Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/75c56265-28c8-443f-b178-7ec56393f3c9.cer
File:                     75c56265-28c8-443f-b178-7ec56393f3c9.cer (raw, json)
Hash identifier:          9AgYKL+3Z1icThd1SazHEhtCA5CU4YFfrRKfQWm+diA=
Subject key identifier:   A7:42:D0:DD:B3:53:55:D1:54:FF:E7:EA:E8:CD:19:1D:DC:B3:88:F3
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584488E2746FA64FCC6901026580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/75c56265-28c8-443f-b178-7ec56393f3c9/75c56265-28c8-443f-b178-7ec56393f3c9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/75c56265-28c8-443f-b178-7ec56393f3c9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 13 Jan 2024 01:45:21 +0000
Certificate not after:    Fri 17 Apr 2026 00:45:21 +0000
Subordinate resources:    AS: 40578
                          IP: 199.5.28.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:88:e2:74:6f:a6:4f:cc:69:01:02:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jan 13 01:45:21 2024 GMT
            Not After : Apr 17 00:45:21 2026 GMT
        Subject: CN=75c56265-28c8-443f-b178-7ec56393f3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:09:da:d0:e5:80:28:d0:15:be:82:f9:5a:
                    30:c3:1f:45:b5:17:03:8e:c9:b8:c0:94:88:de:2b:
                    5b:09:18:24:86:5c:01:12:2f:73:7b:e2:25:1e:fb:
                    12:95:c2:28:61:82:c8:0d:b5:4a:ff:3a:42:6b:cd:
                    c2:6d:20:b3:a0:8b:3b:d2:15:c3:8c:45:76:be:4d:
                    ba:f9:18:4e:da:0d:08:fb:ce:f7:d4:90:f0:05:16:
                    c7:be:76:c2:73:f4:9c:96:04:ce:1c:98:b5:3e:ac:
                    70:57:8d:29:15:aa:f6:cf:22:f8:83:65:30:5a:3e:
                    03:08:7b:73:98:7b:6b:d7:44:69:12:46:a7:74:11:
                    54:0e:8b:ea:ed:f2:1f:84:22:ac:6c:0c:e0:30:82:
                    9a:66:fa:f7:d0:06:e4:b3:07:b3:ca:55:91:a4:3b:
                    f3:24:bb:37:a2:e4:5d:48:59:d6:e9:25:08:36:7f:
                    bf:1c:ef:74:6b:58:61:b3:b6:4e:76:0f:b3:6c:aa:
                    00:8f:2b:b7:98:d8:0a:3a:6d:4f:db:73:e5:6f:20:
                    d0:1e:c7:d0:34:32:bc:ef:bb:a3:f7:7f:81:5e:75:
                    54:16:f3:87:0d:17:98:05:0a:92:d6:d5:59:4f:b6:
                    c3:21:aa:d6:b5:f0:f8:aa:71:62:ad:fe:68:ea:4b:
                    16:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:42:D0:DD:B3:53:55:D1:54:FF:E7:EA:E8:CD:19:1D:DC:B3:88:F3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/75c56265-28c8-443f-b178-7ec56393f3c9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/75c56265-28c8-443f-b178-7ec56393f3c9/75c56265-28c8-443f-b178-7ec56393f3c9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.5.28.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40578

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:ac:59:e5:e4:7c:5c:60:02:88:f6:f9:09:51:e7:12:cc:5a:
         a1:94:04:2f:3c:91:38:0e:08:16:54:ec:db:ed:7c:84:fb:99:
         cb:ca:2c:4f:38:79:96:d7:81:a5:fc:f3:53:67:5a:ac:2d:ef:
         b5:46:b1:5e:72:77:b1:d2:a3:58:84:a1:c4:a4:39:bd:ab:f2:
         e8:a1:b4:97:13:94:1e:ab:a0:d8:a4:e5:19:f3:ef:3e:5d:ea:
         23:18:20:4a:a3:20:a2:f0:0b:d3:f3:9a:ec:6d:ec:c7:3e:74:
         c7:33:5c:d7:f1:36:f7:80:3d:59:04:b5:aa:52:eb:fe:d7:60:
         13:f2:39:8d:4b:bd:d9:47:5c:f0:ae:e5:6a:3f:02:70:71:d0:
         d6:a9:ca:26:5e:ab:3c:85:6f:89:e3:15:2c:c4:c2:f1:d6:ad:
         a0:cb:20:7b:57:3b:d6:a8:7a:4e:86:07:b5:69:17:ef:91:ae:
         ee:4d:9e:85:82:37:8e:df:a6:97:07:1d:8a:eb:60:c6:9c:b5:
         3f:25:73:08:16:5c:3c:8b:3d:e5:78:a6:55:7d:2a:9a:21:af:
         87:b9:21:ba:a3:f2:cd:14:db:2b:61:75:e8:17:27:09:14:31:
         86:2e:ec:cb:f0:a3:1c:33:d0:bb:3a:da:4b:5a:4c:d2:66:f4:
         1b:14:7d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----