Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a87d134e-31e1-4514-8d3d-d8738244dc14.cer
File:                     a87d134e-31e1-4514-8d3d-d8738244dc14.cer (raw, json)
Hash identifier:          3HgF15PdxcEQZ8Xols/v+SO3aLpqqXO9xutiazYcUtA=
Subject key identifier:   AC:4C:24:4A:CE:12:FB:A3:60:58:6F:BD:C0:C9:55:A5:FC:E2:B9:10
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858448E77D0F4CDF0C0705331E000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a87d134e-31e1-4514-8d3d-d8738244dc14/a87d134e-31e1-4514-8d3d-d8738244dc14.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a87d134e-31e1-4514-8d3d-d8738244dc14/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 Jan 2024 01:45:20 +0000
Certificate not after:    Sun 19 Apr 2026 00:45:20 +0000
Subordinate resources:    IP: 2620:9c:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:8e:77:d0:f4:cd:f0:c0:70:53:31:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jan 15 01:45:20 2024 GMT
            Not After : Apr 19 00:45:20 2026 GMT
        Subject: CN=a87d134e-31e1-4514-8d3d-d8738244dc14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d5:fa:6f:17:d9:33:1b:c8:75:31:c2:dd:6f:
                    25:fe:d7:00:1a:a1:0f:5b:1c:53:ec:19:d9:7f:1d:
                    67:39:06:31:9e:0e:a3:cf:ab:65:bb:7f:ce:f1:61:
                    3b:d0:d0:dc:8b:ce:d4:71:0c:ca:35:1e:c3:67:36:
                    98:e3:53:c7:4f:89:b2:86:a4:28:e1:3f:27:2d:6d:
                    dc:f7:28:8c:df:05:85:23:92:2e:cb:9b:c4:69:f4:
                    a1:71:b7:83:62:a8:45:5a:ce:80:0d:33:54:df:09:
                    8d:4c:3c:90:c3:8d:24:08:26:18:d5:e6:c2:7a:49:
                    fc:d4:19:14:0b:2a:28:a4:a8:47:be:e5:4f:9d:f1:
                    b1:89:1a:96:b7:85:54:9c:53:1e:b4:09:a1:37:cb:
                    2c:60:95:70:75:21:26:5a:03:59:14:ce:6e:ef:31:
                    43:10:29:e3:1e:a7:97:c5:01:78:83:65:8f:c0:51:
                    53:c0:06:3b:f2:e6:a9:80:c2:4f:3f:2e:d6:31:c2:
                    85:b4:10:b1:5a:e0:41:3f:a8:b6:ab:3f:02:9c:b8:
                    27:d2:c9:ce:51:a3:68:21:04:bb:28:19:82:3d:59:
                    0d:c1:16:8a:7f:89:b4:45:93:74:16:9d:99:02:67:
                    e0:7a:eb:9b:b1:30:6e:72:7d:54:7b:b0:9b:19:b0:
                    e9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4C:24:4A:CE:12:FB:A3:60:58:6F:BD:C0:C9:55:A5:FC:E2:B9:10
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a87d134e-31e1-4514-8d3d-d8738244dc14/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a87d134e-31e1-4514-8d3d-d8738244dc14/a87d134e-31e1-4514-8d3d-d8738244dc14.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9c:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:de:da:30:d9:c3:01:b0:4a:41:00:cc:d0:ba:16:19:fa:dd:
         e4:da:fc:db:2f:fd:27:e8:10:40:9f:d7:6f:4f:77:a4:c8:1a:
         2d:ab:9b:8a:35:1f:7b:23:75:bb:f1:cd:65:fa:36:a6:1e:87:
         28:10:d1:75:6b:03:03:ef:47:67:7c:ca:81:f8:36:63:ba:1a:
         a4:bb:9d:8e:2e:5c:42:be:12:88:f9:be:df:06:48:56:11:8a:
         e2:fd:18:da:63:e3:6c:b0:44:ba:78:4f:a5:9d:a7:71:9d:25:
         75:e7:f6:9c:15:fe:08:6c:8c:54:e4:b7:8d:b1:38:56:17:72:
         55:5b:66:5a:de:6d:e3:64:9b:5c:a2:70:a6:c3:ef:09:a5:56:
         31:40:09:ee:a6:67:11:29:0f:07:5b:97:f5:3d:17:d8:59:58:
         32:10:b9:ae:4f:7a:72:1a:09:f7:3e:ea:0d:28:7f:d9:73:a9:
         1e:f4:c1:6d:73:64:61:73:30:55:a0:7c:51:dd:5c:28:e3:f4:
         c7:68:26:de:ab:81:90:b9:5a:54:e9:20:76:1d:cf:cf:a8:32:
         ec:d0:64:34:1e:e2:96:62:20:ce:e8:15:2a:46:df:a8:19:dd:
         9a:d5:dd:e7:eb:40:df:53:f4:f6:34:f1:01:cc:85:96:af:82:
         c2:ce:14:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----