Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
File:                     ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer (raw, json)
Hash identifier:          5z3Xen2jjM22eLLxJZbNTqdf2X1dBWaBx6qFqR1fmEs=
Subject key identifier:   58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285845E026D0017FE8109A419E1F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 15 May 2024 00:45:20 +0000
Certificate not after:    Tue 18 Aug 2026 00:45:20 +0000
Subordinate resources:    AS: 398797
                          IP: 199.255.148.0/22
                          IP: 2602:fd1e::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e0:26:d0:01:7f:e8:10:9a:41:9e:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 00:45:20 2024 GMT
            Not After : Aug 18 00:45:20 2026 GMT
        Subject: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:e6:b7:33:0c:70:b1:d6:4c:fe:76:37:14:
                    71:8c:d5:5b:88:43:db:44:7e:b8:33:d4:42:da:f9:
                    88:be:9a:7f:6c:2d:f6:2f:28:12:06:40:5d:d2:37:
                    cf:02:7c:79:7e:9f:de:c7:b5:ec:34:f8:ae:2d:ef:
                    ec:40:d8:ca:24:d2:97:d4:93:2b:0e:21:e7:ff:84:
                    48:cb:73:b2:99:8f:fe:63:ba:10:56:fa:70:54:75:
                    08:cc:76:e0:60:fa:78:4c:d0:12:a7:03:fe:08:ce:
                    ea:56:14:72:45:85:35:59:4a:36:b3:67:5c:72:76:
                    0e:c1:85:f6:88:ec:81:61:2e:cd:dd:f2:d6:e0:c0:
                    51:72:97:91:1b:39:7e:f0:bc:e9:6f:2a:7b:70:ad:
                    f3:5e:38:51:13:b7:be:0e:2c:92:a8:6f:bb:dc:7d:
                    44:45:e6:f7:60:79:84:ca:4e:d7:a2:db:de:7f:0f:
                    67:49:7c:39:77:58:92:bc:8d:90:80:24:d9:19:be:
                    3e:5c:83:4f:bd:16:73:d9:cb:d1:8a:d1:09:e1:5e:
                    1a:84:25:f4:5e:65:1f:60:b4:d7:0b:a8:7f:d1:03:
                    d6:80:96:a8:97:d9:b4:d8:4f:ba:e0:7c:86:27:8d:
                    59:96:30:1d:04:0e:27:53:91:05:65:2e:c9:84:84:
                    a8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.148.0/22
                IPv6:
                  2602:fd1e::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398797

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:7a:e5:b7:6e:11:06:aa:b5:10:17:5a:1d:88:23:c5:8b:18:
         a6:50:4d:f8:90:50:d6:42:6e:ac:65:18:ef:1f:65:20:f6:48:
         69:31:eb:ea:2a:f4:26:df:c6:23:a0:77:06:f3:ed:af:7f:80:
         4f:15:59:7a:7e:cf:23:fe:47:9e:af:2b:0f:94:0d:40:03:09:
         b5:12:1e:fa:d3:36:49:4f:20:6c:e1:c5:42:6f:88:f9:77:81:
         bd:ad:28:54:51:73:27:0c:1b:b2:16:62:96:cc:d8:a7:e6:25:
         c5:0a:b1:64:18:7a:3c:20:26:72:9c:a5:89:6f:f8:00:9c:26:
         8b:e3:b0:44:40:a0:c7:c5:33:0f:29:ae:59:89:91:09:ad:20:
         0a:d7:0a:9f:98:55:40:80:b4:cd:4f:94:cf:52:5c:50:4e:53:
         7f:cf:23:02:bf:5f:dd:e3:9d:07:7a:d5:a4:d7:25:76:75:82:
         a3:d2:d8:35:fe:f6:78:71:8a:b8:dd:f5:17:2f:6c:02:8d:1f:
         87:b9:35:4b:02:b7:31:86:81:a7:e7:35:8d:69:04:d3:65:28:
         da:9f:08:a0:36:e7:d0:d8:70:18:5c:09:cd:e6:80:f6:74:80:
         d2:ce:13:14:45:df:5d:80:80:db:93:61:72:43:4c:ef:65:fa:
         fb:4d:ca:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----