Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
File:                     c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer (raw, json)
Hash identifier:          nkPfnD1irv/nogZtPBq8Z8HnqM9vSDAU82N+bj2vWlw=
Subject key identifier:   35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858473D1E5F9AAFB90C6B2A5D8710
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 17 Sep 2024 00:45:27 +0000
Certificate not after:    Mon 21 Dec 2026 01:45:27 +0000
Subordinate resources:    AS: 401048
                          IP: 162.252.168.0/22
                          IP: 2606:fe80::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:1e:5f:9a:af:b9:0c:6b:2a:5d:87:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Sep 17 00:45:27 2024 GMT
            Not After : Dec 21 01:45:27 2026 GMT
        Subject: CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3e:07:a4:ca:fd:c8:1b:8e:61:5b:48:a9:7a:
                    91:c0:f7:4d:ed:c3:ec:2a:b4:c9:d1:83:42:ad:38:
                    7c:d2:8a:38:06:0f:68:7d:49:c3:6f:4a:81:de:1d:
                    7d:63:90:4f:a1:2d:86:3f:0e:9d:86:09:68:0b:42:
                    0c:41:69:01:9f:39:15:ca:69:7d:35:44:6a:4d:1b:
                    d5:82:f1:fc:9a:23:d1:da:2f:43:f0:03:13:81:18:
                    1d:08:61:bd:e6:5c:bc:c2:f9:4f:a6:67:a8:85:77:
                    17:7e:b0:92:98:3c:ad:1b:d0:24:33:93:06:ef:66:
                    99:5f:70:b4:20:c8:dc:f5:39:25:21:22:12:b0:b8:
                    12:22:74:6f:82:fc:e1:dc:9f:54:80:f7:8b:8f:e5:
                    60:a2:8e:bc:0d:a5:79:dd:57:6d:ac:d0:46:46:b5:
                    03:45:31:22:44:38:34:36:ea:fe:71:57:e7:17:10:
                    9d:ca:4b:49:f3:74:60:d6:aa:22:29:79:21:e2:fc:
                    aa:8f:c2:02:f1:d2:fc:67:06:92:fb:70:44:16:5c:
                    84:af:0d:99:d0:95:cf:58:40:9e:ef:d6:77:3e:d4:
                    52:d7:10:db:88:53:ea:31:0e:c1:01:2e:5b:16:0e:
                    2e:e5:64:48:af:9c:d6:db:ae:d0:5f:af:8c:e8:fb:
                    03:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.168.0/22
                IPv6:
                  2606:fe80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401048

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:73:2e:33:8c:10:e1:30:4e:79:5a:a5:5c:e6:95:37:48:cd:
         9c:7f:69:05:59:cd:c1:e3:1b:3e:47:39:6f:1a:6d:b8:cf:1e:
         48:a2:69:08:af:d0:7d:47:df:7a:cc:c2:08:60:8a:1b:00:f5:
         24:13:db:55:2c:fc:fd:54:ea:db:81:dd:9c:6b:27:71:93:d1:
         68:b7:a1:06:ac:83:dd:d1:a5:65:d0:49:e8:04:a6:53:68:dd:
         d0:e1:28:17:95:31:49:ea:aa:a4:a7:b9:1d:7d:dd:5d:cf:a7:
         21:cd:4a:1e:b5:08:2b:b5:0e:87:c2:40:14:20:81:05:00:2d:
         f4:0f:4f:39:e2:83:67:8c:9c:c5:68:49:0c:e1:3d:75:9e:05:
         eb:83:df:b8:0e:d7:3b:d2:79:6d:bf:12:5c:f0:2f:cc:94:65:
         d8:21:41:a5:f4:f7:70:5a:77:52:8d:ab:55:ef:6d:ef:df:68:
         87:2d:07:e4:78:13:dc:2d:63:cd:92:90:75:4a:d6:5d:eb:ac:
         72:7a:bc:ae:7d:d7:86:d2:12:82:ec:66:9e:02:e4:49:d8:08:
         e3:63:f1:b8:c6:c1:02:59:b7:7b:21:cf:08:11:6c:a4:eb:f0:
         f1:4a:ef:bd:b3:cb:3d:60:06:69:eb:ab:92:92:23:05:4e:09:
         37:17:56:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----