Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e67558e-dc00-47ef-ae1c-16fb85202748.cer
File:                     8e67558e-dc00-47ef-ae1c-16fb85202748.cer (raw, json)
Hash identifier:          D4UengBjnEwMTp6zDyHF7Te7jTYqXt62p10geWEH2xQ=
Subject key identifier:   75:82:AC:6C:1C:0D:A7:05:A3:BD:A9:71:60:42:94:9D:E6:FC:93:9D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285846DA1955513C22BC9E82704630
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e67558e-dc00-47ef-ae1c-16fb85202748/8e67558e-dc00-47ef-ae1c-16fb85202748.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e67558e-dc00-47ef-ae1c-16fb85202748/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 12 Aug 2024 13:30:17 +0000
Certificate not after:    Tue 16 Dec 2025 16:08:44 +0000
Subordinate resources:    AS: 2763

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:da:19:55:51:3c:22:bc:9e:82:70:46:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug 12 13:30:17 2024 GMT
            Not After : Dec 16 16:08:44 2025 GMT
        Subject: CN=8e67558e-dc00-47ef-ae1c-16fb85202748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:89:9f:92:1a:10:4b:c3:70:39:e8:91:7a:f0:
                    dc:a5:92:fa:f6:1f:6d:45:4f:e7:46:13:3b:f3:df:
                    bd:6e:3b:c8:89:6f:1c:68:b1:a6:45:05:01:4c:8d:
                    6d:a2:21:52:a0:35:54:18:a5:bd:f3:65:03:8b:9b:
                    f7:b2:41:2c:d9:8b:d4:be:21:17:20:41:d5:ca:20:
                    e2:d2:81:5c:af:23:f4:b4:56:fa:52:03:13:5e:a2:
                    f6:ef:3f:cc:dc:91:7c:90:5a:3b:17:fa:9b:7e:b3:
                    9a:fe:9c:eb:8c:f7:d0:fc:b2:9a:39:ca:85:4c:e3:
                    eb:1f:a8:e7:c4:19:92:c4:95:f1:d1:a6:14:be:17:
                    50:dd:fa:76:67:e3:da:2f:eb:b9:b7:1f:1e:00:91:
                    29:ad:a7:49:c1:f2:f1:0e:df:7e:67:65:c0:dc:df:
                    df:15:8d:9b:e0:9a:6e:d9:53:29:69:b5:5e:af:39:
                    77:a6:11:b7:2a:74:c1:57:1a:28:35:53:62:9c:5f:
                    e7:fd:12:d6:2d:22:b4:46:be:89:f7:90:cc:30:48:
                    c0:63:b7:72:55:88:d1:33:32:ab:60:6f:78:70:e6:
                    2e:d4:96:e8:64:95:9c:71:b1:27:61:b4:0d:ec:5f:
                    95:7e:8d:02:aa:66:94:ba:43:f4:d4:2e:8e:51:72:
                    8c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:82:AC:6C:1C:0D:A7:05:A3:BD:A9:71:60:42:94:9D:E6:FC:93:9D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e67558e-dc00-47ef-ae1c-16fb85202748/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e67558e-dc00-47ef-ae1c-16fb85202748/8e67558e-dc00-47ef-ae1c-16fb85202748.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2763

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:aa:14:ad:dd:50:f0:08:5d:ce:86:6c:ee:83:96:1d:20:d7:
         b8:9b:67:49:78:23:f2:ad:68:ee:1c:b7:de:1a:4f:5c:ab:fa:
         1c:2c:ad:41:c1:01:1e:96:3b:03:3c:1a:d7:c7:94:6e:ca:df:
         53:b2:46:10:28:7f:6f:11:17:93:69:85:12:9f:a4:f2:48:14:
         be:e5:37:42:38:da:ed:c1:3c:1c:ef:b5:29:f9:a9:de:23:05:
         12:c2:df:67:ab:5a:1f:fd:48:94:79:39:1f:65:5a:f1:e7:40:
         4c:85:bc:82:56:85:09:c7:79:1a:fd:94:ad:38:5e:f7:d8:c5:
         08:c3:68:58:3d:fb:ed:4f:f8:9d:4f:39:95:d1:51:cd:19:b2:
         68:e9:90:c3:6b:cb:49:50:ee:30:1c:d7:43:ee:cf:69:77:a3:
         32:58:06:55:c9:55:b9:d1:6a:d9:f7:2d:0b:0e:f9:a8:35:bf:
         62:42:1e:29:b9:d5:a0:d3:8f:50:a9:8a:e5:c1:b2:20:34:dd:
         19:f5:95:65:73:aa:82:e5:02:45:f9:8e:df:78:15:ce:b3:44:
         4c:8e:c3:15:6a:70:39:2a:e1:f5:e8:71:05:10:5e:82:e3:b5:
         be:bb:92:81:a8:19:83:6b:57:8a:2e:be:4f:d0:b6:5e:3a:9b:
         dd:d4:6d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----