Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer
File:                     3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer (raw, json)
Hash identifier:          1u+3tf5ORJ1JR5L3OWMZ6TszEN2OZ/Zy5jgeUGZPMRg=
Subject key identifier:   44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584755A5A23B475B328B9108F090
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 25 Sep 2024 19:37:23 +0000
Certificate not after:    Tue 29 Dec 2026 20:37:23 +0000
Subordinate resources:    AS: 394086
                          IP: 192.156.190.0/24
                          IP: 2607:d640::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:55:a5:a2:3b:47:5b:32:8b:91:08:f0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Sep 25 19:37:23 2024 GMT
            Not After : Dec 29 20:37:23 2026 GMT
        Subject: CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7f:ae:8b:12:47:3b:50:16:6e:af:33:fc:49:
                    81:f0:d3:2b:79:68:c3:44:8c:e4:13:99:06:23:36:
                    ea:12:06:b5:dc:ef:ff:80:b8:66:39:72:1b:b9:7f:
                    77:3d:39:ac:72:7e:c0:6a:7b:83:63:67:ff:50:76:
                    37:bb:42:2a:7b:e6:02:92:ed:64:56:c2:64:b1:44:
                    44:11:65:c2:d4:e0:e9:60:54:36:45:a7:69:f4:14:
                    68:96:1f:7d:b0:25:9e:13:bf:c3:36:35:0f:06:4e:
                    d2:b4:85:04:ab:66:c1:56:df:c8:a8:2b:86:33:8a:
                    48:eb:f1:d7:dc:0b:5e:1b:33:fa:98:37:f4:45:b9:
                    7f:0e:48:df:d7:ea:f4:14:a4:af:a6:19:43:da:12:
                    58:a5:af:2b:53:cf:fa:40:3a:04:84:5e:2f:8f:55:
                    b5:0e:ff:7d:1b:4e:c0:eb:3c:78:80:ec:03:6d:a5:
                    62:0f:75:13:3f:30:5e:c4:22:04:19:08:8d:58:8d:
                    96:51:fc:db:a1:2c:b1:97:62:cb:44:97:ea:f6:86:
                    f0:0e:d6:b3:e4:4a:a4:51:9b:0f:15:67:6c:49:8c:
                    2d:99:8c:ab:f3:76:96:b6:c2:89:13:89:40:db:ed:
                    ac:5c:84:26:cf:72:60:d3:fb:7b:03:7e:b5:41:58:
                    63:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.156.190.0/24
                IPv6:
                  2607:d640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394086

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:8a:86:0f:6a:a1:63:8e:99:b1:1f:b0:11:72:49:f3:0e:a9:
         df:e3:05:54:16:40:9b:33:8c:81:d0:a8:58:7f:24:4b:08:86:
         43:c2:2f:95:90:9d:2f:80:c1:70:8a:a0:30:44:73:bc:5d:c7:
         b0:e7:24:28:f4:d3:5b:1b:1b:e8:ec:fa:f5:4b:1c:83:d5:a4:
         1f:a9:3d:37:a5:4a:97:86:8c:58:5f:b5:09:6d:85:cc:82:83:
         77:bb:c1:69:ae:03:cb:7d:4f:02:7d:86:e1:d2:d8:03:c4:e6:
         a2:99:e6:8f:f2:dd:da:d6:7d:2e:3c:cd:54:28:29:0f:ca:99:
         32:63:85:98:58:f9:4b:d7:ab:8d:de:b0:be:be:c4:d7:52:73:
         cd:f2:21:a1:53:4c:32:b2:c7:2c:28:ca:b5:99:ae:3a:a4:5a:
         b2:b7:b8:88:02:e8:2c:02:d2:a5:7d:89:b2:99:64:aa:7e:c9:
         1e:43:4f:e9:59:2f:de:96:e7:d5:75:0e:44:ca:7e:f8:bc:c4:
         12:16:e7:e7:a5:e4:f5:c5:21:f0:f6:94:19:8f:8c:64:75:d8:
         1d:b0:00:de:12:fa:66:a2:b3:cc:23:0f:ee:90:c8:63:1f:f9:
         55:42:a5:c0:66:b2:ae:25:1e:c9:f2:4a:d6:4e:0d:94:a7:50:
         f3:02:85:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----