Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer
File:                     26ce408d-5581-483d-90b3-5119fc830064.cer (raw, json)
Hash identifier:          eFjrE9/5ln5LSBlXq0zHKaFNCTUshbLeAAa/l6+3YgQ=
Subject key identifier:   65:21:7C:6E:F2:43:AA:49:DB:58:1E:FE:47:99:1D:54:9D:A8:92:F5
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285846351E7600AEC38A0D84F73800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 14 Jun 2024 11:12:14 +0000
Certificate not after:    Tue 05 May 2026 14:08:12 +0000
Subordinate resources:    AS: 19577
                          AS: 33733
                          IP: 23.147.168.0/24
                          IP: 2602:faa5::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:35:1e:76:00:ae:c3:8a:0d:84:f7:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jun 14 11:12:14 2024 GMT
            Not After : May  5 14:08:12 2026 GMT
        Subject: CN=26ce408d-5581-483d-90b3-5119fc830064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:a6:72:0a:92:62:5c:8a:f1:57:85:4f:f3:
                    b7:aa:cc:f9:c1:29:81:95:c9:8c:1f:4d:26:8c:f8:
                    bf:52:b9:4e:fc:f4:55:b5:15:5c:a6:39:8a:bd:1f:
                    6d:1a:d2:4a:fa:e8:df:97:db:02:a7:e3:30:2b:02:
                    db:43:ed:e7:f0:98:2a:f0:67:36:db:2f:6d:30:93:
                    60:65:02:2f:13:cf:94:64:fe:a2:a7:b9:55:b4:e2:
                    b1:c1:08:df:45:b6:ef:44:03:89:d2:80:bd:2a:53:
                    c9:6a:94:fe:89:99:a0:64:cc:1d:d2:77:bf:b3:bf:
                    eb:95:73:dd:5a:67:ed:7f:23:dd:c7:48:69:1c:19:
                    05:21:41:e8:72:b0:39:74:64:8d:74:f2:b1:05:09:
                    34:ae:98:3c:05:6e:c6:3d:4e:91:9b:28:ec:96:53:
                    38:aa:af:d9:e8:51:c5:f3:f8:8e:d7:f7:5d:65:d4:
                    f2:07:29:55:34:27:1c:da:d0:d8:00:e2:3c:c1:08:
                    6a:d4:75:a8:94:09:64:28:72:6e:38:3e:87:da:46:
                    2d:a0:66:82:fa:44:63:9b:e7:9c:e6:91:81:d5:51:
                    d5:44:23:82:1a:be:6c:6a:6e:3d:8c:c3:1c:87:c8:
                    55:8f:4e:de:23:22:b9:35:a2:50:4e:15:83:ff:e3:
                    4f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:21:7C:6E:F2:43:AA:49:DB:58:1E:FE:47:99:1D:54:9D:A8:92:F5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.168.0/24
                IPv6:
                  2602:faa5::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19577
                  33733

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:19:41:f8:ca:f7:69:bc:7a:73:bb:af:52:58:fb:31:2c:17:
         e0:d9:42:19:ea:62:5a:75:09:3e:c9:fa:04:3b:5d:89:1a:c6:
         12:41:33:17:d0:d5:b6:c4:23:20:b6:03:0d:a4:68:a4:b3:42:
         87:36:6c:69:3f:f9:1d:f4:a0:cd:4a:43:af:c1:60:f7:88:86:
         ca:eb:8f:c9:f6:3d:44:98:49:ba:80:3a:d4:07:0a:68:9e:33:
         5d:df:91:ca:49:2a:29:08:ed:46:46:04:a5:b4:63:cc:07:19:
         e4:5b:a7:e7:ab:68:95:57:9c:28:78:09:e6:f3:1e:8a:88:de:
         6e:84:a6:27:d9:64:3e:63:cc:9f:ee:db:ec:84:eb:b8:69:b5:
         35:38:8d:b9:89:04:6b:ec:1a:b2:1e:f8:e0:6a:9b:85:9b:75:
         75:77:84:0c:36:c5:4f:7f:b6:ac:65:dc:77:04:e4:10:67:9d:
         23:af:12:25:26:e3:08:41:b3:74:69:14:e1:fc:f4:25:f5:65:
         72:ed:66:b1:c2:a7:3d:79:f6:be:93:8a:9b:38:02:f2:bd:2e:
         78:df:8d:3f:9f:74:f1:69:c9:93:26:55:4d:62:75:df:80:d1:
         50:88:9f:75:ae:30:95:a7:60:88:29:1b:de:e5:56:bd:a2:a2:
         3c:cb:e3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----