Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer
File:                     159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer (raw, json)
Hash identifier:          PkseG/LeX1L3XNGXObhe1GDYq2jdzI9LPDbeTXu8DGw=
Subject key identifier:   E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285846EC28844F5142F5727CF6E6D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/159b5e7c-05eb-4d55-a0f0-ca82400a921b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 19 Aug 2024 00:45:24 +0000
Certificate not after:    Sun 22 Nov 2026 01:45:24 +0000
Subordinate resources:    AS: 6456
                          IP: 208.90.168.0/22
                          IP: 2620:0:cf0::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ec:28:84:4f:51:42:f5:72:7c:f6:e6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug 19 00:45:24 2024 GMT
            Not After : Nov 22 01:45:24 2026 GMT
        Subject: CN=159b5e7c-05eb-4d55-a0f0-ca82400a921b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5a:37:cd:b4:45:a0:f3:b0:45:7a:9b:8e:05:
                    58:6d:05:89:50:dd:3a:fb:82:e7:3e:a8:73:c2:e4:
                    82:a4:c0:b5:b3:a8:76:17:91:e6:d3:19:86:0f:b0:
                    55:2b:8a:fd:2e:6b:e1:2f:d1:18:d4:96:21:dc:4d:
                    6f:5f:bb:cc:4e:95:e6:18:1e:a7:86:9b:32:e3:71:
                    cf:e1:08:f6:10:03:fa:d5:01:25:c2:ef:15:b0:18:
                    3c:3f:31:79:93:7d:f9:7a:50:c2:a9:34:d9:4f:da:
                    01:a0:0d:11:a9:b3:56:3f:c3:75:47:97:21:f4:f1:
                    4b:1c:ba:5f:9e:30:cc:5c:27:e0:bd:74:10:07:3c:
                    78:3d:6d:f9:86:d5:d9:09:13:b9:f0:54:f0:37:c7:
                    9d:e4:a5:83:7e:17:ab:ba:39:4c:66:d8:44:a3:d4:
                    b2:28:4b:ed:ea:7f:fd:5e:52:a2:1c:61:22:20:13:
                    72:1c:5a:e1:db:60:48:64:c2:2d:9a:5a:e8:aa:a8:
                    70:1b:ce:e6:96:87:0a:90:d1:cf:ed:b1:c8:93:69:
                    af:54:65:65:e3:8f:1a:3e:f6:af:30:74:d3:da:3c:
                    1c:62:30:2c:d2:85:68:55:08:fa:86:e9:ab:02:6c:
                    d9:d6:2e:88:7e:8a:e3:01:b3:25:b2:d9:2b:85:5b:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/159b5e7c-05eb-4d55-a0f0-ca82400a921b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.168.0/22
                IPv6:
                  2620:0:cf0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6456

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a5:30:f9:bc:7c:85:6f:a6:94:e2:67:0e:1f:c1:25:51:9e:
         af:eb:52:bd:2e:76:b7:72:8d:e4:70:e2:d4:31:5b:c2:bd:9d:
         d6:eb:07:ca:5f:1c:ef:58:09:24:f1:92:74:4e:0f:49:b6:3d:
         55:e8:7b:f6:0a:fc:1f:bc:2a:69:e1:84:58:8a:d2:aa:2e:bb:
         eb:cb:d7:98:09:7f:d9:f1:14:22:f9:9b:33:1b:aa:03:bb:6d:
         42:2f:36:0b:74:d4:ba:27:06:f9:a2:50:0d:b1:4d:4f:13:79:
         6c:30:19:42:5b:88:82:ae:ec:31:63:dc:43:cf:3c:7a:b3:87:
         73:3a:61:0d:9c:da:47:65:cc:5c:fb:c9:d2:47:f2:72:3c:4d:
         d7:1c:da:81:e7:bf:04:7e:37:30:a8:30:7d:06:aa:48:7e:a4:
         e6:87:aa:4d:19:a5:2f:10:44:fb:16:0f:ff:22:85:d7:84:5e:
         e5:bb:35:67:fd:82:7d:a7:e2:36:48:31:2d:0a:8a:78:b5:e4:
         27:48:bc:e1:23:69:bd:ad:10:18:4e:0e:8a:c2:e3:f8:74:98:
         a0:ad:d8:5b:bb:57:5a:98:65:a6:2f:c7:11:ef:55:aa:b6:d9:
         a1:53:33:da:01:29:80:ee:88:32:64:e1:4d:2d:26:02:ba:2f:
         47:73:0c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----