Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d615cc7f-fcbd-4c3f-bdc5-3dd8bce9885b.cer
File:                     d615cc7f-fcbd-4c3f-bdc5-3dd8bce9885b.cer (raw, json)
Hash identifier:          kNnSirQh1Ekx5ua6adPG8UU5AwvJ45oyGzdp57lN+ls=
Subject key identifier:   9E:6B:B0:5C:40:DF:80:70:AB:AE:7B:89:AB:4F:F4:E7:A2:74:E7:DE
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584393186E50024AE35A95C6D980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d615cc7f-fcbd-4c3f-bdc5-3dd8bce9885b/d615cc7f-fcbd-4c3f-bdc5-3dd8bce9885b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d615cc7f-fcbd-4c3f-bdc5-3dd8bce9885b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 17 Oct 2023 00:45:15 +0000
Certificate not after:    Mon 19 Jan 2026 01:45:15 +0000
Subordinate resources:    AS: 395587
                          IP: 192.92.140.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:93:18:6e:50:02:4a:e3:5a:95:c6:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct 17 00:45:15 2023 GMT
            Not After : Jan 19 01:45:15 2026 GMT
        Subject: CN=d615cc7f-fcbd-4c3f-bdc5-3dd8bce9885b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:bb:c6:8f:88:88:59:0e:90:aa:0d:8b:bc:
                    11:ec:7e:be:ec:bf:43:c1:d9:87:f5:80:28:0a:92:
                    5b:71:10:8a:48:f6:24:14:a9:e2:1e:31:b6:fe:30:
                    ec:b2:05:77:79:7f:8e:9d:f7:9a:60:7a:f6:b4:d6:
                    d4:38:71:2e:f1:75:59:8e:6d:f6:a1:92:48:3a:1d:
                    76:96:de:6a:bc:61:56:67:5a:ed:d8:6f:94:c2:71:
                    15:fa:69:d3:a0:53:0c:8d:ca:0c:e6:c8:db:62:b2:
                    47:70:91:26:c2:dc:1e:df:4b:8a:d1:52:d7:da:5c:
                    6f:34:50:8f:8e:1a:55:10:61:56:af:75:3f:18:eb:
                    41:5e:5d:f9:19:54:1f:5e:e2:3a:80:73:7e:5f:74:
                    3e:ea:5a:f9:da:b5:c4:db:d1:0b:73:08:2c:78:06:
                    00:ba:4f:cd:3d:60:d8:e0:b2:44:53:82:38:e5:9b:
                    22:d8:cf:0f:51:84:c7:1e:87:8a:ba:04:09:d7:71:
                    22:d7:49:1c:3e:48:09:b7:b3:4f:e6:30:70:fb:85:
                    61:db:a0:25:b9:ae:36:7d:de:bb:a1:f4:8e:2b:f1:
                    d6:e0:e5:50:8f:3a:0e:b9:c3:12:a9:89:a5:72:97:
                    af:5a:5c:e5:c2:fb:d9:fb:26:95:c2:ce:3b:2f:17:
                    ab:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6B:B0:5C:40:DF:80:70:AB:AE:7B:89:AB:4F:F4:E7:A2:74:E7:DE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d615cc7f-fcbd-4c3f-bdc5-3dd8bce9885b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d615cc7f-fcbd-4c3f-bdc5-3dd8bce9885b/d615cc7f-fcbd-4c3f-bdc5-3dd8bce9885b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.92.140.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395587

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:1e:f3:61:ca:ec:a2:c2:c2:04:b4:b1:bb:2e:69:dd:b8:a8:
         38:54:59:21:e3:ea:a5:a2:1c:b0:b0:5c:68:63:34:03:46:1b:
         23:e2:2c:50:ae:6d:2c:4e:53:0c:74:34:1b:05:ef:33:a6:7e:
         b1:2a:76:99:53:b1:73:3e:e5:1f:25:64:0f:ba:5f:ac:9f:20:
         49:74:67:5d:07:18:cd:5c:90:a5:90:3e:b3:5b:ca:0b:51:f0:
         d5:ac:b3:4b:e2:5b:5b:af:e8:c0:27:5e:3e:9b:56:90:59:d2:
         18:f2:71:d1:54:90:f4:4e:13:83:a9:e9:c1:9a:b2:0c:20:83:
         1c:02:21:75:d4:45:61:a6:4d:d9:49:da:50:2d:88:f8:06:d2:
         c8:85:29:5c:5a:cd:58:6c:74:88:cb:be:9a:ea:2e:bf:be:32:
         4b:b3:ff:8b:a2:be:18:fc:3a:ba:c7:5d:2a:28:17:c7:6d:fe:
         7d:6f:ec:16:e6:2f:3b:fe:5d:47:a7:80:c5:95:67:9f:d0:63:
         d9:53:8f:f8:7c:30:5a:f5:9a:25:4f:1a:a3:a1:7b:cf:6c:87:
         cc:1d:78:cd:b8:f6:8c:67:f4:87:3e:59:d8:ed:5e:1c:21:63:
         81:86:a5:e3:00:c9:7d:ec:13:3f:e6:48:36:94:3a:39:95:8a:
         79:c0:86:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----