Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf.cer
File:                     0d34fcf6-8f83-4016-b141-8b01958e1eaf.cer (raw, json)
Hash identifier:          7aMK6NCli9aRskHLyeSNp/skeBRwNZR1Rh/aCDKM+yw=
Subject key identifier:   BC:35:CC:64:3E:7E:99:2E:54:63:0B:EB:6E:6E:C9:D7:35:61:8B:FF
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584500EDDD232CAE3C10BB044300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/0d34fcf6-8f83-4016-b141-8b01958e1eaf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 25 Feb 2024 01:45:20 +0000
Certificate not after:    Sat 30 May 2026 00:45:20 +0000
Subordinate resources:    AS: 40446
                          IP: 139.60.232.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:00:ed:dd:23:2c:ae:3c:10:bb:04:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Feb 25 01:45:20 2024 GMT
            Not After : May 30 00:45:20 2026 GMT
        Subject: CN=0d34fcf6-8f83-4016-b141-8b01958e1eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:83:bd:c3:89:1c:c2:61:f4:a6:5b:d7:67:64:
                    45:7d:2b:2e:c4:46:84:02:5b:12:b9:a8:8f:04:64:
                    9c:a1:48:72:4b:d1:ee:c6:4f:1c:5d:94:c5:8a:7b:
                    b1:86:a0:fa:ba:95:73:2c:a7:cd:3a:6f:6d:5a:84:
                    4e:6f:35:9d:00:78:43:91:0d:04:a0:c6:7a:a3:de:
                    58:5f:d4:df:1b:08:20:2a:a6:96:06:ca:a9:08:10:
                    18:4c:8d:30:f3:db:4f:90:b3:05:c7:44:6a:5c:8c:
                    3a:92:0c:bb:6a:2e:6a:b4:cf:96:3b:3a:be:f5:9b:
                    b4:f9:41:fe:f6:da:c2:11:61:7a:6e:0a:6e:82:19:
                    8b:47:69:3a:3c:38:71:97:c9:9e:64:33:85:52:72:
                    d7:5b:09:5a:ca:aa:63:81:f8:28:06:b3:70:4d:b0:
                    b4:f5:d7:95:eb:33:bb:8d:1b:e5:93:77:6f:62:ab:
                    c0:50:d7:79:66:7b:6b:27:bd:7b:b1:d5:5f:94:f1:
                    3f:5e:94:45:4a:bb:f8:c5:36:87:e0:6e:f2:c2:48:
                    c6:0a:3e:27:c1:37:37:ed:21:bb:ef:c6:cf:78:07:
                    a2:2c:b0:61:15:ef:00:4e:b3:80:1a:b2:5f:a4:63:
                    11:99:60:a0:38:f3:ee:5b:89:35:0e:c9:43:1b:1a:
                    9a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:35:CC:64:3E:7E:99:2E:54:63:0B:EB:6E:6E:C9:D7:35:61:8B:FF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/0d34fcf6-8f83-4016-b141-8b01958e1eaf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.232.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40446

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:6e:82:87:6a:81:ef:9a:0f:b3:a0:ca:78:d4:66:6a:8d:bb:
         35:f3:c9:8e:f2:fb:f7:10:96:68:3d:55:b7:87:7a:a1:59:11:
         79:1e:f8:b5:46:34:af:48:f1:7a:65:e5:3b:90:84:fc:72:17:
         0d:6a:e4:97:43:54:53:76:06:30:12:dd:03:14:f5:91:dc:a1:
         c9:5c:3c:80:a0:c3:d1:9e:e1:ee:b1:47:78:fa:fa:52:8f:c3:
         28:92:73:7c:76:b9:80:f7:eb:c6:45:fa:3e:aa:c0:01:c5:ae:
         5f:a5:73:cc:87:4b:0a:20:c0:ca:93:75:df:d6:6e:26:fc:a1:
         2a:ce:7b:98:3d:68:dc:69:d6:a5:0d:92:b8:c5:83:f6:02:b8:
         64:26:3d:1a:ea:7e:d6:99:08:2e:a4:1f:3e:c6:da:5a:bf:cc:
         be:82:32:b2:1b:80:f8:fc:4a:f1:02:f7:48:e3:ed:d6:82:59:
         7a:82:75:56:42:3e:2e:d4:fe:d6:43:c0:dd:9a:51:03:c1:af:
         4e:86:52:b5:f4:2b:1d:1f:87:3a:89:04:ba:45:6b:cf:a1:cb:
         64:17:c8:3a:de:e0:ae:ea:b9:a9:34:f0:35:af:ac:f3:ff:c9:
         fd:c4:08:1c:63:06:98:16:cc:04:2f:e6:cd:fe:ef:5e:46:5e:
         97:f4:5e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----