Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bdea28d-3e35-4d8e-9e70-30d169289f34.cer
File:                     2bdea28d-3e35-4d8e-9e70-30d169289f34.cer (raw, json)
Hash identifier:          jlEhm9FdiPJM+Z5LgJ6k3zSS/JIFaDf13cpkn3DulDI=
Subject key identifier:   B7:A6:CB:CC:A6:78:C2:5C:07:B0:A8:ED:0F:CB:22:77:F0:2E:47:75
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584556941864B553BE55214D8BC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bdea28d-3e35-4d8e-9e70-30d169289f34/2bdea28d-3e35-4d8e-9e70-30d169289f34.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bdea28d-3e35-4d8e-9e70-30d169289f34/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 26 Mar 2024 18:03:59 +0000
Certificate not after:    Mon 29 Jun 2026 18:03:59 +0000
Subordinate resources:    AS: 19508

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:94:18:64:b5:53:be:55:21:4d:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Mar 26 18:03:59 2024 GMT
            Not After : Jun 29 18:03:59 2026 GMT
        Subject: CN=2bdea28d-3e35-4d8e-9e70-30d169289f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:61:ff:75:db:cc:3d:9a:fa:20:20:c0:fa:
                    81:cb:7d:9d:72:e3:20:de:fd:9d:e3:d5:f8:2f:f7:
                    ec:7f:78:44:ea:16:49:ed:00:79:76:c3:f1:9c:c4:
                    a6:33:ca:95:b9:eb:13:4e:92:0e:ab:fb:7c:3c:2e:
                    84:45:be:c8:56:14:c2:47:dc:86:03:e3:3c:7f:5c:
                    0c:60:64:3d:f6:52:c9:26:a2:dd:f3:3a:11:e2:68:
                    49:c7:f1:03:fd:43:20:d5:07:1e:eb:f5:77:7a:33:
                    14:c5:07:32:27:45:79:36:6a:d1:21:9b:1a:da:34:
                    90:02:2a:a4:39:18:cd:fe:f8:2a:0a:cb:c9:18:01:
                    ed:2e:ca:b6:82:d7:a2:b3:c2:96:29:ff:df:98:f0:
                    7a:35:64:36:66:76:29:39:4d:fb:1b:80:4a:31:f7:
                    b5:25:3e:14:94:80:98:90:26:3a:28:95:e0:ef:52:
                    f5:93:45:78:fd:ae:b0:cb:cc:08:78:d7:e1:36:43:
                    6b:90:db:e2:15:7f:f8:e4:8a:63:a0:c5:04:e4:ae:
                    ed:25:d1:01:f1:dd:5a:61:0e:72:85:a4:e7:0f:27:
                    2d:58:c1:21:e4:d0:d1:0e:a6:46:94:18:ca:2a:dc:
                    17:42:55:69:73:35:80:11:ad:b2:49:6a:16:3a:79:
                    ef:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A6:CB:CC:A6:78:C2:5C:07:B0:A8:ED:0F:CB:22:77:F0:2E:47:75
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bdea28d-3e35-4d8e-9e70-30d169289f34/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bdea28d-3e35-4d8e-9e70-30d169289f34/2bdea28d-3e35-4d8e-9e70-30d169289f34.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19508

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f0:d7:7c:26:98:94:26:0d:71:a9:f1:21:fe:0d:2d:be:cd:
         73:58:22:de:73:1e:17:2e:c8:22:c3:cd:4a:6e:49:fe:35:5d:
         16:77:48:2c:ff:37:29:f6:d4:53:f2:89:ec:8e:da:69:de:68:
         3c:40:35:53:31:ba:dd:d6:5c:b3:84:62:96:54:bc:61:9f:f8:
         b1:87:e2:43:1f:05:f5:76:ad:6a:6a:0a:04:08:76:a7:7c:0a:
         40:3e:59:a9:3b:1f:5d:ff:4f:7d:31:41:75:4d:30:88:8f:b0:
         0a:f9:3a:8a:94:2a:7d:f3:5a:2f:48:3a:cd:e2:b9:13:44:11:
         5f:87:ba:e2:f7:72:03:95:9a:dd:56:c9:b7:53:e4:5a:e9:df:
         79:d3:ab:30:4f:fc:0a:35:d3:95:fe:dc:03:a2:a5:84:a1:ff:
         cf:65:d1:56:32:93:49:0b:8a:ea:1c:c4:13:1f:02:c8:fc:2c:
         e7:b9:42:38:c2:0c:e7:57:b7:92:9b:df:5e:c9:9b:17:f0:50:
         ed:11:a6:7a:23:7e:c6:48:95:df:91:31:2d:9a:46:39:25:d6:
         03:39:3b:a9:f6:b4:2a:bf:64:e2:92:af:3e:ad:3e:ae:a2:f7:
         76:22:5f:db:68:e9:1d:77:9f:24:19:5e:5c:0c:e7:13:32:19:
         39:3d:37:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----