Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9.cer
File:                     2bd92006-9133-44da-89c6-5e9014a854c9.cer (raw, json)
Hash identifier:          5geahUZr2hrQawPqvO2vIYTOzhvwA3m6qMEc0hhWeKk=
Subject key identifier:   DC:1F:BD:E8:05:8E:29:0E:F9:48:55:86:F7:1E:69:7A:0E:DE:7B:07
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584859512F8711C76C9537643F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 27 Dec 2024 19:57:25 +0000
Certificate not after:    Tue 23 Jun 2026 16:41:41 +0000
Subordinate resources:    AS: 27489
                          IP: 160.79.127.0/24
                          IP: 2602:f966::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jan 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:59:51:2f:87:11:c7:6c:95:37:64:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Dec 27 19:57:25 2024 GMT
            Not After : Jun 23 16:41:41 2026 GMT
        Subject: CN=2bd92006-9133-44da-89c6-5e9014a854c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fa:08:95:da:c0:d3:d4:ff:e0:8b:55:bf:bc:
                    81:93:d9:e5:76:ba:83:5c:c7:57:b2:1d:64:76:93:
                    97:7e:ee:54:f8:99:b1:e1:68:cb:96:38:19:be:d0:
                    fe:2f:28:56:71:9b:e1:93:4b:f0:13:4b:62:35:1b:
                    b2:e0:b9:25:58:dc:31:78:e9:81:58:8a:c9:8e:35:
                    28:6d:f3:be:8e:14:e7:55:45:49:4c:76:46:11:55:
                    b6:91:ad:7a:4c:8b:1e:b7:fe:fa:a5:a7:fa:ec:3c:
                    6f:93:d6:21:82:1c:c8:d2:71:63:a2:7f:22:c8:ee:
                    d8:f1:62:5f:3c:3e:d0:ec:25:ae:51:5e:09:cd:fc:
                    3b:f2:21:25:02:8f:e2:bc:a9:ff:d4:f4:59:7a:05:
                    e9:e0:a2:33:47:7a:c2:38:34:bc:ff:8a:dc:e5:91:
                    c6:90:57:80:4d:2f:aa:3b:7f:63:84:84:7f:f5:bc:
                    2a:17:22:21:f6:73:69:c9:9d:42:19:1d:a3:55:33:
                    20:78:c3:bb:1c:f2:c9:33:d5:aa:f3:c7:d3:69:44:
                    b0:fa:3c:e4:be:fa:a3:37:fa:38:00:c9:a3:77:1c:
                    2d:3f:52:bb:b8:b3:f3:ad:93:b0:62:ae:b9:b8:d6:
                    1d:3d:d1:02:93:61:63:75:08:9b:65:54:04:09:60:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1F:BD:E8:05:8E:29:0E:F9:48:55:86:F7:1E:69:7A:0E:DE:7B:07
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.79.127.0/24
                IPv6:
                  2602:f966::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27489

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4a:b7:53:90:0e:ec:26:ec:64:2b:ba:fc:b2:fa:bf:ff:49:
         c9:20:04:3a:cf:16:0d:b5:42:60:69:86:85:00:7d:7a:0d:33:
         ee:54:16:84:86:bd:e5:3a:78:30:ac:e9:99:12:70:a4:56:60:
         14:86:bf:9e:5a:3a:ae:f8:5a:91:93:0a:c1:70:07:45:34:de:
         c8:84:b6:a8:80:f1:65:c7:e0:ab:74:a1:25:1f:cb:7c:40:31:
         46:26:15:7a:8e:d6:e9:a5:4c:cb:21:21:95:74:04:a0:2d:42:
         02:b3:85:6a:95:30:bb:ae:c7:72:ff:7e:cf:56:44:8d:b7:57:
         80:25:db:e6:9f:c0:76:1a:a0:76:d0:7b:e3:b8:a5:3d:e4:21:
         2a:5f:68:47:56:41:5a:b7:f0:c4:dd:be:fc:cc:c8:a0:e6:98:
         c1:d1:02:7c:a8:d6:a5:fd:c4:6a:43:34:14:4a:a6:dd:6a:1a:
         fa:48:22:77:f5:a6:5d:73:dd:c5:57:40:62:74:57:bf:c7:4e:
         62:68:c0:2a:7c:5c:05:ec:1a:14:ba:8b:38:92:41:aa:65:6c:
         fa:15:c8:4b:41:a1:43:e9:f4:c3:a7:51:ce:24:6a:8a:1f:d9:
         30:57:d8:86:83:31:5d:40:cd:85:b3:99:71:77:fd:25:65:cb:
         16:fe:fc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----