Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a.cer
File:                     e3e4a23c-f99b-45fd-947d-f5496607a32a.cer (raw, json)
Hash identifier:          6VXMewDdoXVWvxDRnNtpfjcW90oUQy0b+AFNg8bJJVA=
Subject key identifier:   CF:2D:B5:EB:BC:6E:B4:E7:95:31:68:36:3A:31:0F:5E:F4:C3:98:DD
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858452D7B07793F74E0894163E080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a/e3e4a23c-f99b-45fd-947d-f5496607a32a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 12 Mar 2024 00:45:20 +0000
Certificate not after:    Mon 15 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 36191
                          IP: 192.122.215.0/24
                          IP: 2620:86:e000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:7b:07:79:3f:74:e0:89:41:63:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Mar 12 00:45:20 2024 GMT
            Not After : Jun 15 00:45:20 2026 GMT
        Subject: CN=e3e4a23c-f99b-45fd-947d-f5496607a32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:69:ad:03:24:03:64:53:01:7e:d2:7e:c6:
                    47:85:9b:f0:ff:86:32:8f:61:28:f5:59:61:be:c5:
                    60:03:5b:99:41:e9:91:f3:1b:29:e2:54:3f:d7:a1:
                    aa:de:d7:eb:2f:45:eb:bc:c3:ac:2e:8c:40:bb:db:
                    f0:16:ca:cc:4a:e8:a0:f7:29:f2:ce:1e:ff:c0:b7:
                    dd:15:0b:5e:37:cc:cf:fc:af:c2:fd:8c:66:29:89:
                    16:f2:81:6f:80:59:41:93:a0:4f:53:03:78:cf:d5:
                    d3:35:30:20:22:90:e9:8e:b5:5a:ad:aa:61:5d:cf:
                    5f:3f:f6:83:d4:72:f2:48:0a:54:8e:1e:39:d3:12:
                    41:1a:92:da:e2:2c:b6:96:5b:71:64:d8:f2:8e:91:
                    60:93:b6:08:d3:59:0b:3d:05:2d:b7:d7:74:b6:5c:
                    9f:36:75:43:4f:a2:e2:04:29:dc:14:0c:ca:ef:ed:
                    7b:28:a2:e8:6f:b9:b4:5f:55:aa:7e:98:6e:5b:57:
                    df:93:8c:6c:75:24:99:e0:4c:85:d3:5d:9e:fe:03:
                    80:fa:5a:71:7b:55:12:40:c0:de:24:a2:11:9e:03:
                    81:08:5f:f4:1b:19:d9:e0:0c:8a:91:ab:90:e9:3e:
                    1d:03:96:44:d5:90:46:3f:cd:21:bf:92:7b:ae:7f:
                    ef:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2D:B5:EB:BC:6E:B4:E7:95:31:68:36:3A:31:0F:5E:F4:C3:98:DD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a/e3e4a23c-f99b-45fd-947d-f5496607a32a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.122.215.0/24
                IPv6:
                  2620:86:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36191

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:06:81:e2:87:55:80:ef:8f:50:2a:5d:1f:cd:11:43:02:e3:
         9d:d1:29:cd:40:45:22:29:f2:2f:7f:4a:4c:fd:9e:4b:d3:25:
         6a:a0:18:38:20:e6:f4:ea:68:c8:d3:bf:9a:ee:9f:c5:09:bd:
         4f:6e:e3:c7:63:2a:1c:04:42:9c:b7:48:9b:14:68:fe:b4:f1:
         3b:b1:67:f6:f6:89:38:a8:7b:ee:2b:4e:ad:54:5d:1d:5e:91:
         31:51:a0:35:6e:24:c7:12:14:26:0e:3c:46:74:46:ec:f9:01:
         2b:e4:42:4b:ba:f7:6c:86:d9:a7:8d:6a:29:52:6a:64:9d:0e:
         48:93:8d:93:cc:ae:0c:c3:b0:a8:b2:c3:0f:8a:71:6b:75:91:
         fd:26:3c:e4:c4:1f:15:b0:46:58:9e:c3:94:d2:9d:93:3e:df:
         f4:39:6f:51:71:4a:92:43:5f:2e:61:a3:fd:83:05:05:0f:ee:
         3e:2b:e4:a7:0a:14:8f:9c:f6:51:ef:25:70:53:29:8e:be:f7:
         3f:66:40:5a:a3:ad:10:d8:65:7a:a7:78:31:6f:69:2a:77:47:
         11:d1:30:5f:01:f9:c5:7e:49:6b:56:a4:eb:92:d7:6a:13:b2:
         f7:cb:69:eb:71:cc:48:2a:73:0b:8a:b4:90:0c:ea:c3:16:cf:
         52:58:69:f3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----