Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer
File:                     3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer (raw, json)
Hash identifier:          OI8mczaKDP078NhaZVo1xNp/XLw4xuUA4fqUXALd0GQ=
Subject key identifier:   9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584704D47D20B1CDB07F4ED53920
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 27 Aug 2024 20:51:19 +0000
Certificate not after:    Mon 31 Aug 2026 00:45:20 +0000
Subordinate resources:    AS: 26258
                          AS: 400692
                          IP: 144.29.0.0/16
                          IP: 2620:123:c000::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:04:d4:7d:20:b1:cd:b0:7f:4e:d5:39:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug 27 20:51:19 2024 GMT
            Not After : Aug 31 00:45:20 2026 GMT
        Subject: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:3c:2a:cd:ff:ff:02:83:3c:8b:40:50:cb:
                    c6:fa:6c:dd:09:f6:2f:05:0e:96:6e:0b:e9:0f:83:
                    ff:33:ae:53:03:50:bd:34:d8:72:43:45:f6:eb:b4:
                    c4:57:a3:a9:f1:0d:c9:e1:df:14:64:d1:bf:80:fd:
                    5c:32:e5:98:a6:7f:ca:3d:02:d5:7f:81:f3:ff:b6:
                    bb:6f:e0:b9:4e:9a:31:a6:74:dd:72:4c:a9:c8:23:
                    77:61:19:08:bc:32:00:4e:04:59:fc:db:4d:a7:fa:
                    0a:b1:8b:a4:be:0a:aa:9a:ab:ef:cf:bc:96:58:25:
                    c0:2a:77:85:24:64:f4:28:af:5b:f8:ce:9f:a9:83:
                    bb:ff:3d:e4:8c:59:f8:a4:98:79:c8:26:f9:88:e2:
                    3f:d9:44:d4:40:55:1a:01:57:08:9b:2b:d3:eb:a5:
                    79:0c:e8:69:30:6f:60:aa:7f:50:e7:07:c5:4e:70:
                    32:8d:c9:1d:ce:5a:40:b6:94:80:15:a1:8c:c3:95:
                    ae:27:e1:4c:57:d6:48:04:40:92:79:c1:99:f6:84:
                    a1:26:77:06:46:d1:51:69:e0:38:76:df:0f:08:cf:
                    12:52:dc:75:52:b3:4f:ae:a9:39:a9:b3:dd:01:e4:
                    a4:57:4e:27:fc:1b:c9:bd:26:a5:1c:1a:38:c9:a8:
                    79:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.29.0.0/16
                IPv6:
                  2620:123:c000::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26258
                  400692

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:0a:fc:4e:ca:28:ae:31:cc:9e:12:8d:ef:6b:10:32:b0:d0:
         f5:48:7a:7a:20:e2:fe:ed:eb:93:01:3b:32:75:c8:98:2b:42:
         36:cd:02:bd:d1:07:cf:56:d8:c8:3d:cf:83:21:50:e3:9e:82:
         c1:f5:95:dd:6e:a7:e6:c0:30:c0:81:e8:6f:b4:72:cd:50:41:
         6a:b8:f7:0f:48:ea:dd:7a:3d:f3:a9:9d:c6:8a:2a:d8:f5:0d:
         f3:5a:92:d0:35:85:e9:b0:af:19:6b:5a:53:54:69:19:6c:2c:
         64:e7:32:34:b8:36:bc:b2:8f:81:90:27:95:7d:8d:0b:ee:2b:
         18:2f:37:2d:3e:8c:09:79:a7:58:9b:b3:29:17:af:c8:cf:2d:
         aa:9c:e6:e6:27:8a:44:db:d2:de:07:d5:c8:86:fb:a9:91:88:
         d8:19:fe:f6:66:b1:7d:57:d7:ce:28:4b:12:a4:87:68:e3:be:
         e5:68:d9:d8:ca:eb:9b:91:a1:06:d7:7b:dc:33:61:87:57:ca:
         1e:f0:c8:54:e1:43:da:13:12:50:7a:3a:9f:ca:6f:cc:ce:d9:
         89:ad:04:6d:d1:e5:36:97:08:df:a0:25:3d:20:20:4d:a9:05:
         51:1f:a0:76:8d:4f:dd:d6:45:66:36:9a:3b:90:57:7b:0d:49:
         c0:38:01:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----