Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2.cer
File:                     db54b165-1bfa-4624-b8bc-680c5d3ac9c2.cer (raw, json)
Hash identifier:          OmpAmpgI+TZzsDZ+IYKHy9wqdZ8B9RittFKUyjXPGWc=
Subject key identifier:   B3:DC:97:63:79:E1:2F:3F:C9:1E:EB:26:1B:68:74:93:66:66:01:22
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584785B4263367EC8E6F47868240
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 13 Oct 2024 00:45:26 +0000
Certificate not after:    Sat 16 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 395990
                          IP: 168.245.235.0/24
                          IP: 2602:804:e000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:b4:26:33:67:ec:8e:6f:47:86:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct 13 00:45:26 2024 GMT
            Not After : Jan 16 01:45:26 2027 GMT
        Subject: CN=db54b165-1bfa-4624-b8bc-680c5d3ac9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:61:21:ce:86:c6:e7:8a:5a:5c:1c:d4:bb:17:
                    5e:62:a9:ff:7c:d2:64:53:b2:44:0f:c3:b3:aa:08:
                    e4:f7:e2:81:78:e9:93:e5:84:e6:2b:d9:35:1f:3d:
                    96:ef:9d:cb:6e:cf:d1:33:77:a7:ac:d8:9e:a3:27:
                    4e:d4:c9:73:36:3a:f1:70:74:98:db:ed:88:2d:e2:
                    6c:85:5a:24:20:fb:d2:4c:91:c4:ba:b0:4c:74:6f:
                    14:d8:a3:bc:9e:82:71:55:86:ac:97:74:21:05:ca:
                    9a:4f:60:c8:a7:25:7c:de:9f:e2:90:2e:86:48:87:
                    8a:f7:b4:aa:3c:23:ee:8e:c4:2c:17:c1:50:47:b7:
                    b2:78:62:80:09:60:39:0c:ad:c9:8a:fe:2f:7a:2b:
                    cc:1e:58:24:da:7f:ab:3e:d5:96:6d:fb:5e:c9:6b:
                    ea:a0:08:6b:88:21:df:95:bc:e5:18:9c:46:f3:94:
                    12:6b:33:3b:ee:3b:4e:55:09:0a:bd:08:f3:aa:be:
                    1f:63:9a:21:d4:0d:89:be:cc:d4:2e:9b:57:41:ca:
                    f2:7c:26:28:6a:9c:ac:fa:71:32:4e:37:83:1a:3e:
                    f6:86:9a:db:8e:b3:d0:06:09:3c:93:ad:6c:24:ee:
                    c8:15:69:f1:10:89:f4:67:eb:91:80:83:99:48:0a:
                    80:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DC:97:63:79:E1:2F:3F:C9:1E:EB:26:1B:68:74:93:66:66:01:22
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.235.0/24
                IPv6:
                  2602:804:e000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395990

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:90:6e:70:fd:d1:fb:55:c8:5c:43:d2:1a:aa:f2:3b:65:d1:
         b7:91:c3:85:57:02:12:9a:9c:24:08:86:bc:90:a3:c6:d9:52:
         34:b7:5d:0c:f4:26:70:0a:f1:1e:e9:ab:60:76:23:80:37:b3:
         73:ac:85:2b:4c:b9:79:97:3c:49:d2:ec:2d:12:c3:67:e3:c2:
         85:12:2a:e8:48:65:8d:67:0e:4e:eb:c8:c0:b4:fc:7f:10:7f:
         16:0e:de:7b:cc:06:9a:6b:89:3c:c3:d9:d3:30:9e:ec:1f:52:
         8b:c4:3a:87:b6:30:9e:49:cf:04:6d:3b:c6:9b:b1:d6:4c:4a:
         e1:36:18:6f:3c:17:c8:93:35:73:87:b9:58:32:9a:99:63:cb:
         c1:d8:26:8a:e8:06:0c:28:02:d7:9b:d7:91:81:f2:8b:60:ae:
         b6:90:c1:5b:1f:5b:3e:25:67:03:37:57:7b:3e:4c:1e:b0:92:
         d9:b7:7f:b8:10:f3:01:d3:7b:0d:81:03:a2:f0:e8:75:ae:b0:
         86:a4:53:27:74:79:75:7f:62:d4:a9:49:69:91:4b:ba:a4:d5:
         80:89:6b:a0:38:16:db:ad:21:b8:21:00:08:e9:c8:63:3c:3b:
         38:11:b4:7b:39:2c:92:2b:97:4a:5f:51:cb:e1:45:a7:9a:05:
         0d:29:07:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----