Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.cer
File:                     4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.cer (raw, json)
Hash identifier:          ULpqLkbi54Y/DMWVnVYBuTVLPgf12MD1jIvBABN9yDI=
Subject key identifier:   53:E2:5E:B8:51:AD:FF:5D:A7:50:EB:28:1F:DD:BB:A6:9F:8C:62:62
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844BCAEFE7A3959446A4356BAC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 31 Jan 2024 15:03:42 +0000
Certificate not after:    Tue 05 May 2026 14:03:42 +0000
Subordinate resources:    AS: 399125
                          IP: 2602:f98c::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:bc:ae:fe:7a:39:59:44:6a:43:56:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 31 15:03:42 2024 GMT
            Not After : May  5 14:03:42 2026 GMT
        Subject: CN=4a01faf0-6a8e-4e38-92b4-49d20c47fcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3c:51:c4:9b:14:0d:43:a5:d8:ca:38:ce:39:
                    d7:3b:79:96:28:ca:ab:08:cd:1a:3d:5e:cd:2d:ae:
                    68:a0:97:f7:be:40:34:c1:3f:c7:b2:14:22:b5:a2:
                    20:e4:c7:8e:7f:0f:5d:9b:bb:3a:d1:c4:97:33:ee:
                    15:38:26:4a:90:00:84:d7:d1:d0:30:1d:01:9b:84:
                    03:06:35:b9:a1:4c:12:8d:91:61:b2:7b:6d:d3:d5:
                    5e:fe:12:fa:f3:bb:20:e5:a4:4c:ed:50:d7:00:99:
                    b7:fb:be:08:6b:23:52:bf:c2:b5:ef:df:85:6d:a8:
                    18:91:2a:78:32:f2:b2:43:cb:1f:33:6b:8c:23:cd:
                    89:0a:16:78:ec:be:dd:96:00:54:89:e5:e2:bc:88:
                    bf:ea:de:0e:bc:df:14:14:ed:48:fb:48:7a:e1:cf:
                    80:9e:e9:0a:a8:d5:6b:59:c7:bf:1d:58:b5:d8:ae:
                    07:f6:4c:39:42:ad:95:2c:e5:fa:65:57:18:a5:3a:
                    74:bf:49:fc:d7:12:04:14:cf:eb:07:1c:71:25:26:
                    5a:10:83:b5:31:77:81:a4:e0:4e:d4:33:90:9d:7c:
                    18:a8:06:87:1b:24:c5:e3:da:7d:f9:c8:a7:d8:ba:
                    4e:7f:66:ce:32:9c:68:38:7c:d4:11:48:e6:8b:c2:
                    eb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E2:5E:B8:51:AD:FF:5D:A7:50:EB:28:1F:DD:BB:A6:9F:8C:62:62
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f98c::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399125

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:14:60:12:e3:a3:6b:00:61:94:f4:39:5d:41:a7:9d:6c:70:
         e4:69:30:a4:35:b0:91:b5:e3:03:2c:3d:d6:be:bb:04:7d:0f:
         32:21:50:1e:cc:3d:0b:d0:e9:a7:44:9c:0f:c3:1b:e1:77:51:
         99:79:e1:7a:4a:9f:05:c5:e1:73:f9:bd:f6:ef:d5:2d:1f:9c:
         08:8f:47:1c:2c:0a:06:42:21:24:d8:5e:82:45:31:9c:10:a9:
         56:6c:24:c2:fc:06:9b:69:d9:1b:f6:47:c2:70:a5:c9:36:2c:
         40:fb:e1:8c:b1:66:79:7b:80:ea:b3:a4:e5:fb:24:a1:36:eb:
         4a:7b:97:1f:43:df:e5:9a:3f:b5:49:1b:2e:42:51:1f:84:a8:
         e3:42:1c:f6:09:3c:11:57:43:2d:3b:de:74:59:52:cf:a5:83:
         c6:76:4d:6b:7b:67:be:2e:c7:65:95:09:13:45:86:2a:a8:ae:
         1f:0a:eb:54:be:df:d1:e6:a0:35:25:8e:ea:a6:2b:ac:b4:25:
         1c:ce:31:a3:9b:87:3c:1c:af:3c:fb:7d:63:7b:df:a5:72:50:
         37:ab:2f:3b:99:d5:38:5c:b8:7a:84:c6:c5:c8:2e:10:1d:90:
         d9:61:b7:71:83:98:50:f1:9d:30:30:1c:3c:4b:8b:82:07:5f:
         1d:10:c0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----