Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5.cer
File:                     2d723287-d624-4178-939e-a7d8be3facc5.cer (raw, json)
Hash identifier:          6DMimBjFzk34VCyA14+jkS5wEqdikIIyVAUfC4baHM0=
Subject key identifier:   60:FE:55:AA:98:5F:DF:A9:77:3B:FB:81:3F:53:9E:60:0A:A5:A5:D5
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858462B8745D104A9DE7650F02C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 11 Jun 2024 00:45:20 +0000
Certificate not after:    Mon 14 Sep 2026 00:45:20 +0000
Subordinate resources:    AS: 29796
                          IP: 199.27.212.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2b:87:45:d1:04:a9:de:76:50:f0:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jun 11 00:45:20 2024 GMT
            Not After : Sep 14 00:45:20 2026 GMT
        Subject: CN=2d723287-d624-4178-939e-a7d8be3facc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:f2:91:3d:55:7d:26:d4:66:c2:3b:6c:96:
                    88:cc:5f:7d:35:af:d6:91:50:e2:e4:ac:0b:54:54:
                    a8:66:10:a2:23:59:66:32:be:d9:be:08:1c:c2:b2:
                    0c:fd:d5:d9:73:39:80:f2:5f:f8:f9:55:f0:d8:92:
                    6b:8c:aa:48:d5:fd:d4:5d:9c:c6:9a:30:c5:ac:28:
                    bb:58:69:de:6f:ec:5e:f3:67:fc:ac:61:db:8d:b8:
                    3b:55:50:7f:ba:e6:b7:c2:be:ba:16:7e:58:31:d2:
                    13:41:80:fe:af:dc:a3:f4:5e:f0:1f:9f:e2:1f:b2:
                    8c:d8:dc:69:63:79:a2:30:c4:aa:7a:ca:5a:36:d3:
                    20:85:05:3b:f5:0e:5f:9e:0f:b5:28:e7:7e:8c:42:
                    ec:58:6b:67:b1:31:0c:05:97:3d:e6:55:9a:8e:9d:
                    be:f0:40:d6:e2:65:70:a4:c2:ed:b7:e4:4a:aa:11:
                    8b:61:43:5f:d9:d0:1b:d8:12:9c:e9:50:a5:3f:e7:
                    3e:9c:db:39:b4:15:90:22:a8:f2:67:e1:03:55:66:
                    2a:94:91:4e:0e:a1:11:b9:15:19:d2:1e:c4:99:92:
                    f2:3b:6a:a0:c9:20:54:86:f9:c6:69:73:c0:a8:4d:
                    28:be:da:55:e5:0c:5b:10:dc:55:e0:5e:b8:30:5e:
                    03:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FE:55:AA:98:5F:DF:A9:77:3B:FB:81:3F:53:9E:60:0A:A5:A5:D5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.27.212.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29796

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:71:29:4f:a2:08:2a:c1:ab:3c:9c:89:c2:6d:4d:43:aa:48:
         c8:80:5f:71:38:48:fb:1e:31:da:db:12:0d:f1:13:dc:69:8b:
         f4:9c:81:52:fe:59:4e:9f:20:21:ed:0d:51:8c:d3:d3:c5:2c:
         99:7a:28:b7:ac:95:27:80:71:e4:8c:2d:cd:91:82:3c:21:bd:
         22:14:c0:e5:8d:15:df:c5:c4:27:29:fb:1e:2f:d5:8e:4b:4b:
         40:62:e4:c9:55:6e:28:d8:45:8d:24:10:19:d4:af:bd:bf:d6:
         56:35:a6:de:66:29:de:48:ff:12:bf:fd:77:e4:44:ed:87:bc:
         53:8c:cb:3a:09:9a:e2:f2:d3:5f:0c:96:3a:ab:41:9c:15:d1:
         11:06:f7:66:df:2a:f5:da:04:4e:78:e3:8c:3f:ff:64:0b:b7:
         50:bd:d7:a2:d4:c2:6c:e1:ad:fb:8a:12:58:f6:50:30:eb:b2:
         b5:9e:6b:2c:88:57:0f:13:0d:7d:93:a6:20:3c:9d:14:ff:f3:
         ef:0d:82:35:39:4a:b4:4d:e1:12:b7:e1:0d:7a:09:2f:22:05:
         b2:9e:57:64:0c:ba:79:c2:ad:d2:6a:07:3c:06:b8:8c:f3:61:
         dc:5f:60:d8:2f:13:84:ab:72:7c:3b:0c:a1:19:97:10:7c:89:
         3d:14:e0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----