Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer
File:                     371710da-4c28-4923-921b-e1d710cec29e.cer (raw, json)
Hash identifier:          nrRC6DN67M/w0vafDRlH/KIzHDFRmOBEQGV8s9+OEVo=
Subject key identifier:   5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844F4A85451F4490C79DF474330
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 20 Feb 2024 16:15:32 +0000
Certificate not after:    Mon 25 May 2026 15:15:32 +0000
Subordinate resources:    AS: 36861
                          IP: 208.68.20.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:a8:54:51:f4:49:0c:79:df:47:43:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb 20 16:15:32 2024 GMT
            Not After : May 25 15:15:32 2026 GMT
        Subject: CN=371710da-4c28-4923-921b-e1d710cec29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1a:e0:da:bf:29:2f:15:36:ea:3c:86:e7:13:
                    9c:32:28:d0:ac:31:a2:8a:99:e9:e8:f7:13:5d:7d:
                    bf:da:0a:81:9f:1d:70:bd:1a:70:f6:4f:e5:64:29:
                    b8:0a:38:23:b8:cb:a0:88:56:1b:f8:bf:a0:82:9e:
                    ff:7b:d4:55:ee:ad:73:77:44:a3:38:7e:1c:0e:58:
                    9f:e0:a8:26:f6:4d:74:47:1d:73:3e:e8:96:88:af:
                    d3:e5:6d:10:48:0a:78:89:17:16:28:56:3b:8e:a2:
                    32:7b:40:b6:08:9c:13:ab:a3:9c:b9:1d:a3:fe:d0:
                    64:a8:5a:a8:4e:2e:da:94:36:2d:a6:ca:39:30:54:
                    3d:56:a4:8b:a4:00:82:a6:8b:ef:08:18:bd:08:97:
                    c8:b7:e5:f2:b0:d8:20:ef:23:e9:65:1a:b2:01:d4:
                    40:48:bf:27:17:ac:c8:47:65:a3:af:ae:0b:5d:9f:
                    43:7c:d7:ec:1a:c0:14:e8:8f:9f:66:5d:38:71:e1:
                    bd:81:c1:85:4a:74:b5:ca:26:c0:a8:87:67:a3:6e:
                    98:7f:d2:ab:86:a4:02:1e:f3:1b:e6:b9:71:50:0d:
                    61:12:7f:eb:a5:78:54:37:58:ab:5f:70:cc:25:59:
                    ca:67:fb:d3:15:2d:8a:71:1c:55:8e:ee:14:6f:31:
                    9a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.20.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36861

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e4:73:8d:64:49:cb:69:8a:02:af:39:42:10:9b:a5:db:fe:
         95:38:69:06:32:ad:18:71:9e:6c:43:51:ae:ea:d7:ec:b9:f3:
         72:bd:34:9d:a1:d9:af:14:4c:13:ea:63:e9:22:11:5b:d7:a8:
         cf:6a:f7:9c:a6:56:d7:09:b8:ef:33:79:66:68:e0:1d:8f:23:
         87:9c:e4:a6:50:0f:bb:f9:2b:ee:11:47:60:29:13:a4:86:83:
         eb:ba:60:93:6b:28:17:32:ff:c0:cf:18:47:02:77:54:44:3c:
         b4:cd:cc:a1:85:ac:cb:de:eb:65:ac:71:4c:68:58:0a:db:53:
         cb:6e:f7:d3:e3:be:c4:27:c4:e3:c8:e0:8f:4b:c7:a4:f2:b0:
         7b:5d:79:2b:7f:1b:d1:5f:23:b6:69:24:d0:05:ed:c1:8b:a5:
         06:a9:b6:8d:cf:42:dc:91:c3:8c:5e:78:59:e0:ac:52:cb:97:
         83:8b:ba:d3:09:43:63:4b:10:7c:29:93:0b:61:02:16:be:c1:
         9c:e7:f0:95:e9:6e:c0:fb:ec:43:94:5a:55:b3:f9:f0:25:a5:
         13:b2:34:2c:20:4a:d8:d8:2c:6e:80:b8:27:2d:fb:bf:96:26:
         b4:ff:40:02:a4:a1:ac:4c:72:15:ee:35:7f:55:73:2d:6f:a5:
         7f:d9:12:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----