Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
File:                     e66a6121-7784-4ce4-af34-0e56530ce3c1.cer (raw, json)
Hash identifier:          4KWHIYrXJx8netGDzu/sqGAwYS96sd5qjhfz2o4wT7U=
Subject key identifier:   3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285847457E6A9DCE059E6709203600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 20 Sep 2024 00:45:26 +0000
Certificate not after:    Thu 24 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 16970
                          IP: 23.169.240.0 -- 23.169.245.255
                          IP: 23.169.248.0/21
                          IP: 64.40.23.0/24
                          IP: 2602:800:1000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:7e:6a:9d:ce:05:9e:67:09:20:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Sep 20 00:45:26 2024 GMT
            Not After : Dec 24 01:45:26 2026 GMT
        Subject: CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fd:d4:72:dc:7b:e9:f8:db:b9:c1:91:4c:7b:
                    d4:41:03:50:74:06:43:a3:14:69:96:f5:86:40:bd:
                    bf:24:b4:23:0f:a5:e2:b0:f1:17:de:4d:f7:0a:50:
                    6f:98:e8:ee:49:b4:7b:ef:25:99:51:14:5a:f5:34:
                    88:55:79:41:83:7b:02:c0:48:15:49:34:c7:74:55:
                    11:ca:73:44:93:e2:d3:83:44:9b:da:2a:61:76:01:
                    c8:1f:99:50:87:0b:60:b5:6a:65:4d:2b:8b:0b:a8:
                    cf:dd:8c:ee:25:7e:14:8a:a2:b8:a7:45:e3:b1:35:
                    12:59:ef:a5:a7:13:9f:63:6b:ca:01:b9:fb:3e:47:
                    c0:d6:d1:e8:4c:6e:0d:ad:8a:db:b8:4b:44:45:e4:
                    c7:70:76:8f:af:d1:b0:7a:8b:e0:03:07:3b:06:a9:
                    79:a4:18:ff:b4:44:7d:53:cf:ce:c2:a7:88:54:5b:
                    23:86:ff:d9:04:4a:ae:81:26:0c:df:18:e3:ff:3b:
                    2c:82:b9:6d:8c:dd:5e:df:c7:30:08:12:43:82:8b:
                    a1:9a:b1:84:d7:8a:49:e4:19:7f:7c:5e:6d:ef:ff:
                    a7:d8:57:9e:5b:bb:c4:c8:32:6f:8b:aa:3a:18:bb:
                    ff:39:e7:e7:e2:6a:da:fd:12:46:96:0a:5e:8f:fa:
                    ca:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.240.0-23.169.245.255
                  23.169.248.0/21
                  64.40.23.0/24
                IPv6:
                  2602:800:1000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:49:9f:b3:59:42:0f:e7:ec:77:f9:0d:bc:e1:c5:94:f7:94:
         99:49:86:b3:71:fd:7f:b8:dc:1d:de:1c:f3:6b:35:1c:94:3f:
         4c:5a:bd:70:35:a1:82:bf:13:61:d5:48:9e:f0:1b:a1:1a:2e:
         47:19:3c:6d:86:df:37:65:89:f2:f0:ad:d7:60:3b:08:c5:e1:
         a0:32:86:a9:ea:d0:c6:19:b1:ca:c7:91:e4:e8:40:ff:be:dd:
         4d:ed:c9:3c:ba:a1:f8:72:08:3d:2d:cb:8f:2a:3a:4e:84:cd:
         33:18:79:d4:86:2f:5e:42:b8:1d:9e:9e:74:3a:33:e1:5f:37:
         10:d4:ef:a5:a8:e8:b2:08:96:dc:1f:32:0b:1b:5e:e1:1a:b1:
         1e:82:5a:4e:13:1a:1f:ed:16:40:94:73:94:bc:5a:e8:7a:c0:
         84:bf:8b:42:d2:3a:2f:02:3d:db:a5:7e:c5:be:57:43:5a:5b:
         18:06:03:bd:7b:c9:ee:14:3b:01:b4:43:e7:b1:8a:4a:c0:ec:
         1e:ea:48:4a:d7:19:85:ed:2c:df:ea:d2:64:11:fa:91:0f:e2:
         60:d2:85:e9:22:70:50:17:64:4e:b7:5c:a1:c4:a1:0a:71:01:
         b5:7f:45:fd:e3:b8:6b:cd:ed:41:b8:30:57:bd:86:2e:09:e9:
         7e:7e:d1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----