Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/98d84ff8-a32d-40d7-840f-429ac8bcf223.cer
File:                     98d84ff8-a32d-40d7-840f-429ac8bcf223.cer (raw, json)
Hash identifier:          Oa0QLcuai3fU9Yl549DAW3Qd4zVVgBKjWO2QrHUSDW4=
Subject key identifier:   45:D8:0D:DF:26:8E:4F:EB:1A:DB:7E:84:F4:3C:54:4E:7D:12:D5:97
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584826B816330EAD43C95D2A9080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/98d84ff8-a32d-40d7-840f-429ac8bcf223/98d84ff8-a32d-40d7-840f-429ac8bcf223.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/98d84ff8-a32d-40d7-840f-429ac8bcf223/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 09 Dec 2024 16:58:31 +0000
Certificate not after:    Sun 14 Mar 2027 15:58:31 +0000
Subordinate resources:    AS: 6602
                          IP: 199.233.15.0/24
                          IP: 2620:2d:2000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b8:16:33:0e:ad:43:c9:5d:2a:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Dec  9 16:58:31 2024 GMT
            Not After : Mar 14 15:58:31 2027 GMT
        Subject: CN=98d84ff8-a32d-40d7-840f-429ac8bcf223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:26:13:cb:24:63:e9:bd:60:e4:cb:19:59:e7:
                    2e:31:f9:5c:c3:cb:30:7b:99:c8:1b:8d:9d:70:d4:
                    6e:3d:c7:96:48:d0:3f:31:bd:ef:c6:bb:ee:07:b4:
                    2a:58:c9:9b:1f:c7:fd:ed:9b:e9:2d:36:e8:cf:9e:
                    4e:c1:0a:9c:82:6d:40:43:48:9e:70:44:b4:f8:77:
                    b9:6c:d0:56:90:b8:8f:75:2d:4f:30:f5:86:21:bd:
                    20:6e:5d:fb:d6:4a:dd:db:ac:25:97:c7:d7:0a:65:
                    24:4f:31:b2:32:a2:5a:b3:22:cd:b5:27:dc:d1:37:
                    73:0d:ad:18:c6:a5:38:ce:7b:ae:d8:7d:52:ea:93:
                    2a:58:83:c7:88:a6:be:ba:0d:78:34:29:6b:83:ca:
                    a7:2c:7f:b8:c5:f5:8e:ad:7a:ef:d5:a2:60:05:a4:
                    22:97:c6:5a:b5:b8:b2:a1:c7:d5:40:f4:46:50:b8:
                    aa:9e:95:3e:1d:bb:ec:7d:03:81:c1:34:16:64:e6:
                    ad:a9:be:b8:d7:4f:7a:bf:61:2d:e7:ae:ad:69:65:
                    14:1b:07:8d:8b:46:f1:bc:2e:b4:9f:7b:3c:8c:ad:
                    ca:7b:16:6e:eb:85:24:6f:60:05:61:1f:9a:bc:84:
                    fb:00:95:81:97:ab:b9:01:25:7d:d2:79:69:28:6f:
                    18:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D8:0D:DF:26:8E:4F:EB:1A:DB:7E:84:F4:3C:54:4E:7D:12:D5:97
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/98d84ff8-a32d-40d7-840f-429ac8bcf223/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/98d84ff8-a32d-40d7-840f-429ac8bcf223/98d84ff8-a32d-40d7-840f-429ac8bcf223.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.233.15.0/24
                IPv6:
                  2620:2d:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6602

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:cf:9f:d3:53:e1:63:6e:4b:a3:1a:75:1d:b4:54:8b:28:5d:
         cc:ed:b2:3f:5b:56:aa:6b:0e:fb:f7:85:b4:56:05:eb:3d:fd:
         07:a8:e5:4c:ae:6a:8f:85:41:d9:cc:81:a5:a0:f4:4e:5e:8f:
         98:02:3f:66:d2:d8:77:06:1e:dd:ba:c9:17:bb:cf:1d:45:8f:
         47:50:1b:33:7f:bf:cf:cd:14:e6:71:3b:d8:d1:a0:cc:c4:ca:
         bd:cd:4f:ba:b3:d0:a5:f2:14:19:ec:f9:b6:05:67:61:03:57:
         5a:55:d9:ab:eb:a1:58:30:74:f2:77:8e:84:c1:88:d2:a1:27:
         b0:cd:78:a3:20:c2:d7:fa:a4:1a:66:25:02:3a:3f:ed:c3:b0:
         81:29:20:ec:89:65:ba:8b:b8:0c:a8:61:c2:46:c9:09:f5:77:
         b1:44:3d:b0:2e:3b:3b:b4:8e:c2:ca:67:b5:dc:b1:3f:5d:92:
         d7:64:8d:d3:09:3b:62:ce:f4:22:8f:e3:d4:e7:4e:ae:b3:92:
         6b:8a:a9:9d:dc:d6:53:04:16:55:9d:f8:9d:b2:60:1a:f2:36:
         fb:ef:d2:f8:cd:ce:0c:2a:ae:0d:31:03:09:21:18:dc:fe:fd:
         3e:d7:7e:1c:a8:d0:08:fb:42:e1:b4:8f:91:a3:72:22:44:6d:
         b8:24:a5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----