Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.cer
File:                     375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.cer (raw, json)
Hash identifier:          vt+Xcyywt/KwkHxGEK30XudYCzr5BfAoxvhc1L5w1lg=
Subject key identifier:   5A:97:7B:A8:1E:1E:10:47:93:C3:C1:73:60:3E:59:CA:0F:95:EF:9F
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285846CD72F931EC3B9F20239FFD00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 08 Aug 2024 00:45:22 +0000
Certificate not after:    Wed 11 Nov 2026 01:45:22 +0000
Subordinate resources:    AS: 393431
                          IP: 104.219.100.0/22
                          IP: 2620:80:c000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:cd:72:f9:31:ec:3b:9f:20:23:9f:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug  8 00:45:22 2024 GMT
            Not After : Nov 11 01:45:22 2026 GMT
        Subject: CN=375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1c:02:eb:51:c3:93:c4:1d:50:7c:a2:84:26:
                    27:10:26:f0:2d:42:00:37:2e:9c:68:fd:8f:3f:26:
                    81:a0:68:67:2a:f2:4f:7b:10:48:24:c7:7e:a0:13:
                    33:a5:70:79:a2:2c:e7:e6:41:0e:77:bc:a2:bd:e1:
                    11:fd:d0:d8:72:a5:11:81:2e:4d:90:43:9c:44:b1:
                    0a:57:ac:20:d8:be:de:de:67:81:70:ee:14:04:de:
                    93:9a:b1:9e:ce:d2:71:7c:91:cd:b4:4e:d0:07:1c:
                    c9:51:71:b2:0a:f3:d4:28:7b:72:3a:ef:fd:0d:91:
                    17:2e:10:ec:7a:36:50:df:74:c3:69:68:9e:e9:d2:
                    50:03:9b:8f:0f:fb:e1:83:e9:a4:94:3f:67:fd:90:
                    79:c8:30:03:22:30:64:6a:aa:cf:df:ab:f6:5b:18:
                    6a:fc:f2:cf:71:16:1d:c6:04:f7:ee:d4:94:9d:b5:
                    c4:6b:68:81:c6:7a:1c:71:88:b6:45:0e:24:e9:fd:
                    7c:91:84:da:6e:4e:86:b9:aa:7c:4a:37:3a:1f:8a:
                    e2:f1:63:8f:c3:f9:d4:da:91:80:7a:76:0b:f4:89:
                    cc:6e:aa:8c:d2:37:c0:29:4a:8c:8e:02:f2:04:c0:
                    5d:13:e6:4b:22:f0:c5:8b:f4:d1:2c:74:05:12:3e:
                    b2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:97:7B:A8:1E:1E:10:47:93:C3:C1:73:60:3E:59:CA:0F:95:EF:9F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.100.0/22
                IPv6:
                  2620:80:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393431

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:55:d2:89:17:80:55:59:6d:72:40:e4:bd:d9:9b:78:cf:ba:
         a4:e1:73:ae:ad:fe:ad:7e:ee:d9:2d:8e:9a:1a:9c:90:8b:f1:
         a8:46:77:d1:c8:61:0a:f0:42:8f:ea:9d:ad:34:4d:09:24:c4:
         5c:1d:f6:53:f3:d2:57:db:af:0f:3a:51:db:47:76:8a:14:87:
         c4:b0:ff:8d:72:be:4a:18:05:47:47:53:92:fa:6a:80:94:b7:
         aa:ae:df:ab:b1:ac:74:e0:03:6b:d2:1c:02:b9:c3:38:2b:26:
         14:c6:1e:a7:bf:99:68:9c:1b:ec:ae:df:cd:58:ca:b2:df:db:
         19:49:c3:51:2b:62:9b:7f:31:0d:b6:c6:10:19:84:ce:10:4f:
         12:e7:66:8b:ea:fe:a5:14:5e:c4:0b:79:4a:b3:35:68:03:e5:
         d7:e9:49:be:e5:c0:4b:9d:63:f0:8d:9f:cf:ca:d8:0b:7b:9e:
         92:69:d5:5d:95:8f:12:95:b1:fc:05:a4:88:7b:25:71:2a:c9:
         6f:b5:70:c4:33:81:da:59:66:2e:17:3e:9d:09:5e:a1:dd:bf:
         e0:4c:42:00:23:b0:c7:51:cb:ea:6d:04:ca:ba:20:6b:f0:ca:
         91:7e:ae:9c:90:61:b4:1a:4b:13:fe:86:5f:96:dc:a9:3b:2a:
         af:2b:60:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----