Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
File:                     1a767fb3-0911-435a-a3a4-189b82622157.cer (raw, json)
Hash identifier:          NA5fcsLISpExZDVnqM0a3QxBmpzr3wy32JgDVM+caOI=
Subject key identifier:   31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584499062A47FA2D91EA9BA87A90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 Jan 2024 20:30:14 +0000
Certificate not after:    Wed 22 Apr 2026 12:59:52 +0000
Subordinate resources:    AS: 400919
                          IP: 23.169.200.0/24
                          IP: 2602:817:2000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:99:06:2a:47:fa:2d:91:ea:9b:a8:7a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 18 20:30:14 2024 GMT
            Not After : Apr 22 12:59:52 2026 GMT
        Subject: CN=1a767fb3-0911-435a-a3a4-189b82622157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:e0:19:72:3e:cc:c2:b0:2b:4c:da:96:0f:
                    94:df:f3:61:37:11:c5:99:13:c7:93:a1:36:78:00:
                    f4:aa:13:65:b0:7c:50:8c:b7:2a:e9:3a:73:fd:cc:
                    df:4b:84:32:bc:bc:9c:ed:ae:80:d5:c2:07:a4:6a:
                    4b:85:d1:ec:6b:6c:f4:d1:7b:4c:84:db:84:3e:52:
                    4a:e0:40:36:7f:2e:24:12:74:6d:11:8d:13:4b:d5:
                    f8:7a:a9:3e:b5:33:8c:b3:34:7b:89:0f:2b:df:39:
                    04:c0:63:30:4e:27:a6:fc:cd:b7:e5:f6:e1:6d:d0:
                    c0:a2:84:ae:f6:3f:48:bf:fe:6e:af:b9:f3:4d:69:
                    7c:24:c1:9d:a8:e4:aa:f0:f6:1e:9f:53:ca:70:56:
                    20:2c:e8:40:1f:6a:55:b5:ef:df:de:a0:69:ac:f9:
                    30:e2:c0:9d:ff:6e:43:46:54:20:4c:87:8a:71:aa:
                    da:c9:fa:d5:5e:ef:5a:a8:92:20:82:67:a7:46:83:
                    c4:eb:21:96:8b:82:50:fc:3f:f6:5e:e2:3a:d7:9c:
                    f6:fb:fb:0a:41:36:cd:6f:a4:92:09:0e:e1:57:02:
                    64:ad:f0:26:86:e6:17:13:6e:d1:3a:9d:95:64:25:
                    77:2c:0b:c9:f8:a4:52:52:16:8f:25:63:2d:ef:8b:
                    6c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.200.0/24
                IPv6:
                  2602:817:2000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400919

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:48:bd:00:00:ef:2d:8d:5e:80:3a:e3:05:5b:14:48:fd:97:
         b9:71:e1:61:56:1e:d0:be:2c:e2:d4:fd:e3:28:64:17:62:04:
         3f:eb:c6:07:eb:30:6b:e1:b5:c1:49:b1:3a:2d:68:20:00:5b:
         5e:51:69:2e:29:12:5a:95:d5:06:ed:72:f5:18:1b:ae:f2:b3:
         0d:c9:46:e6:fb:c3:96:76:55:96:4e:4a:65:80:2e:f8:01:77:
         03:80:5a:a7:63:ac:66:b8:20:d3:0e:b6:82:41:02:f4:d8:e9:
         2f:d2:75:b0:9f:61:be:05:03:2b:50:23:22:b5:ac:86:67:54:
         af:e1:9a:18:d0:6c:1d:81:d4:58:77:15:75:3c:8f:90:ed:83:
         9b:16:d4:73:b5:49:70:b1:b6:47:9b:36:6d:5a:15:2e:a6:7d:
         da:44:47:40:b6:8a:cb:41:0f:5c:21:b4:ae:70:28:37:d5:61:
         4b:b8:24:e5:8f:98:36:94:e5:8d:d5:00:6d:e2:ac:53:76:be:
         18:62:88:13:bc:6b:d4:aa:c7:ec:83:80:ba:37:d9:af:17:fa:
         2b:81:0f:88:1a:94:26:8c:13:8d:97:a1:26:f8:05:b0:77:fc:
         30:23:b7:3b:47:a9:8d:40:14:cc:1b:30:24:3e:89:52:9a:66:
         d4:5b:4a:06
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----