Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fa42062b-4fcb-4c51-bb59-71938efca303.cer
File:                     fa42062b-4fcb-4c51-bb59-71938efca303.cer (raw, json)
Hash identifier:          H1bYRlfSh0i3OqVB7pINzEE/2LAByG9MWBvcTvVG16w=
Subject key identifier:   FF:33:AC:CC:EB:9B:A1:AA:7C:89:C6:DE:9F:79:E3:EA:24:22:DA:9D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285844BB22C2683077B950409EAC80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fa42062b-4fcb-4c51-bb59-71938efca303/fa42062b-4fcb-4c51-bb59-71938efca303.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fa42062b-4fcb-4c51-bb59-71938efca303/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 31 Jan 2024 01:45:20 +0000
Certificate not after:    Tue 05 May 2026 00:45:20 +0000
Subordinate resources:    AS: 46669
                          IP: 206.188.194.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:bb:22:c2:68:30:77:b9:50:40:9e:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jan 31 01:45:20 2024 GMT
            Not After : May  5 00:45:20 2026 GMT
        Subject: CN=fa42062b-4fcb-4c51-bb59-71938efca303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:18:db:c1:69:ce:1b:c5:ea:60:be:41:4d:e6:
                    5e:11:d7:a7:5b:26:8d:dc:dc:9a:4f:01:55:e6:9b:
                    d9:86:99:0c:74:5f:98:39:f5:87:ad:f6:9e:a0:19:
                    7b:40:a2:ff:05:6c:0c:50:56:3b:f4:46:58:96:57:
                    71:26:72:03:f5:25:d0:5e:a5:6d:f9:97:68:52:53:
                    96:77:39:5f:f5:02:99:df:1e:dc:28:7c:e3:20:63:
                    59:7a:30:fb:e6:97:46:f8:91:9a:a5:0f:c9:1c:d3:
                    97:16:3f:b7:ef:ac:9f:a1:92:a7:95:6d:de:07:18:
                    23:df:88:46:5b:bd:9f:e0:96:20:4d:d3:98:d0:c9:
                    b0:21:ed:34:92:e5:0a:c9:aa:95:f9:cd:9a:ff:63:
                    e6:53:49:83:07:3c:bf:b8:1d:65:0b:3c:b7:a1:cf:
                    17:aa:cb:02:36:70:6a:9c:4e:fa:a9:ae:c9:66:12:
                    f4:1a:f6:d9:80:e3:94:68:87:ee:4d:e1:22:70:f1:
                    86:80:db:eb:df:26:15:9f:d5:ed:04:17:b2:d0:6d:
                    fe:5e:13:42:2a:2e:14:5e:c4:9f:c1:c3:77:2d:36:
                    2b:00:cd:f2:8c:8c:c0:2a:bf:28:cb:15:35:10:fa:
                    ed:25:eb:fa:4a:00:cf:02:41:2c:a2:60:02:c1:98:
                    d8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:33:AC:CC:EB:9B:A1:AA:7C:89:C6:DE:9F:79:E3:EA:24:22:DA:9D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fa42062b-4fcb-4c51-bb59-71938efca303/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fa42062b-4fcb-4c51-bb59-71938efca303/fa42062b-4fcb-4c51-bb59-71938efca303.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.188.194.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46669

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:6b:32:b3:7b:fc:73:e5:12:ae:e4:99:be:b1:14:69:e8:04:
         0a:b1:fb:44:21:7f:e5:de:91:cf:ac:67:f5:4d:53:0b:cb:a2:
         e4:02:52:de:95:26:36:33:c3:71:4f:6a:9b:57:32:a2:c7:72:
         db:a8:e0:df:74:7f:7e:75:de:b9:03:c8:7a:4d:3a:5f:24:12:
         d1:0d:14:36:40:1a:be:32:9c:10:e7:b6:fa:fc:14:da:b4:89:
         e8:2d:33:73:a3:52:d3:60:35:04:48:4f:ef:60:7a:76:00:07:
         90:d0:31:00:e4:52:34:0d:7d:c2:ef:a3:24:b4:03:1c:93:b4:
         0c:9b:fc:a0:e1:a8:da:00:fb:ab:d9:e5:3f:d3:81:1c:aa:35:
         b7:17:12:86:8f:b6:cb:70:66:a7:03:2e:43:fd:26:d9:69:a4:
         19:6c:67:80:b1:2c:36:43:fd:2c:b1:f2:b6:07:25:ba:f8:88:
         18:4e:25:19:44:b9:d1:3f:31:28:9d:47:6b:bc:4e:ba:c0:a4:
         8f:30:fc:8e:eb:99:df:7d:06:50:96:06:5b:52:fd:66:ed:0b:
         14:5b:9d:43:c3:ee:49:b0:dd:e4:42:20:cd:17:29:1b:ff:45:
         92:22:10:9d:97:79:e6:7a:47:c2:4c:11:6e:3c:1c:dc:15:76:
         33:ed:2f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----