Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
File:                     33c78d60-34eb-4fed-8e25-925b95a30c8e.cer (raw, json)
Hash identifier:          n5FVeEMKpn4iF3OBfohiZp6dcEKGWvaxK3dHqDIx7Cc=
Subject key identifier:   5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858473F68F4BC2F712DDFC4ED6480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 17 Sep 2024 20:27:21 +0000
Certificate not after:    Mon 12 Oct 2026 15:02:50 +0000
Subordinate resources:    AS: 33039
                          IP: 23.173.104.0/23
                          IP: 2602:f95c::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:68:f4:bc:2f:71:2d:df:c4:ed:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Sep 17 20:27:21 2024 GMT
            Not After : Oct 12 15:02:50 2026 GMT
        Subject: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9e:15:32:c6:da:3c:5c:0e:2c:38:69:19:99:
                    46:61:34:2a:b4:e3:4c:c5:50:70:db:3f:55:a5:26:
                    60:23:0d:de:28:43:5c:6f:33:9f:9e:ef:b7:99:ac:
                    43:f2:7a:d9:87:2a:7f:96:1b:5e:ed:be:eb:cc:40:
                    57:a5:f9:97:a7:da:a4:8a:07:57:4f:23:f6:c2:56:
                    bc:43:a1:7a:50:32:99:d3:0f:16:83:6e:86:de:b9:
                    a9:69:8f:02:67:ee:aa:1e:a9:fb:26:0b:62:a0:a2:
                    2a:2d:c7:9f:d9:61:ef:e5:13:da:2e:67:03:59:4d:
                    50:36:96:76:08:7b:3e:91:1d:4b:9e:14:8d:5d:b4:
                    bd:01:30:47:a8:8e:a3:d9:35:66:c6:dc:d9:67:ac:
                    18:98:91:a1:5a:b8:59:75:e8:0a:95:a6:19:ef:75:
                    bd:db:a9:bb:17:c3:ab:54:90:00:d9:36:e0:49:f5:
                    25:62:97:4d:7f:fb:56:f3:44:fa:40:aa:89:22:1d:
                    71:ed:ad:5b:2f:fd:a3:f8:37:0e:23:19:4e:9b:0d:
                    0e:35:8a:fd:86:bd:03:62:a0:2b:3f:7e:8b:8b:a5:
                    05:1e:f1:26:2c:0c:fc:30:cd:5f:4b:cf:07:ac:ca:
                    93:cf:a6:62:f3:53:b2:c7:07:dd:9b:55:53:e1:22:
                    92:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.104.0/23
                IPv6:
                  2602:f95c::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33039

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:96:59:43:2a:17:d7:99:d2:bc:fc:a7:09:d9:20:7c:a7:51:
         bc:11:e2:5e:a0:d4:7c:df:1e:b3:73:10:8a:47:5e:ad:ca:30:
         48:40:3b:19:c9:51:96:56:ef:75:f2:f1:0b:8b:f8:63:1b:89:
         6f:94:16:72:f3:dd:85:e1:45:b8:19:d8:50:c7:2e:36:28:a8:
         97:6e:7e:8a:a7:f2:e4:81:2c:9a:2e:b8:ba:18:9c:5f:1a:68:
         33:da:1e:c6:76:af:31:7a:a4:bd:93:be:cb:9f:cf:57:74:5f:
         e3:ef:0f:70:65:f1:5b:fc:6d:41:5d:bf:08:c2:31:72:75:91:
         e3:34:7d:0c:1d:1d:6f:9d:00:aa:45:4e:4f:d4:49:e9:59:ee:
         e6:d6:19:97:30:62:4e:cf:7e:a6:fc:57:fc:d2:c3:90:11:86:
         15:75:67:df:f6:dc:b7:b9:79:af:38:24:f8:eb:ee:5e:79:36:
         a9:f8:bb:a8:59:0c:46:1e:71:b0:6d:21:30:04:5a:33:1d:35:
         8c:18:5c:56:58:0b:7d:67:29:17:2b:54:b5:77:96:c6:77:9d:
         88:35:ef:3c:47:10:ce:0c:1e:ce:05:fa:d6:0c:ce:50:a4:7c:
         a4:99:dd:8a:c1:17:4f:4a:28:cb:49:4e:f9:3e:66:f5:fe:aa:
         dd:ce:2e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----