Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6.cer
File:                     9a25bd38-26db-48f8-81c1-1d6ef02c8dd6.cer (raw, json)
Hash identifier:          MEOVeyxyJC7JBIrr23esvW7NPSsjCQzUe+uiIJJvMRc=
Subject key identifier:   20:70:2D:4F:7C:F7:0C:0D:0A:5C:6A:44:8D:C9:94:82:12:8E:BE:F9
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285845D7C6BFFBCFADCCBCA482E280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 12 May 2024 00:45:19 +0000
Certificate not after:    Sat 15 Aug 2026 00:45:19 +0000
Subordinate resources:    AS: 55216
                          IP: 162.210.216.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d7:c6:bf:fb:cf:ad:cc:bc:a4:82:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 12 00:45:19 2024 GMT
            Not After : Aug 15 00:45:19 2026 GMT
        Subject: CN=9a25bd38-26db-48f8-81c1-1d6ef02c8dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:80:48:2c:43:8e:eb:d9:11:6e:18:0d:95:
                    08:ab:4c:e9:2a:45:04:b4:e7:d4:13:f6:2b:41:e2:
                    bd:e5:b6:a1:61:44:bb:91:52:aa:b3:99:1e:43:1d:
                    9d:3e:fb:91:01:56:ed:c9:90:32:5c:75:43:dc:f4:
                    a9:f9:95:6b:c6:a6:5a:f7:73:d4:0a:e6:55:76:bf:
                    4d:71:16:4f:74:cd:49:ec:1c:15:28:c1:6c:3b:72:
                    f6:dd:ce:bd:20:7f:0e:be:e2:5f:1f:b4:ea:f5:8f:
                    b4:15:af:2e:2a:7a:9c:9f:88:2f:15:c6:3e:40:19:
                    07:86:50:73:00:58:99:da:14:c5:14:ce:b9:69:a0:
                    0c:3c:d7:a2:d9:ef:89:87:6e:5d:2a:64:6d:d3:ef:
                    98:ee:4d:5d:f0:b4:e7:d3:34:3d:10:64:c5:e1:5c:
                    a7:65:b0:5a:4a:b5:47:94:db:bf:3b:dd:81:5e:d4:
                    41:f5:c9:d5:3d:93:5c:06:4c:d2:83:b6:30:1e:b1:
                    8d:84:b2:a1:28:ac:be:64:ee:50:7c:79:92:7b:4f:
                    16:b2:53:4f:6e:e9:8d:77:97:21:07:da:90:a8:36:
                    7c:67:61:7a:64:7c:66:24:69:25:ee:28:ef:75:58:
                    81:02:eb:00:85:c6:6c:b2:96:fa:4d:55:83:c0:a4:
                    e0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:70:2D:4F:7C:F7:0C:0D:0A:5C:6A:44:8D:C9:94:82:12:8E:BE:F9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.216.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55216

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:df:fc:89:7c:dc:5b:2d:85:80:4f:2e:0d:a0:2b:8b:5b:9d:
         27:fb:bd:13:3a:66:89:17:48:aa:9a:36:b8:97:6c:3e:d1:6e:
         0a:d7:82:31:80:15:e9:f6:5e:87:a1:56:4a:86:dd:8e:95:66:
         f2:1d:9a:db:d6:db:b7:99:99:1d:e7:16:28:8b:c2:94:e3:6f:
         80:76:fe:13:f7:27:7e:25:0a:31:75:a3:21:93:09:73:12:1a:
         c9:01:c4:36:7c:86:55:96:fc:17:7e:0b:68:4f:90:c2:c4:2e:
         2e:ef:5b:90:9f:0c:df:39:2e:51:0a:a5:3b:06:62:6c:62:37:
         15:a3:91:ef:14:1f:6f:f4:42:2b:60:fa:bc:45:72:a3:b5:ba:
         b7:7c:d4:73:fc:79:0e:7d:91:ca:7f:d4:2a:68:b7:ab:56:5e:
         3b:c8:7b:da:b8:32:5a:97:94:4c:44:fd:e0:a1:d7:b0:58:89:
         46:55:08:c5:60:a2:d2:97:63:17:f0:61:ff:61:aa:d3:45:19:
         0d:95:9a:66:a1:e6:ba:f1:1a:40:28:20:30:2e:dd:6c:df:7a:
         04:f8:ba:b7:76:fb:80:dc:07:82:51:70:96:cd:16:b2:d4:d6:
         00:76:33:34:e4:03:37:f9:5d:72:9c:2f:71:f1:fb:fe:98:e0:
         f1:18:12:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----