Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffa88dd6-b56a-4337-b2aa-58a035a26c92.cer
File:                     ffa88dd6-b56a-4337-b2aa-58a035a26c92.cer (raw, json)
Hash identifier:          aJw8YoN64WIjziIqBjl/Uz0bnhibeMcwoYsf4hNbYko=
Subject key identifier:   57:03:F1:47:66:63:D8:89:6B:E3:6A:77:8C:45:32:F0:59:B6:07:0A
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858477D5419FF2995F6BD3DC49C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffa88dd6-b56a-4337-b2aa-58a035a26c92/ffa88dd6-b56a-4337-b2aa-58a035a26c92.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffa88dd6-b56a-4337-b2aa-58a035a26c92/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 10 Oct 2024 00:45:26 +0000
Certificate not after:    Wed 13 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 394564

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7d:54:19:ff:29:95:f6:bd:3d:c4:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct 10 00:45:26 2024 GMT
            Not After : Jan 13 01:45:26 2027 GMT
        Subject: CN=ffa88dd6-b56a-4337-b2aa-58a035a26c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6d:00:f0:16:c6:cd:09:87:12:eb:9f:e6:d2:
                    41:4c:d3:b0:81:e0:f9:24:ef:3f:c8:bc:b2:89:b4:
                    7c:6c:72:9a:98:c8:9a:6e:15:cb:6c:1a:ad:47:0a:
                    f2:5a:1c:28:68:2f:2c:34:53:69:03:dd:c1:df:d2:
                    fb:99:7c:2d:12:0c:f8:17:38:cf:b8:1c:da:a7:25:
                    cc:42:fe:04:fe:64:72:c7:cf:fe:fa:da:69:88:99:
                    33:d3:a3:0b:c7:43:2d:92:c6:82:33:5b:03:51:0b:
                    d4:20:a6:93:8d:7e:8e:c7:80:4d:a9:97:f6:59:2e:
                    12:f7:a0:1d:37:d2:23:eb:94:78:fb:6d:fe:57:31:
                    e6:8a:8b:62:05:8a:89:98:d5:38:fe:88:da:75:eb:
                    c4:fd:52:73:e4:11:0f:cf:11:2c:c5:b9:38:c1:b8:
                    f1:59:7a:f4:9b:3f:5d:62:b9:9f:89:3b:1c:f1:a8:
                    d4:1c:da:36:87:21:15:72:40:75:af:70:81:27:a1:
                    15:d2:41:38:3d:8c:40:52:ac:9a:09:aa:cd:53:99:
                    56:67:4d:88:83:89:15:b6:56:f3:b1:ec:4e:3d:37:
                    5e:17:90:0d:88:54:be:fc:8f:80:fe:a7:05:85:14:
                    18:f2:a5:c0:13:8f:bc:e4:4f:25:22:86:49:21:a9:
                    0d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:03:F1:47:66:63:D8:89:6B:E3:6A:77:8C:45:32:F0:59:B6:07:0A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffa88dd6-b56a-4337-b2aa-58a035a26c92/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffa88dd6-b56a-4337-b2aa-58a035a26c92/ffa88dd6-b56a-4337-b2aa-58a035a26c92.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394564

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:34:ce:53:92:41:79:d8:e0:0f:0d:68:16:35:f3:0e:82:49:
         f0:93:7f:4c:61:f3:3f:b5:ce:82:78:8d:11:7f:d4:d3:74:fd:
         f8:10:6f:02:02:8f:58:f8:90:32:0c:d3:1d:ff:ad:97:d8:c1:
         a9:e7:8d:fa:58:a0:3d:22:fa:af:f6:95:7d:18:96:c4:19:4c:
         d8:14:1e:dc:73:53:b9:9f:a5:e4:d5:6f:50:2d:5c:64:24:72:
         74:27:bf:0c:eb:ee:7b:93:a3:27:79:7d:84:92:10:1d:9a:2f:
         58:ac:ca:c1:63:4e:80:16:c7:a6:fb:80:e7:9b:e7:cd:53:eb:
         15:62:e1:6e:1d:9d:1b:4f:19:b8:1b:82:5f:6b:07:2d:f0:c2:
         b2:c6:71:bd:e4:bb:f7:c7:36:51:38:89:94:7c:a9:ff:73:f1:
         5e:a8:d9:20:9f:5a:97:b6:ac:fa:7e:e0:e1:5a:d9:22:1f:48:
         24:04:1e:5c:87:dd:26:17:40:9b:c5:d6:30:25:35:34:74:52:
         d1:85:bd:77:53:fe:e4:4f:14:73:70:3d:09:9b:c2:ef:e7:34:
         6e:eb:03:ac:0e:f4:da:4d:b6:f8:dc:2a:f8:58:5c:62:08:11:
         36:dc:bd:b1:25:e7:38:a2:c3:45:07:04:37:5e:f1:8c:8e:6f:
         ee:cc:bf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----