Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5.cer
File:                     30040710-7ccf-4c85-98c7-8d6246d146f5.cer (raw, json)
Hash identifier:          Svxrw4DAyjY1Ng0tOZH8pos7SVtTwb9P8Aj7HteOIZs=
Subject key identifier:   88:49:6C:9A:06:41:D7:B2:2E:6D:FF:EC:B6:CD:24:5B:B7:BB:0A:31
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584593BEE8FC38D561968E774900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/30040710-7ccf-4c85-98c7-8d6246d146f5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 Apr 2024 15:54:34 +0000
Certificate not after:    Tue 21 Jul 2026 15:54:34 +0000
Subordinate resources:    AS: 399478
                          IP: 23.176.240.0/24
                          IP: 2620:95:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:be:e8:fc:38:d5:61:96:8e:77:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr 17 15:54:34 2024 GMT
            Not After : Jul 21 15:54:34 2026 GMT
        Subject: CN=30040710-7ccf-4c85-98c7-8d6246d146f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7f:18:98:54:e0:fc:a2:0b:4a:bf:fc:15:ae:
                    ce:be:9a:96:ab:66:f8:d3:b9:7c:d3:85:75:e6:b9:
                    37:d6:8a:20:07:9d:e6:d8:31:18:1f:a0:59:5f:ab:
                    13:5f:80:b1:bf:06:4f:e3:29:09:fd:d4:4e:1c:ed:
                    95:f3:e1:54:cc:c3:c0:f9:32:13:84:bf:b1:a4:03:
                    cd:5f:6f:c7:45:41:2b:f6:76:56:e2:60:9b:8a:28:
                    f6:ec:5f:d8:28:e6:56:98:72:f3:50:8e:7c:10:04:
                    d7:2c:6d:08:21:91:9e:dc:ec:66:84:d5:70:31:1b:
                    0d:c7:e2:39:22:ac:ec:fd:b4:ff:a8:9e:3c:d2:10:
                    37:bb:fe:53:83:3e:cd:bf:28:90:89:2e:7a:58:44:
                    e0:e6:17:c3:ec:75:a6:2c:69:17:25:4a:63:4b:16:
                    dc:68:48:d2:df:58:3d:99:97:e2:61:11:5d:81:0f:
                    32:72:79:ee:93:ef:82:d7:91:56:82:a3:47:9a:fc:
                    e7:c0:bc:13:40:20:12:21:81:98:c5:b8:ec:07:d5:
                    7e:b8:2f:14:d1:6d:a5:3e:b6:7f:42:3b:0a:27:ff:
                    f4:9b:a2:6f:e3:69:56:b1:7d:65:3d:76:93:2e:68:
                    86:51:5a:85:86:57:1e:ab:28:5c:76:62:77:c7:95:
                    6b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:49:6C:9A:06:41:D7:B2:2E:6D:FF:EC:B6:CD:24:5B:B7:BB:0A:31
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/30040710-7ccf-4c85-98c7-8d6246d146f5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.240.0/24
                IPv6:
                  2620:95:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399478

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c7:76:99:d5:c8:be:98:bd:30:f9:42:e3:bd:77:12:18:7c:
         7c:b1:17:bb:a0:50:6a:70:12:33:3c:3d:25:0e:50:43:a0:ee:
         78:e3:71:1e:d4:a1:59:3d:7c:ab:fe:5c:30:82:a1:6d:73:b3:
         d3:ef:e5:5f:0a:96:c7:66:76:fb:17:b3:ff:ff:4c:12:65:81:
         81:61:0e:11:41:c3:ed:c9:42:1d:d3:0d:80:7e:ce:45:39:eb:
         fd:f4:39:95:20:36:ab:40:9b:8e:e5:ca:98:cc:f1:29:96:e8:
         4a:77:67:ba:40:2d:60:e5:da:59:e7:32:09:e3:9b:2b:b3:bf:
         85:89:00:c7:65:fb:3b:2b:ea:61:70:b9:29:70:d8:04:f3:93:
         17:99:e2:ca:27:db:a4:84:9e:df:5d:51:54:22:b0:2b:0b:63:
         ff:d5:49:91:c2:d4:1c:79:58:45:fc:b0:a5:30:75:6b:50:39:
         cb:d9:52:45:1e:1c:11:c3:d8:63:bc:9f:be:e9:83:06:b7:59:
         a2:9d:11:49:cd:08:d9:c3:6f:18:2a:a9:64:9f:18:2c:ee:46:
         d0:7e:3a:0e:98:cd:86:5a:24:1c:e0:f1:c5:2a:ed:8d:43:af:
         09:dc:84:50:a0:3b:8b:f8:4d:36:b7:72:81:4a:d3:02:27:b6:
         31:3c:da:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----