Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4de3fae5-9a77-43c6-9f06-0287f1e08fae.cer
File:                     4de3fae5-9a77-43c6-9f06-0287f1e08fae.cer (raw, json)
Hash identifier:          t65vhPruk736rtAUjTj0ruvly6wh6r52MZKup81ayP8=
Subject key identifier:   FF:F4:00:BD:82:75:AE:4A:22:16:EA:90:0F:D2:3B:42:3B:18:83:4F
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285844940D311EEC356E99B0DEFF80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4de3fae5-9a77-43c6-9f06-0287f1e08fae/4de3fae5-9a77-43c6-9f06-0287f1e08fae.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4de3fae5-9a77-43c6-9f06-0287f1e08fae/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 Jan 2024 01:45:21 +0000
Certificate not after:    Tue 21 Apr 2026 00:45:21 +0000
Subordinate resources:    AS: 26046

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:94:0d:31:1e:ec:35:6e:99:b0:de:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jan 17 01:45:21 2024 GMT
            Not After : Apr 21 00:45:21 2026 GMT
        Subject: CN=4de3fae5-9a77-43c6-9f06-0287f1e08fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:fc:d5:87:1f:2f:4e:23:b0:ad:c6:fb:dc:
                    76:fe:56:1d:d3:89:b0:a2:7f:55:e9:ca:91:4b:97:
                    87:55:92:2a:ed:cb:d0:ba:07:d4:3c:73:fa:1e:c3:
                    e0:e9:69:75:66:88:a9:ca:da:de:5f:bb:dc:a7:78:
                    f2:33:3e:d3:75:bf:87:f0:21:67:2c:34:1a:0a:c3:
                    c1:9b:81:27:de:0a:3f:85:e5:56:85:14:c6:ab:28:
                    8c:51:3e:58:b1:d7:93:e3:27:59:4c:71:db:c9:63:
                    49:5b:2f:e8:51:5d:ab:f6:05:92:20:90:ac:fa:a3:
                    7b:19:fc:f6:87:95:99:bf:00:7e:c7:9b:ac:8b:2e:
                    83:11:aa:c4:a7:5d:c1:84:97:c2:43:c6:3a:fe:dc:
                    9f:c9:59:42:da:aa:73:4e:4b:71:c3:a7:c1:fb:27:
                    28:f6:58:e8:c6:44:e2:02:18:d4:4c:a9:a5:d3:74:
                    d4:8e:d1:9b:f5:6b:d2:4a:3d:1f:b0:79:15:53:38:
                    9d:14:26:c7:2d:be:9d:a7:0a:70:75:fd:6c:c0:70:
                    60:3e:c3:4b:34:c8:f6:b1:4c:25:d2:96:08:4d:b5:
                    8e:78:a5:39:86:97:b7:1f:15:c9:cd:88:de:ac:17:
                    30:43:c4:42:28:b8:87:d8:04:51:4e:8f:c8:1a:3c:
                    fe:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F4:00:BD:82:75:AE:4A:22:16:EA:90:0F:D2:3B:42:3B:18:83:4F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4de3fae5-9a77-43c6-9f06-0287f1e08fae/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4de3fae5-9a77-43c6-9f06-0287f1e08fae/4de3fae5-9a77-43c6-9f06-0287f1e08fae.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26046

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:e8:ba:71:0e:2f:5a:25:1d:08:a3:3f:e1:5c:b3:f6:6b:96:
         2c:56:cf:5c:42:3a:d3:83:5f:4a:d7:40:e2:56:07:2b:d5:9a:
         1e:89:4e:69:56:e1:50:b3:3b:a7:5b:b2:6e:6a:76:ef:71:c5:
         81:8f:34:12:f5:77:13:6a:17:b3:ba:12:49:61:db:86:4b:ba:
         8f:7a:13:78:a2:82:23:2a:96:e7:53:46:0a:bf:87:de:c3:17:
         a0:b3:53:22:9b:79:af:8b:80:8f:5b:aa:bd:37:b2:de:e0:88:
         d4:a4:64:8b:c4:36:33:64:fa:70:65:9e:48:59:c2:bc:7b:4b:
         60:c4:63:63:c0:21:f2:78:24:9e:88:91:f7:2b:86:fd:c5:a3:
         a4:16:f8:40:58:6b:8a:c5:82:6f:39:45:67:ff:2b:a5:3e:2f:
         23:ce:24:79:7c:ec:fd:43:90:2d:b8:84:31:09:62:4f:6a:41:
         06:02:d1:9f:2f:12:c3:47:23:22:6a:b5:63:c5:e7:ad:06:e5:
         0d:ed:f1:0c:8b:06:90:64:94:f0:fa:06:77:df:14:57:a2:70:
         c5:d8:06:39:64:d7:36:35:44:58:a2:0a:f2:0f:8b:4d:86:d4:
         8c:79:d0:9b:b7:82:14:e6:2a:ff:1e:48:06:ae:08:22:0e:9e:
         53:6b:90:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----