Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/020bd06a-b3dc-4d29-a79f-95b698c161c3.cer
File:                     020bd06a-b3dc-4d29-a79f-95b698c161c3.cer (raw, json)
Hash identifier:          TWr3KL9PNT4JgQ1aLJwWBqWNK3TRjCpHSyV/8SQ+1w8=
Subject key identifier:   20:E2:49:61:BD:F2:DD:48:7E:FA:95:5B:E5:10:C9:4E:03:EF:6A:F1
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584596DD0E3DB6ED3D3DA35941C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/020bd06a-b3dc-4d29-a79f-95b698c161c3/020bd06a-b3dc-4d29-a79f-95b698c161c3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/020bd06a-b3dc-4d29-a79f-95b698c161c3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 Apr 2024 18:42:44 +0000
Certificate not after:    Wed 22 Jul 2026 18:42:44 +0000
Subordinate resources:    IP: 2620:10:6000::/48
                          IP: 2620:63:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:dd:0e:3d:b6:ed:3d:3d:a3:59:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr 18 18:42:44 2024 GMT
            Not After : Jul 22 18:42:44 2026 GMT
        Subject: CN=020bd06a-b3dc-4d29-a79f-95b698c161c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6d:8d:20:bf:85:ac:f2:58:c8:51:d6:70:60:
                    a6:35:1f:6a:cf:67:32:bc:93:1f:6d:74:ca:d7:e0:
                    ce:e8:a3:de:79:07:8a:5a:d5:99:2b:01:ef:91:56:
                    15:72:14:25:5a:2b:2e:7d:e6:2d:a4:40:af:eb:9d:
                    8b:d7:c6:23:28:18:1d:51:43:e6:ae:29:80:c6:f0:
                    10:16:2d:28:5b:82:48:90:1e:bb:0c:3c:18:dd:20:
                    0d:2a:52:cf:37:e7:8d:24:c2:2e:04:cd:56:a2:5a:
                    76:8d:77:d7:2c:da:64:f3:8b:82:60:7b:d0:80:68:
                    b0:80:12:5c:79:31:4f:68:c2:7a:59:81:3d:09:f7:
                    de:fb:9c:46:18:2e:70:53:90:fb:3d:11:d8:d2:b4:
                    a5:1e:ae:da:50:f1:4b:8a:b2:01:eb:2f:88:71:f5:
                    4a:ba:96:4b:6e:37:22:62:6a:00:ec:87:6e:f6:14:
                    65:dd:20:c9:94:e7:91:f0:77:3c:bb:7d:5b:12:e9:
                    f1:b4:e9:57:db:88:55:89:f0:a7:d3:f6:e0:7f:fb:
                    a1:d7:c3:23:37:ab:ae:48:49:b8:31:ee:fe:ce:f4:
                    3c:66:37:34:f5:67:36:d7:6b:85:d9:72:8a:ee:e4:
                    7b:ce:47:fb:b9:62:10:7b:09:29:ea:e4:18:09:ed:
                    2b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E2:49:61:BD:F2:DD:48:7E:FA:95:5B:E5:10:C9:4E:03:EF:6A:F1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/020bd06a-b3dc-4d29-a79f-95b698c161c3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/020bd06a-b3dc-4d29-a79f-95b698c161c3/020bd06a-b3dc-4d29-a79f-95b698c161c3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10:6000::/48
                  2620:63:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:84:22:4b:4e:29:d3:80:ed:2e:4b:a4:f0:e1:e5:1b:8c:e4:
         d6:aa:9c:53:4b:90:1d:2a:e0:bd:4f:eb:0a:2e:f6:d1:b8:c1:
         ad:0f:2c:a9:8b:b2:a3:97:0d:fc:a1:7c:59:d7:81:6e:54:31:
         dc:44:e0:75:46:eb:62:71:e2:58:4d:86:cb:2d:42:5b:c2:ab:
         09:fc:57:69:3b:21:88:ab:5a:9c:ca:dc:19:50:eb:30:26:be:
         48:80:15:8a:0c:86:fd:07:94:41:2b:6b:ff:93:3f:bd:35:f0:
         07:65:69:fe:47:af:1b:52:fa:6c:f4:0c:19:ca:39:78:e1:80:
         19:f7:40:29:c0:22:dc:04:a6:68:53:94:5a:7e:dd:a9:d5:42:
         5f:a7:34:97:bb:29:5d:b8:5e:47:98:98:35:6f:7a:6f:ef:a4:
         14:4d:88:05:2b:28:25:e0:59:c5:cb:89:9e:9f:f2:5f:ba:9f:
         c7:a5:6d:90:54:c7:03:80:f8:68:99:a0:88:74:3f:ee:fd:2a:
         e5:f3:43:bd:d4:cc:5c:59:44:ba:7d:06:37:2b:ab:ad:7c:cd:
         a4:e6:7e:a8:20:34:03:1b:18:33:33:da:2b:32:fb:f4:fd:4c:
         68:57:d8:98:5c:6c:ce:ef:dd:f6:82:1e:9e:1c:a1:38:4c:fa:
         76:8d:57:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----