Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e.cer
File:                     a865eade-baea-4362-8186-981fcc003a4e.cer (raw, json)
Hash identifier:          ynErO+u6LoLtXNTQpg/yiMvHHla0X8kLvuxExZDMz/Y=
Subject key identifier:   A0:DE:6B:5F:0C:CC:2E:CF:49:A6:3B:F0:83:1D:CB:9E:BB:17:4E:58
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858458F30F95249D77EACFFF2DC80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e/a865eade-baea-4362-8186-981fcc003a4e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 16 Apr 2024 00:45:20 +0000
Certificate not after:    Mon 20 Jul 2026 00:45:20 +0000
Subordinate resources:    IP: 76.76.0.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:30:f9:52:49:d7:7e:ac:ff:f2:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Apr 16 00:45:20 2024 GMT
            Not After : Jul 20 00:45:20 2026 GMT
        Subject: CN=a865eade-baea-4362-8186-981fcc003a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f5:c9:f8:18:c4:d0:93:74:5b:df:af:e0:60:
                    be:6a:e9:41:be:62:7c:d3:e1:54:7e:e2:34:6b:3a:
                    ac:cf:08:3b:9c:10:c8:5a:1e:fd:62:a0:52:cd:bf:
                    97:2a:6f:34:d8:03:70:32:c3:53:ba:1d:0c:6a:92:
                    87:12:67:98:e7:e6:64:6c:55:95:da:77:8f:76:9a:
                    3f:b2:b7:82:b0:1a:7a:d6:df:47:5b:dc:16:90:fd:
                    c8:be:17:25:f6:9e:52:6d:34:80:b5:a5:5d:10:c8:
                    00:6a:6f:9d:83:61:75:f0:86:ad:47:80:69:00:2d:
                    6b:69:5c:d4:50:3e:43:dc:2a:c2:d7:c9:86:f9:1d:
                    fa:81:68:65:1f:d9:cc:9a:1d:d4:8a:d8:51:79:b2:
                    46:b8:78:a7:b9:d6:43:7b:71:8c:48:dd:1d:8f:d6:
                    5d:8b:f1:2e:4c:d4:f3:26:96:07:e9:11:2b:75:df:
                    60:94:df:02:06:82:c9:bb:5b:b4:03:50:80:0e:46:
                    62:e8:af:ae:ca:b9:68:53:13:d7:99:64:4e:12:94:
                    ab:c4:6d:cd:d8:7d:6f:5f:ab:31:33:15:7b:b6:b4:
                    79:b6:f0:42:3b:b9:cf:92:ef:52:de:d2:bc:9e:b4:
                    8f:8c:b3:32:5c:39:a3:f5:a8:58:c7:b7:47:d6:ae:
                    0c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DE:6B:5F:0C:CC:2E:CF:49:A6:3B:F0:83:1D:CB:9E:BB:17:4E:58
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e/a865eade-baea-4362-8186-981fcc003a4e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.76.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:5f:05:9e:dc:ce:1b:18:f1:4d:b3:93:85:9a:37:e0:63:90:
         b1:6e:35:6e:30:a6:b1:cf:2a:ea:a6:0c:36:41:e6:6f:c6:bf:
         e5:2f:cd:76:75:aa:97:e6:52:f7:4d:c9:20:e5:bf:f2:43:1f:
         b5:0b:09:95:3d:04:ec:b5:1f:82:84:be:1d:69:95:bb:20:b2:
         71:cb:e8:52:c5:9b:10:b7:e3:fb:85:8d:df:76:1d:44:89:30:
         dc:0e:0d:3d:9c:19:b9:f1:b8:04:7c:fd:41:26:3f:7a:fe:83:
         4f:a5:35:e7:c0:c5:23:a0:51:8f:5d:de:3e:14:a9:af:a3:32:
         ce:67:27:0c:da:c5:55:73:08:ce:c0:53:0b:2d:cb:e6:ce:62:
         3b:be:94:92:44:ed:de:16:2a:60:ed:19:e6:4a:f9:ff:7a:3e:
         a2:68:68:2c:ea:05:11:ec:72:76:c4:6d:1e:3f:59:94:9e:e4:
         bc:f0:6b:17:55:f7:08:bb:87:10:49:03:f1:ce:bb:f5:4a:00:
         f8:76:dc:f6:95:93:5a:d4:08:19:f1:e0:f4:fe:7a:f9:61:01:
         60:73:60:12:10:69:f2:79:ac:3e:72:0c:78:53:6e:86:28:43:
         97:e4:d8:18:c4:61:cd:c5:88:7f:20:6f:a0:fa:23:21:fe:bf:
         b4:e9:c5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----