Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.cer
File:                     5d7ff891-1048-4688-a1ac-b43aa5b13e9e.cer (raw, json)
Hash identifier:          duQUrtlxQiL656iMULL/ikxvpeASfCseeutt1hstSHo=
Subject key identifier:   58:8A:75:8F:51:01:FF:44:0B:35:73:29:0E:D0:70:BD:4D:CA:02:A7
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285845DA917010523A7CDBA1C23D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 13 May 2024 00:45:20 +0000
Certificate not after:    Sun 16 Aug 2026 00:45:20 +0000
Subordinate resources:    AS: 394669
                          IP: 52.124.57.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:da:91:70:10:52:3a:7c:db:a1:c2:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 13 00:45:20 2024 GMT
            Not After : Aug 16 00:45:20 2026 GMT
        Subject: CN=5d7ff891-1048-4688-a1ac-b43aa5b13e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c1:b2:8f:36:49:66:7c:23:45:d9:26:c4:c8:
                    90:2d:f6:59:55:37:93:90:f8:61:bd:36:bb:59:dc:
                    6d:75:45:f6:c4:b4:97:4d:5d:76:2d:28:24:00:76:
                    b5:35:ff:98:36:4d:91:d9:6a:8e:4a:f1:e7:4f:b8:
                    ef:63:36:cd:ae:06:e8:85:ed:a0:ab:dd:3b:3b:3d:
                    38:64:f5:8e:a9:53:70:ac:41:19:41:31:43:6d:af:
                    01:92:73:fd:0e:6b:fd:8f:4c:9c:3d:15:4a:04:95:
                    5d:44:be:9e:00:61:48:c6:e6:da:61:e1:1a:a9:d4:
                    5a:5e:8e:dd:19:31:c6:6b:87:d6:89:9b:7a:15:25:
                    c8:4b:8b:04:84:d1:68:b0:3b:ae:9e:f7:ab:68:fb:
                    eb:b6:ed:11:e5:44:dc:c8:8e:56:e3:03:2a:71:8a:
                    3c:a1:86:ed:a8:78:f8:40:de:f4:60:87:87:52:33:
                    3e:22:8a:f0:60:88:84:d5:9d:79:7c:8b:ed:21:8f:
                    cf:87:2d:a8:05:02:57:5d:7c:17:6a:08:b1:81:25:
                    96:fd:d2:20:2f:15:8c:8b:5f:5a:37:5c:12:ff:ab:
                    51:b4:d4:8c:f8:a4:10:1a:a8:da:9c:87:c1:0c:84:
                    9b:1a:11:37:40:39:7c:4b:03:1e:05:eb:0e:85:5c:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8A:75:8F:51:01:FF:44:0B:35:73:29:0E:D0:70:BD:4D:CA:02:A7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.124.57.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394669

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:3e:e8:09:69:e8:a8:1d:80:68:76:05:e1:2a:e2:b8:13:ec:
         9f:bc:53:ea:a9:52:8f:b6:06:c2:72:6d:35:2d:da:35:e1:fd:
         28:7a:67:eb:ac:f7:ed:70:de:08:cb:a5:18:2c:81:de:e8:12:
         58:ef:3b:4f:7d:64:8b:6e:3c:36:34:eb:b0:79:5c:03:80:eb:
         9a:64:24:57:d1:67:b3:05:52:42:c5:88:70:a1:e7:ab:f0:1a:
         93:64:8b:c0:a4:81:67:e6:fb:9d:49:b6:a8:bd:bf:6b:bd:b6:
         91:1c:f8:be:d3:38:8b:55:96:20:3c:25:c3:94:16:68:83:99:
         87:03:35:38:1c:2d:e4:20:c1:ea:43:b8:9a:4d:57:57:c1:c4:
         60:96:a5:91:e6:66:a4:d1:49:c9:37:b4:5e:88:bf:0e:2c:d4:
         be:7b:f4:7b:6d:6e:52:5d:23:70:b3:c2:1d:ef:36:ed:86:87:
         4a:bc:4d:87:c6:8a:60:7b:90:f9:ff:1e:a5:e2:b2:03:51:91:
         2c:94:4f:f2:10:43:e3:d2:79:3b:2a:bd:be:e0:6b:ea:81:04:
         8f:14:ea:c4:dd:fd:62:38:4a:c7:78:97:a9:f4:7a:1e:75:de:
         1a:55:55:0c:08:17:69:e3:1c:34:34:c8:bd:12:52:12:b4:50:
         a3:88:9a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----