Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
File:                     27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer (raw, json)
Hash identifier:          0vcap10deZYt+Jd+381ytj0OOe12rtwUfpmcpUtwxa4=
Subject key identifier:   D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285845469B2ED4A51C559A4846CE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 21 Mar 2024 00:45:20 +0000
Certificate not after:    Wed 24 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 63267
                          IP: 104.171.208.0/20
                          IP: 2602:fd43::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:9b:2e:d4:a5:1c:55:9a:48:46:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Mar 21 00:45:20 2024 GMT
            Not After : Jun 24 00:45:20 2026 GMT
        Subject: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e4:3e:c2:c9:aa:62:35:0a:79:54:94:f8:7a:
                    17:26:20:28:51:4c:fc:b9:e6:38:a2:db:74:3e:98:
                    ad:42:41:da:b8:92:c8:a9:85:ee:cc:e7:cf:e3:11:
                    33:46:e1:b6:20:eb:02:fb:dc:7a:27:f6:e5:f8:53:
                    e2:9b:ed:6c:78:c0:a0:ce:12:12:31:d8:55:bd:f9:
                    82:79:0d:2e:01:38:1e:6e:f9:9f:d5:65:b2:f3:db:
                    7a:29:70:ed:e8:7b:14:9c:d7:b1:83:74:48:7d:8e:
                    3a:60:ce:0e:2d:67:a3:05:16:54:5a:24:c8:77:35:
                    be:73:5d:44:d7:d1:06:f5:97:dd:bb:93:35:a8:2c:
                    d1:20:ec:4a:e7:5c:62:3f:25:06:21:dd:9c:a2:9c:
                    f5:e4:86:ff:96:e0:52:21:7a:70:55:29:e8:0b:dc:
                    43:5a:29:86:25:0a:24:a3:51:e0:52:67:80:53:c2:
                    5d:cc:d3:6d:5b:b6:d8:94:d8:8e:9b:10:4b:12:69:
                    77:01:3f:76:ab:43:6f:d3:41:cd:08:7e:44:ed:42:
                    48:d6:7b:0a:78:0b:4e:44:24:32:f8:28:ca:3a:3b:
                    4e:03:92:98:8d:e9:57:89:61:6a:a0:b5:de:d0:7a:
                    8f:2b:8e:ce:51:8a:60:7e:2a:1c:83:f4:02:db:6f:
                    62:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.208.0/20
                IPv6:
                  2602:fd43::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63267

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:fc:e6:d9:65:3c:9e:b5:b7:45:30:f4:f1:d9:65:55:bb:ee:
         bc:d6:55:bf:14:23:ca:0c:cc:bc:75:b0:0e:4c:58:b5:2f:9c:
         b5:1d:5e:6c:1e:07:3d:95:e0:44:c4:eb:25:20:d8:30:4f:3e:
         c4:a5:6a:67:90:8b:6a:78:aa:04:ba:ba:d0:a9:83:09:03:e1:
         ab:44:53:8c:3e:3f:40:2c:58:8b:64:ab:54:80:e1:fb:c0:25:
         00:0f:3c:cc:26:27:8c:ce:53:cd:5f:ee:f7:7e:88:54:85:a4:
         87:02:f3:74:ff:29:16:19:c0:5f:fd:64:fa:ad:ec:ac:47:d2:
         ed:ec:10:fb:66:86:37:38:04:e5:2a:cc:23:ad:18:cb:88:5a:
         8c:4e:4d:a8:16:0f:e4:d7:be:f5:b7:a5:2b:71:08:6d:7d:c7:
         bf:8e:c8:51:e2:4f:fe:a4:0c:09:ea:c0:a7:fb:b8:cb:ee:3d:
         d6:c4:cb:7f:e2:04:10:5b:81:40:fd:b3:6a:47:02:58:57:4f:
         2b:62:07:07:91:5e:27:6b:18:a4:9a:0a:a8:8a:21:80:6b:e4:
         8c:a8:20:c7:20:ed:87:2f:59:4c:0b:ee:4d:cc:55:6e:92:fa:
         ff:3b:a2:66:3a:61:79:0d:42:14:cf:d9:7d:3b:d3:01:87:30:
         a0:a1:e0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----