Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
File:                     2a71f00e-0200-48df-9cb4-008df9a4a854.cer (raw, json)
Hash identifier:          uLjfLqPnMxf9RA0wBZgrh3dz5lsJEUHGz9cpizfhXXY=
Subject key identifier:   38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844D3C91C793FECD43A86616540
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 08 Feb 2024 21:39:55 +0000
Certificate not after:    Wed 13 May 2026 20:39:55 +0000
Subordinate resources:    AS: 22855
                          IP: 2602:fd26::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d3:c9:1c:79:3f:ec:d4:3a:86:61:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb  8 21:39:55 2024 GMT
            Not After : May 13 20:39:55 2026 GMT
        Subject: CN=2a71f00e-0200-48df-9cb4-008df9a4a854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9e:f9:2c:74:92:25:ad:bc:62:dd:24:f5:fe:
                    79:31:f9:e3:4d:b4:57:e8:8e:bc:7f:27:d1:3e:d4:
                    e1:70:27:23:20:c0:a2:22:9b:b9:0e:c4:14:02:fd:
                    38:b2:96:1c:1e:b9:a9:43:e4:c0:8f:16:8b:2f:dc:
                    45:e4:5a:c6:7b:30:b9:51:08:77:40:ff:ed:9c:8c:
                    a9:91:09:42:e2:08:97:e4:73:f0:d1:9f:37:e3:cb:
                    81:31:ea:02:46:d2:8c:96:17:4f:49:7d:a6:66:ad:
                    f1:96:8a:61:ab:1b:a1:57:d8:38:a5:61:da:d8:04:
                    b3:57:be:52:e0:29:49:0b:f0:15:84:0e:8a:9b:98:
                    b1:b7:23:c5:8a:b8:55:84:72:8a:6d:78:e6:2b:38:
                    94:f9:b8:67:96:e6:de:c7:cf:cb:4e:a0:22:f9:7a:
                    5f:2d:60:34:93:23:08:93:74:16:a3:ae:80:3a:57:
                    b2:07:d7:8c:e0:a9:13:91:15:e0:33:79:ae:2a:34:
                    c5:27:1c:1b:fa:ee:04:23:a8:c2:65:54:b0:3a:eb:
                    15:30:c9:82:3f:04:1a:ab:b7:d1:c7:1e:e7:23:e6:
                    46:82:2d:50:39:ec:67:be:a8:09:ee:57:94:61:ca:
                    2e:1a:9b:eb:9e:1a:e9:8e:a1:a6:ca:c1:d7:1e:8b:
                    d7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd26::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22855

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:35:be:45:5d:62:81:86:f9:04:af:f7:f7:a3:f3:88:2d:e4:
         d2:3b:ce:b1:a5:30:fb:5f:c2:bc:02:f4:5a:6e:17:4e:80:91:
         82:c8:30:4f:97:61:80:96:58:b0:94:74:90:d9:95:7c:69:28:
         6f:54:1f:d8:16:7a:13:0d:d5:73:85:e7:b3:9d:48:fd:ba:31:
         df:24:b3:7a:a6:1a:a3:a2:5e:1d:45:9e:25:45:a3:0b:58:d6:
         c0:23:b8:4a:a8:f3:04:bb:7c:52:4e:8a:b7:75:40:43:f8:b1:
         44:02:b8:91:bd:67:83:c5:1e:bd:78:cf:d3:b9:c2:a1:d2:b1:
         e0:01:ac:0f:91:0d:4d:a8:0f:0c:6f:9f:9d:f1:80:59:ba:c6:
         c2:89:dd:85:a9:95:ef:80:41:07:d4:ef:23:17:08:8f:7f:e8:
         3d:b3:2c:99:b1:fb:90:9b:25:2d:2b:9a:84:3d:00:1b:55:2e:
         05:91:88:d3:d3:9c:b5:b6:46:85:44:c0:6f:85:3b:e7:66:bc:
         1a:68:a6:46:01:f2:68:a0:02:63:67:94:a7:85:bf:da:9e:b7:
         fa:88:0f:9f:b7:a3:b8:8a:af:6a:92:42:86:1a:a0:26:93:9a:
         c3:d9:88:19:95:c5:e1:4f:b7:84:fa:2c:ce:fa:a8:39:57:61:
         6d:c4:23:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----