bf75045d1c4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.88.0/22
                  162.250.204.0/22
                IPv6:
                  2602:fe29::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14775

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:26:3d:69:35:ef:2d:53:04:16:3e:e5:4e:56:f0:a6:d4:d0:
         87:81:e6:05:53:fc:6b:7a:f9:78:6d:fc:c4:e3:aa:63:b7:4a:
         07:e4:d6:b0:e0:60:f0:fa:15:55:3c:cf:8f:f2:15:44:19:7b:
         7a:db:8b:77:9e:34:9e:0e:9d:85:50:ee:ea:d8:a9:53:36:07:
         10:32:76:0a:ba:0d:1e:68:81:83:79:a9:77:af:ca:b7:4a:eb:
         3e:5f:29:8e:ae:b0:69:d5:a0:e1:a4:1e:9c:ad:df:b7:30:c1:
         58:b4:23:f0:30:81:c8:fa:7c:e4:e9:5d:fe:23:67:85:8e:c9:
         ac:4c:8d:34:a5:fb:65:3d:34:93:2a:b9:11:cb:05:d6:a6:eb:
         9e:a6:28:cb:33:2e:69:13:2c:5f:51:77:18:e0:f5:2a:cc:8b:
         aa:d3:bf:2c:60:41:c6:a8:85:5c:28:1c:e7:bb:7f:ca:52:65:
         34:64:83:bf:c8:75:f7:81:13:66:1b:99:0d:80:d9:58:ac:60:
         24:5f:0e:1b:db:66:6a:d6:69:03:b9:82:36:87:10:06:91:d1:
         bd:44:42:fc:6a:07:18:bb:e5:80:f4:10:47:33:d4:36:52:92:
         41:ee:62:e0:94:d8:4b:9b:a9:ce:41:b8:68:ed:cd:e9:e9:26:
         a6:23:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----