Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a.cer
File:                     2941f7b4-6dbb-4519-a33a-46d7923cc72a.cer (raw, json)
Hash identifier:          to2T4xJ/Qwb6MfjVOu7AEmyI39mW6c/Jhb2scF+lB5w=
Subject key identifier:   CD:87:29:25:8B:EE:B0:B5:F2:E7:67:DF:1E:B8:0F:80:FC:3F:D4:12
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285845461CD1C63316752AB9869080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/2941f7b4-6dbb-4519-a33a-46d7923cc72a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 20 Mar 2024 20:30:44 +0000
Certificate not after:    Tue 23 Jun 2026 20:30:44 +0000
Subordinate resources:    AS: 394003
                          IP: 192.131.254.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:1c:d1:c6:33:16:75:2a:b9:86:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Mar 20 20:30:44 2024 GMT
            Not After : Jun 23 20:30:44 2026 GMT
        Subject: CN=2941f7b4-6dbb-4519-a33a-46d7923cc72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:93:c8:ea:92:d2:28:1e:5b:1d:de:10:50:2b:
                    bb:81:25:c7:fe:11:28:ae:6c:12:6f:b1:b7:91:01:
                    4c:4f:51:c7:6d:87:71:55:c0:37:82:25:a8:55:82:
                    92:e4:6a:2d:36:cc:9f:95:e0:dd:b0:8b:99:37:54:
                    ac:b6:ae:9c:ce:84:87:43:fb:ee:fe:a4:9e:0f:6a:
                    3b:7b:4a:ea:42:c5:03:a5:fd:da:fb:6b:e0:dc:f5:
                    64:7e:8a:de:ba:0b:56:67:dc:40:46:78:a7:95:9e:
                    00:0f:bc:6a:3b:ae:05:5e:4f:d3:19:19:cd:14:0f:
                    d6:98:69:96:39:c4:b2:7c:a0:9d:06:8d:9e:02:56:
                    c5:11:bf:ad:a1:83:3f:96:c8:54:45:d7:fd:4f:9d:
                    53:0e:34:c2:7f:05:76:a6:11:8c:ad:c4:8b:52:2e:
                    3f:a7:6b:d7:38:f6:31:83:b2:71:b1:7a:8e:b5:fd:
                    11:e8:65:22:3b:96:1a:ce:ee:52:c3:27:88:3b:fc:
                    d6:21:9d:5c:b9:3b:84:43:10:83:95:0a:b9:aa:19:
                    db:90:4b:19:10:1b:45:2b:17:59:71:ed:57:81:20:
                    97:88:f1:9b:ae:d5:fc:73:11:14:b6:0f:79:4b:f9:
                    9d:d7:0a:c1:9b:28:0c:2d:03:01:4c:95:ba:e2:d1:
                    e9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:87:29:25:8B:EE:B0:B5:F2:E7:67:DF:1E:B8:0F:80:FC:3F:D4:12
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/2941f7b4-6dbb-4519-a33a-46d7923cc72a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.254.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394003

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:09:78:aa:3a:6c:fb:3b:ea:1b:dd:01:25:b8:0f:a5:1d:d6:
         91:dd:58:9e:e7:9f:be:c6:74:65:da:9c:d3:62:74:6a:ac:bd:
         e2:d4:61:cd:5a:56:84:19:d5:db:91:7f:1e:69:f8:be:3a:8a:
         8c:8e:e1:17:dc:d6:47:ec:c6:87:dc:bd:d0:ad:ef:61:ef:90:
         02:0e:7e:e2:a5:ff:45:7f:a5:15:df:5a:c4:b9:dc:33:75:98:
         07:db:58:0b:a0:21:37:53:9c:68:de:a7:5b:04:b0:a0:c2:7e:
         6d:b8:c9:21:9c:e7:81:ec:eb:e7:bb:c9:b9:08:2d:70:ba:9c:
         6d:50:1f:10:21:9a:1d:af:92:8a:94:fe:ec:34:24:f8:39:7c:
         14:a8:a4:f9:28:cb:78:6f:b0:ab:49:16:10:85:1d:f3:91:91:
         b7:bf:39:b6:12:3e:ae:f4:8c:2d:c5:e4:fb:31:93:9f:74:f9:
         be:76:2c:69:ed:ba:7f:59:f7:7c:36:15:91:0a:4e:5f:c7:06:
         5a:b2:8e:f2:b8:e5:48:2d:b6:3e:cb:9c:e0:a1:a1:46:9f:43:
         49:a8:29:fd:ec:15:f8:1d:1c:0c:ae:8f:36:20:88:0d:17:5b:
         6b:09:80:cc:b1:ee:f1:2d:66:53:6a:f1:40:03:36:a5:0f:91:
         5f:d9:7b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----