Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/778133a3-9e4e-4ceb-afd8-e657de2d7a25.cer
File:                     778133a3-9e4e-4ceb-afd8-e657de2d7a25.cer (raw, json)
Hash identifier:          QFVnuQmRoXDlwQx9vKnsKwIRpimUkVFBUAofaRijcBA=
Subject key identifier:   60:DC:84:CA:59:A4:21:9F:98:29:46:52:3A:9F:3E:95:93:46:47:87
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285844F5C3204F95D104D494526220
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/778133a3-9e4e-4ceb-afd8-e657de2d7a25/778133a3-9e4e-4ceb-afd8-e657de2d7a25.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/778133a3-9e4e-4ceb-afd8-e657de2d7a25/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 21 Feb 2024 01:45:20 +0000
Certificate not after:    Tue 26 May 2026 00:45:20 +0000
Subordinate resources:    AS: 62845
                          IP: 162.248.32.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:c3:20:4f:95:d1:04:d4:94:52:62:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Feb 21 01:45:20 2024 GMT
            Not After : May 26 00:45:20 2026 GMT
        Subject: CN=778133a3-9e4e-4ceb-afd8-e657de2d7a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:56:7d:86:73:e8:9f:8b:ad:ad:32:bd:34:
                    b3:30:eb:79:61:8c:09:99:fd:79:f7:45:67:a0:bc:
                    c4:8c:9c:ad:23:12:68:c9:e9:fd:52:70:3e:ae:5f:
                    13:88:7f:3c:f0:54:32:9f:38:4e:3d:e4:98:d6:ad:
                    a1:92:7d:71:6c:63:9d:18:84:3c:ba:56:c6:bc:40:
                    5f:01:25:13:10:ff:8f:b9:30:49:a6:d7:bd:57:b0:
                    28:31:57:e6:22:c6:21:8a:a2:c0:25:47:bc:2c:7f:
                    15:f3:52:3c:d0:50:ad:95:52:84:52:0c:78:cc:2f:
                    14:d9:4b:6f:99:70:59:35:c0:1e:88:56:64:83:75:
                    a7:7a:bd:70:a0:d0:d7:ca:90:20:76:fc:af:30:99:
                    29:32:04:60:28:13:aa:0b:80:00:89:82:34:5f:77:
                    b3:46:0d:c0:5d:a0:3c:c3:bb:b5:ee:91:8b:2a:c1:
                    44:e4:af:27:68:41:8e:66:52:c4:5e:6d:d8:7d:23:
                    18:da:05:4c:5f:04:8f:5d:99:95:ed:0d:15:da:bd:
                    a1:38:05:16:30:bb:62:bd:fa:2c:85:02:7c:18:c4:
                    cc:7c:a7:98:c8:b8:59:1b:1b:00:81:ff:c2:5c:88:
                    93:2a:a2:68:33:d5:4f:a3:a6:31:22:18:98:47:d5:
                    42:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DC:84:CA:59:A4:21:9F:98:29:46:52:3A:9F:3E:95:93:46:47:87
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/778133a3-9e4e-4ceb-afd8-e657de2d7a25/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/778133a3-9e4e-4ceb-afd8-e657de2d7a25/778133a3-9e4e-4ceb-afd8-e657de2d7a25.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.32.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62845

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:9b:e4:29:ba:d0:5a:32:bc:9b:80:3c:b5:4a:08:4e:5a:80:
         0b:22:b2:c1:a0:16:92:24:5f:ca:f4:c0:c4:6e:40:45:d8:19:
         4d:ad:0f:4a:42:00:c9:40:67:64:fc:6b:66:83:c0:3b:2b:18:
         c2:9c:a2:f2:bc:1a:a0:52:0e:4e:07:f9:8f:07:2b:5f:4f:a9:
         d9:5c:81:05:e8:96:9d:b4:96:1e:d7:a1:bb:da:c3:ad:0b:e2:
         75:8e:9f:0e:68:f0:5e:a4:07:df:f1:b0:76:57:c0:dc:32:d1:
         dd:92:e6:e6:2b:a6:3a:60:d0:1f:7d:f2:8a:a9:c0:6e:5d:b9:
         28:9d:2a:eb:a8:64:86:7b:87:7b:50:29:f3:e5:aa:d9:2e:4c:
         a2:77:15:c8:a6:cb:13:69:b7:76:c8:7b:50:0e:a0:58:60:b5:
         2b:2f:8a:90:a8:99:28:36:52:94:d6:eb:68:39:39:c2:cd:51:
         f6:f0:d6:b1:27:72:42:23:8d:bb:a3:03:9d:ad:6d:c0:ce:f4:
         9c:8a:42:ab:a2:ef:bd:ac:87:1b:55:ee:37:2a:c4:46:09:b2:
         77:39:6e:74:96:44:3f:c5:9e:58:55:bd:38:8d:d0:58:66:c2:
         9f:bf:19:4a:f3:2f:7c:f6:93:f6:a0:6a:44:72:14:55:f5:fc:
         f5:14:fb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----