Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040.cer
File:                     a0b0a14e-6768-4444-a710-ff902d319040.cer (raw, json)
Hash identifier:          Z+SxQp1oJ1Nu/s08MItEoIiHPdqF+cn0dMUvOeAIlFg=
Subject key identifier:   88:1F:DD:F5:D1:6A:C8:B3:52:3B:D5:27:D9:6C:6F:8E:7F:4C:54:1A
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584402E192EABEA289DA5FC5EB20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/a0b0a14e-6768-4444-a710-ff902d319040.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 26 Nov 2023 01:45:15 +0000
Certificate not after:    Sat 28 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 26828
                          IP: 208.84.160.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:02:e1:92:ea:be:a2:89:da:5f:c5:eb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Nov 26 01:45:15 2023 GMT
            Not After : Feb 28 01:45:15 2026 GMT
        Subject: CN=a0b0a14e-6768-4444-a710-ff902d319040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:c8:0e:74:94:73:1f:c4:d4:cb:db:b4:c1:
                    3c:95:fc:96:43:ad:81:53:9e:a8:41:82:b1:55:07:
                    50:76:c8:9d:c8:0f:3f:6a:94:68:dc:cb:03:10:ce:
                    a3:2f:e9:d8:7a:4c:7f:86:21:94:3e:2a:03:45:f1:
                    84:b3:b5:16:62:41:8e:75:1a:27:40:8e:70:91:35:
                    65:0b:3e:03:2b:a6:55:1c:c0:b9:e4:2c:b9:59:ac:
                    76:90:d2:20:01:24:61:62:34:0a:8f:e9:51:d8:b3:
                    d8:94:83:cf:00:da:18:0d:f6:83:27:9a:0c:c4:0d:
                    45:f4:93:6e:d7:a6:b5:ec:dc:93:68:87:04:39:e9:
                    10:6f:c4:2c:16:eb:e9:50:5e:d6:9f:21:58:f5:bc:
                    c6:a4:a1:09:ca:84:8d:11:47:b5:bd:d1:b5:8c:52:
                    50:c6:38:f7:99:6b:e1:b8:a2:72:70:de:94:fc:e3:
                    8a:4e:75:15:cd:ae:bf:f6:8b:ee:5c:3b:9c:f1:ed:
                    23:41:a4:32:a0:b8:cf:db:25:16:74:93:0f:4b:ab:
                    a2:18:34:3a:29:27:4f:6d:3c:5d:61:cc:4c:bf:7e:
                    9e:e2:de:d1:20:bc:85:c5:47:12:b5:7c:ab:fd:2a:
                    9d:d5:e4:1a:52:9e:08:cb:69:24:b2:00:4d:3e:c8:
                    aa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1F:DD:F5:D1:6A:C8:B3:52:3B:D5:27:D9:6C:6F:8E:7F:4C:54:1A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/a0b0a14e-6768-4444-a710-ff902d319040.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.84.160.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26828

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:0a:a1:92:78:e2:36:5b:06:49:a0:0c:21:03:ce:0c:92:73:
         9d:07:c3:66:ec:a2:96:50:64:b0:b8:f0:8c:fd:34:af:93:50:
         8b:39:18:a6:a1:3d:71:33:3f:d1:e8:ee:4b:1d:08:50:66:76:
         b7:0d:bf:ff:f9:7d:7c:4d:1b:2d:c4:dc:7e:ef:22:e9:cb:7c:
         74:69:f0:77:95:da:05:1a:09:c5:5a:f5:2a:27:cd:18:5f:1e:
         5f:77:d1:12:ae:8d:97:e8:08:1d:3d:f2:b3:1b:72:f6:76:af:
         42:01:e0:eb:63:4d:e5:5e:11:23:97:66:57:e5:dc:dd:bb:99:
         4d:fc:2a:3c:11:0b:94:f4:3c:57:e5:9a:e7:bb:ca:cb:21:aa:
         92:42:29:a8:d9:11:3d:ef:8d:af:8b:b1:15:c7:a8:e2:03:5f:
         f3:4e:8c:b2:51:dc:e0:0a:54:f1:ed:67:1d:e4:14:46:a9:77:
         c4:a4:6a:46:53:41:46:75:93:3a:30:6a:b6:19:49:7e:55:00:
         d9:37:f5:21:ac:20:61:ef:d5:c1:6f:b4:1a:03:d0:b6:fb:03:
         c2:da:88:cf:9f:c2:de:d2:16:d5:d1:26:b3:6c:a8:86:04:db:
         6c:e8:b0:59:ec:2c:4b:1e:1f:00:16:1d:6a:9a:47:b0:5e:30:
         a2:74:b2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----