Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
File:                     c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer (raw, json)
Hash identifier:          nn75s2SFihNT8X0+zwxJT8anqDCGk1AfQD4TUuSRN+g=
Subject key identifier:   39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584591FBA568EC4A1AD8791C87C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 Apr 2024 00:45:19 +0000
Certificate not after:    Tue 21 Jul 2026 00:45:19 +0000
Subordinate resources:    AS: 15348
                          AS: 32491
                          AS: 32636
                          AS: 40830
                          AS: 62831
                          AS: 63363
                          AS: 393818
                          IP: 64.96.0.0/17
                          IP: 64.98.0.0/15
                          IP: 216.40.32.0/20
                          IP: 2604:4000::/32
                          IP: 2620:57:4000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:91:fb:a5:68:ec:4a:1a:d8:79:1c:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Apr 17 00:45:19 2024 GMT
            Not After : Jul 21 00:45:19 2026 GMT
        Subject: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:35:8c:31:35:48:81:e3:65:3a:e7:3e:98:
                    42:24:17:f6:7c:c8:63:f8:6c:d0:48:1f:c5:b7:2a:
                    4e:6c:d5:0a:31:67:be:3d:90:b4:6d:ae:43:67:68:
                    85:c3:18:07:e3:74:ba:ef:ca:e4:ff:e3:9a:ae:59:
                    6a:58:8b:8b:41:a6:15:2c:e3:f3:84:3d:cf:d8:19:
                    70:12:09:0c:8a:cb:6b:47:1a:af:71:d0:dc:e1:b7:
                    83:dc:33:a6:fc:19:dd:8d:02:c7:0b:4a:5a:2d:8c:
                    bf:63:14:54:c2:99:1c:af:20:42:de:fb:8c:0e:7e:
                    68:a5:74:0e:c9:ee:4f:67:78:44:f5:dd:68:9d:ae:
                    46:fd:3d:76:3c:6e:06:87:d5:93:bd:2e:43:aa:15:
                    a1:5e:7d:08:9a:d3:d8:6a:54:0c:79:f3:e8:6c:f2:
                    bd:3d:b4:63:ac:34:04:a4:04:c1:4c:d5:6c:a6:f8:
                    a3:15:01:32:a5:0c:9d:b4:52:26:30:58:2e:05:4b:
                    d9:3f:3e:41:88:ee:bd:39:38:5e:08:19:a2:11:a4:
                    d0:78:87:6c:ca:49:b8:0a:c0:34:fd:bc:28:d7:63:
                    6b:0a:42:68:ec:9c:66:fa:32:87:16:92:a5:d0:e3:
                    2b:15:a2:25:17:be:09:3e:96:a7:13:ee:a9:43:5f:
                    ce:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.96.0.0/17
                  64.98.0.0/15
                  216.40.32.0/20
                IPv6:
                  2604:4000::/32
                  2620:57:4000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15348
                  32491
                  32636
                  40830
                  62831
                  63363
                  393818

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:72:7f:86:6e:c6:7e:1d:ee:2a:e1:8e:76:aa:56:fe:b1:e2:
         bc:6a:eb:fd:d2:b0:ae:1a:c5:e3:7c:9f:20:d6:23:74:65:43:
         6c:bd:de:5c:2c:86:50:a4:1a:80:9c:6b:90:c6:60:3f:08:18:
         96:97:cd:44:78:d5:cd:13:da:b1:13:dc:7e:51:70:22:52:2e:
         43:4c:e3:37:6b:c7:d3:36:32:5b:fc:92:cf:bc:41:cf:33:1c:
         69:1f:72:d5:fd:c8:fd:af:dd:b4:50:63:98:c0:d1:ec:75:e7:
         0d:ca:d9:a6:4d:d2:df:7a:da:d0:24:8f:6a:6c:db:c6:03:29:
         23:03:17:f1:ca:87:81:0f:8d:de:f0:bc:f6:28:56:92:ff:9c:
         e5:69:20:63:44:e0:ed:17:5e:4e:c1:ce:15:c0:7d:d3:eb:96:
         4d:f9:0d:97:79:3b:d7:d1:9a:66:7e:53:09:95:53:d4:19:66:
         30:76:e5:2f:3c:86:87:44:a4:9f:01:90:7d:0c:93:27:68:c4:
         a4:92:4c:33:da:4b:04:c0:b1:98:24:ce:3b:11:a6:c1:9b:ad:
         98:6c:63:25:71:78:4e:b4:19:c2:ef:81:3d:e8:f4:70:ab:ba:
         72:43:dd:1e:77:e0:8f:34:0d:40:5e:00:99:1b:ce:d8:48:5f:
         6d:42:25:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----