Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer
File:                     d9e22f6d-5551-4712-9f95-3008c51223ec.cer (raw, json)
Hash identifier:          ylyKH3eypq7utXDPtnz63DTUcQnrgPVajYEbX9lhG3o=
Subject key identifier:   28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285846EC2883322E634DD4B56416A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 19 Aug 2024 00:45:24 +0000
Certificate not after:    Sun 22 Nov 2026 01:45:24 +0000
Subordinate resources:    IP: 131.95.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ec:28:83:32:2e:63:4d:d4:b5:64:16:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug 19 00:45:24 2024 GMT
            Not After : Nov 22 01:45:24 2026 GMT
        Subject: CN=d9e22f6d-5551-4712-9f95-3008c51223ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:ce:f2:8e:a7:e3:24:28:85:b8:e3:70:88:
                    74:07:4e:b3:df:87:3b:77:1e:c4:62:70:9e:e0:f4:
                    31:1e:92:91:45:57:42:1d:0f:09:68:fd:18:95:90:
                    c2:59:4b:cf:8a:b3:0b:bb:7c:94:5b:cc:40:4c:7d:
                    7b:b7:7f:ed:06:56:eb:72:87:88:3a:19:6a:6b:c2:
                    78:84:c4:5b:1d:e3:84:50:55:6e:aa:cb:11:18:4c:
                    e5:1a:94:27:0c:2a:12:fa:66:4e:b7:77:69:61:f0:
                    12:02:71:1b:5a:68:67:23:c4:6b:2d:28:80:38:eb:
                    9b:fb:af:84:35:1c:78:34:86:46:77:ac:eb:66:07:
                    d5:cc:4c:aa:8c:b9:9e:fd:05:8b:0c:f2:4c:ae:63:
                    8d:07:f9:ba:37:48:81:92:66:74:b8:df:3c:7c:eb:
                    99:ae:67:1c:6a:bd:e2:bc:cc:43:8c:c8:31:52:a7:
                    95:b4:d0:cb:8c:08:0a:c7:11:96:2e:86:46:03:68:
                    84:4a:c5:2d:a6:6e:f8:f7:b6:26:a2:2b:0e:3c:05:
                    65:85:f9:82:1c:0a:c5:f6:37:04:01:56:0a:a0:d1:
                    19:09:e7:99:f5:dc:0c:6b:8c:d3:0b:8c:92:6a:bd:
                    29:8b:f6:44:ca:2c:c8:b0:db:1b:55:46:c3:5f:28:
                    97:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:c7:36:9e:c3:fd:4d:90:2a:d9:ca:f5:05:85:fe:a6:11:15:
         7b:66:0f:6b:e8:5c:f5:31:68:f1:32:a1:18:e2:af:8a:41:18:
         53:a4:e6:70:98:b2:e6:a9:50:7d:a6:b9:b1:e6:7c:55:f7:38:
         60:33:fa:e2:63:2d:34:09:f6:83:f1:08:0e:10:d9:01:a0:23:
         46:3b:59:d4:92:8b:4f:5d:ac:e6:1b:9d:1b:80:fb:fe:c2:81:
         fa:3d:0b:20:dc:33:cd:f8:97:3c:6c:dc:6e:cb:35:c8:25:38:
         f4:7e:af:eb:1a:f2:f8:7f:9e:b1:8c:ad:2e:dd:b3:2b:cd:f6:
         38:eb:44:6e:d1:0a:7c:f2:22:09:e6:fc:bc:2d:8b:39:2b:69:
         1e:65:d1:f6:a9:3b:a9:30:5b:24:7b:4b:35:af:79:0b:5f:30:
         b4:ba:66:97:3c:7e:25:99:7f:38:ca:0a:0c:6b:6c:0a:ef:ef:
         1c:09:88:9f:f9:03:5d:49:03:f9:35:6b:ec:4f:b3:2a:b1:42:
         b5:46:13:d7:11:63:65:e9:fe:e8:3f:8b:5c:6a:d5:c3:48:32:
         fc:75:ad:ee:55:27:7d:d8:b7:e5:b9:d6:e4:4e:ff:3d:3c:de:
         5e:eb:eb:bb:a2:14:f1:fe:2b:d2:4e:2e:75:3b:3e:c7:fb:72:
         26:f0:a4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----