Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7.cer
File:                     71ff2374-a419-4dc0-be35-7dea3236aad7.cer (raw, json)
Hash identifier:          cikL89/EFncE3f4fw91G/Us79Yay3oTVppM/Uuts3qA=
Subject key identifier:   F5:47:66:77:B3:8A:9D:36:C6:5F:A3:59:3B:33:44:AE:9C:AD:07:B5
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285845DA917023CF30F2E85BE074D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/71ff2374-a419-4dc0-be35-7dea3236aad7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 13 May 2024 00:45:20 +0000
Certificate not after:    Sun 16 Aug 2026 00:45:20 +0000
Subordinate resources:    AS: 13979
                          IP: 2001:506:2000::/36
                          IP: 2001:1890::/29
                          IP: 2620:32::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:da:91:70:23:cf:30:f2:e8:5b:e0:74:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 13 00:45:20 2024 GMT
            Not After : Aug 16 00:45:20 2026 GMT
        Subject: CN=71ff2374-a419-4dc0-be35-7dea3236aad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5e:6e:17:7b:04:c1:b4:a8:83:c0:2c:8c:04:
                    7b:ba:a7:97:88:00:6f:6e:a6:66:1c:d8:cd:bb:f4:
                    75:b1:72:97:04:8c:66:38:fb:67:2e:d0:a9:3f:6c:
                    37:9f:7f:4c:ed:ee:b4:7b:ac:5d:19:2a:5b:b6:32:
                    ac:8c:9d:74:4d:67:e1:6c:f0:b3:e2:15:86:34:40:
                    08:cb:d4:83:62:c6:7b:e2:d4:78:2a:8d:27:02:3a:
                    31:25:74:cc:c6:0b:e9:90:38:9e:32:e6:12:bc:31:
                    38:a0:a3:31:49:26:c5:51:5e:28:fb:2e:31:af:32:
                    97:58:41:69:6f:e8:c5:c1:6d:13:e6:22:c6:66:60:
                    8b:9d:f9:1e:d2:05:51:a2:64:b4:df:f4:43:eb:bd:
                    25:72:82:9d:1f:9a:30:65:9e:45:83:19:b8:b7:c1:
                    fe:c8:67:e7:42:7f:aa:b6:a8:ca:76:27:df:11:31:
                    b1:a5:b6:fa:7b:4c:9b:5e:58:24:ba:b5:6e:35:10:
                    32:4b:8e:4f:42:51:6c:e3:bc:48:1b:4b:2e:d7:96:
                    80:a6:cd:19:73:ae:3e:57:91:e6:df:f0:44:ad:24:
                    8c:95:4c:ea:ed:d9:12:e3:d9:d0:5b:e0:0e:58:8b:
                    22:c9:ee:49:92:fa:7a:3c:3c:8f:0a:ee:0d:48:9e:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:47:66:77:B3:8A:9D:36:C6:5F:A3:59:3B:33:44:AE:9C:AD:07:B5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/71ff2374-a419-4dc0-be35-7dea3236aad7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:506:2000::/36
                  2001:1890::/29
                  2620:32::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13979

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:4a:4f:8d:69:d3:e7:4d:c6:ba:f6:45:bf:c6:01:f8:bb:95:
         56:9c:02:31:50:e9:bf:53:e9:2f:33:05:5b:37:7d:5a:29:19:
         30:99:31:59:5f:c8:77:35:f0:6b:23:cc:94:27:96:23:e6:0a:
         d0:86:e6:da:7b:98:29:1d:01:9f:4a:80:7d:7f:55:ce:28:9f:
         ff:7f:c0:67:65:66:b1:c9:70:55:71:6b:4c:f4:e4:22:c0:44:
         cd:75:28:15:6e:55:33:4a:25:77:c8:ca:bc:4c:23:83:b5:78:
         5f:93:6e:d7:da:01:fe:d6:55:1e:2f:78:18:a6:0e:b9:21:e0:
         cf:95:41:ba:2c:e4:50:c9:2a:86:cf:69:36:15:56:20:3f:92:
         af:de:cc:23:61:1e:42:02:5c:ed:99:a0:41:bd:f5:4c:af:89:
         a3:9f:1b:9d:df:9b:f4:df:0c:26:5b:83:bb:4d:ef:af:97:4e:
         85:51:11:ec:84:4f:38:8e:13:70:88:bd:07:75:65:e1:ca:86:
         10:46:9a:b2:a3:22:d2:5b:a3:a0:f3:c0:b1:0b:ea:15:e4:c2:
         fc:b2:80:6f:d1:b3:dc:5a:16:49:97:33:9f:bd:9a:df:47:72:
         bf:aa:86:74:30:71:9d:c1:fb:e1:17:19:3a:e9:d3:1a:2f:db:
         2b:b6:6f:e0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----