Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9.cer
File:                     48912ebd-72b7-4f0d-a6bc-40bc4403bce9.cer (raw, json)
Hash identifier:          mhch31M/SyqvInu5OCEl6Dl9/qMKJvLLzKsChzhg1xs=
Subject key identifier:   CD:5A:71:52:E4:D8:1E:47:EB:4F:86:EE:47:2F:5C:EB:73:6C:C8:AA
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285846F4889545B25B548D43F66818
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/48912ebd-72b7-4f0d-a6bc-40bc4403bce9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 22 Aug 2024 00:45:26 +0000
Certificate not after:    Wed 25 Nov 2026 01:45:26 +0000
Subordinate resources:    AS: 36127
                          IP: 134.195.52.0/23
                          IP: 2602:805:6000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f4:88:95:45:b2:5b:54:8d:43:f6:68:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug 22 00:45:26 2024 GMT
            Not After : Nov 25 01:45:26 2026 GMT
        Subject: CN=48912ebd-72b7-4f0d-a6bc-40bc4403bce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8b:45:7c:6b:d8:f3:8e:5e:51:76:c2:ec:2e:
                    b1:50:ac:c5:d3:2e:3b:49:19:37:de:db:68:60:b4:
                    92:fd:b5:3c:c1:20:d9:9e:ae:56:63:d5:a0:90:c6:
                    cc:a8:3a:43:55:bc:8b:a7:fa:af:f3:fd:21:ff:2e:
                    b7:99:03:d9:85:78:4f:7f:f4:dc:b9:ac:a1:9d:c9:
                    66:41:59:1c:0f:40:68:26:c0:7b:01:e7:47:d3:8b:
                    19:ea:5d:44:5c:c8:8c:b7:90:38:ad:ae:0c:7d:4e:
                    59:7a:d2:50:00:15:13:8f:42:25:b5:de:03:24:c8:
                    ea:cc:f0:ea:94:68:b1:52:af:62:13:ac:b2:bd:92:
                    c1:51:24:b3:cc:31:02:da:dc:05:1f:7f:88:aa:8f:
                    7f:bb:fb:39:b9:94:77:bc:67:db:fa:5c:00:a7:64:
                    58:ab:b9:8c:96:f4:71:30:8c:be:03:03:2f:be:f7:
                    bc:cf:10:84:12:5b:e2:37:fa:9c:b1:7a:14:c8:d3:
                    21:63:3d:94:7a:81:68:ba:23:2d:c1:88:0e:e7:e9:
                    6e:dc:2b:66:a6:09:d5:44:93:49:41:63:17:4a:51:
                    ce:70:9b:b4:a3:0e:75:bf:d2:f1:59:3d:16:71:ea:
                    1b:e6:4b:84:5a:66:e2:2f:8d:f3:46:b8:2e:2b:2d:
                    9d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5A:71:52:E4:D8:1E:47:EB:4F:86:EE:47:2F:5C:EB:73:6C:C8:AA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/48912ebd-72b7-4f0d-a6bc-40bc4403bce9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.52.0/23
                IPv6:
                  2602:805:6000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36127

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:5a:84:66:cd:82:5f:a4:80:95:76:fe:fc:c2:69:56:a5:b4:
         e7:5c:72:84:63:f0:fd:a9:e5:0e:b3:50:85:2a:ce:a9:f4:cb:
         d1:08:d1:5b:0b:0b:f2:dc:e3:4f:57:c0:0b:a7:c5:5f:41:2b:
         9a:0d:34:54:91:fe:ed:82:1d:3e:07:27:8d:bc:8e:ad:ef:09:
         64:b0:b7:2f:22:c9:f4:e9:da:6b:5d:e4:08:0c:6a:b7:6f:0e:
         9a:4c:f9:d5:21:0b:67:2f:23:52:f6:39:3d:b5:cb:c7:4b:10:
         da:f8:35:56:ff:8f:7d:c6:45:40:79:2b:5b:26:f7:6c:e6:6c:
         44:67:9d:53:2f:4a:e4:a2:fd:ec:5e:3b:d7:0b:94:8c:b4:1d:
         77:34:f3:14:35:7a:47:db:50:44:6c:22:02:a4:89:cb:b4:5d:
         65:1f:ff:2a:b9:14:98:ec:41:f6:63:1a:b2:c9:87:52:a2:2f:
         44:4b:1c:e1:bd:b1:5a:df:48:a5:50:79:4f:ac:f1:8d:68:38:
         75:dc:d2:3e:b3:b4:6c:ae:96:49:0e:fa:31:4f:57:a2:89:0c:
         29:7e:d4:5e:f4:ec:02:9d:c0:56:b4:23:57:2b:b7:e5:e7:25:
         20:a3:75:74:52:a0:41:29:81:54:50:ad:bf:2e:b4:90:a1:3e:
         e6:df:a6:64
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----