Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c.cer
File:                     4cc1eaba-95c4-4b20-a824-3ee7d92adc0c.cer (raw, json)
Hash identifier:          VDkA56G9UcNCfkvv1MN0R2VJAu/8/AyNR/nHrOman78=
Subject key identifier:   02:F9:8A:03:95:94:29:ED:32:1F:86:52:F9:5B:FC:BA:3B:B2:0F:83
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584498CD4EC3EE46DEE9BCE1E9E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 Jan 2024 18:35:41 +0000
Certificate not after:    Wed 22 Apr 2026 17:35:41 +0000
Subordinate resources:    IP: 98.142.176.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:98:cd:4e:c3:ee:46:de:e9:bc:e1:e9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 18 18:35:41 2024 GMT
            Not After : Apr 22 17:35:41 2026 GMT
        Subject: CN=4cc1eaba-95c4-4b20-a824-3ee7d92adc0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d1:43:b1:34:29:ba:ad:41:2b:d4:68:d1:2e:
                    bf:ac:75:40:2a:a5:7c:26:d3:9e:72:8a:76:22:a0:
                    ee:d5:e4:b5:4f:e0:20:8d:e5:46:97:e0:62:bf:bb:
                    c3:d5:f5:af:54:75:5b:58:11:97:16:6c:18:e6:e6:
                    72:2d:bd:18:a9:29:a6:cb:30:15:24:0d:ac:91:b5:
                    eb:9a:d0:82:89:0a:0d:3c:c2:d8:db:7d:89:b9:8b:
                    07:fc:37:ed:f7:79:4e:d0:ba:f4:88:32:38:2a:9c:
                    7f:e4:e8:66:4d:87:a2:69:32:80:98:5e:24:87:d4:
                    f9:fe:aa:f3:24:cc:44:a9:2b:07:b2:65:be:e8:03:
                    5a:db:76:84:5c:9a:1c:d9:52:94:2c:98:d7:f6:6f:
                    a5:7c:e1:79:17:38:38:7b:cb:7c:d6:44:68:47:a0:
                    4b:31:38:8a:1e:05:73:19:32:03:8f:1e:14:2a:1a:
                    f6:af:f6:d6:3d:77:51:0e:b8:e7:b1:9c:a5:d3:c5:
                    2b:76:eb:4a:c3:ef:df:56:72:e1:8a:f3:0a:48:3d:
                    f9:81:de:9d:68:22:2f:4d:b0:af:f5:ee:ba:2e:19:
                    00:34:39:9a:cd:02:4f:b4:13:27:76:77:ee:cd:33:
                    57:6c:0f:0e:d6:a8:8a:9e:18:b7:83:e1:f3:c1:e0:
                    73:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F9:8A:03:95:94:29:ED:32:1F:86:52:F9:5B:FC:BA:3B:B2:0F:83
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:6b:0d:ff:80:03:dd:c8:95:0e:47:35:b0:19:50:11:7e:f5:
         7c:83:d7:5b:5f:57:0c:b3:47:73:f4:44:a7:53:f9:0a:46:78:
         6a:43:04:ab:cb:6e:14:ba:62:81:16:5d:17:e9:ee:8c:11:69:
         65:eb:57:d7:69:dd:12:16:6e:43:6f:b2:c5:02:27:a5:d8:15:
         7b:f2:fc:b6:32:6e:73:b8:13:f1:6f:61:e3:74:aa:04:96:38:
         07:0b:1b:cd:d2:b6:26:81:eb:32:83:68:e1:a4:f5:f7:83:b7:
         28:d7:3a:5a:e6:43:5f:c3:2d:39:f3:cf:a5:23:2b:78:bf:a8:
         fb:34:8d:e9:09:2e:16:30:9c:3f:d4:be:b8:32:e3:bf:2f:f2:
         5c:74:74:9c:78:15:70:a8:6d:0c:1a:6f:d3:7e:de:af:5a:4a:
         e5:bd:a2:8f:a3:8b:b4:2e:a2:8c:00:8a:69:79:d7:76:2b:86:
         67:bf:40:9e:84:42:0b:44:4a:cf:e8:2e:6c:ab:d3:f7:d6:26:
         5f:e5:c7:7f:c4:b2:9f:5f:92:f1:ef:0a:10:75:69:2e:cd:12:
         4d:b4:9b:4a:81:93:16:fb:ae:52:74:34:df:4d:92:f3:9d:af:
         ae:45:9f:6b:7c:4b:75:b3:39:d9:6a:d4:86:7a:53:7d:b4:c5:
         a0:e4:90:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----