Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da.cer
File:                     55b99675-96ed-4747-a93e-2c02e6c365da.cer (raw, json)
Hash identifier:          rfo9ddOJfGweV74K890vAgp9XP8hm44cABkWnDGeiU4=
Subject key identifier:   87:6D:C8:57:26:48:90:8E:07:74:3C:AB:3A:95:1A:6F:F0:CF:73:55
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858458612A3C843E156B31A4CD680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/55b99675-96ed-4747-a93e-2c02e6c365da.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 12 Apr 2024 18:21:57 +0000
Certificate not after:    Thu 16 Jul 2026 18:21:57 +0000
Subordinate resources:    AS: 46980
                          IP: 23.163.16.0/24
                          IP: 2602:fd20::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:12:a3:c8:43:e1:56:b3:1a:4c:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr 12 18:21:57 2024 GMT
            Not After : Jul 16 18:21:57 2026 GMT
        Subject: CN=55b99675-96ed-4747-a93e-2c02e6c365da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6a:98:f0:d8:39:5e:e5:d0:ad:1a:38:0b:e8:
                    3e:d6:98:e6:d7:99:e9:45:91:0a:4a:8a:88:7d:85:
                    cc:10:dc:79:8d:b3:23:06:25:9b:68:e3:35:90:b4:
                    83:8a:5b:24:01:f8:df:5b:aa:62:83:fd:41:a3:8b:
                    a3:d0:49:33:62:0d:15:d4:19:5a:fb:71:e1:b9:8b:
                    4a:22:7e:56:89:17:18:aa:d0:2b:ed:0e:95:61:a4:
                    d4:b5:4f:dd:6f:c2:35:a3:87:76:8b:b3:1b:13:63:
                    b4:e9:30:fe:6b:73:aa:db:8b:de:6f:de:e5:1e:0e:
                    9d:cb:f7:d0:1a:23:12:c5:46:02:c2:48:05:8b:31:
                    9d:96:1e:20:ac:7e:f3:11:9c:ce:ad:b3:c9:9c:55:
                    0e:bd:b9:3c:f7:cc:e3:66:67:fb:4e:df:e9:a6:17:
                    0e:18:5b:4e:9a:f0:a0:f4:d4:35:ac:b4:39:5a:ec:
                    81:fa:5d:56:f2:4d:6f:7d:ab:91:f0:f3:0a:fa:06:
                    c8:d8:e2:10:6f:6f:d8:0a:fa:30:98:6f:a9:99:0f:
                    4e:19:a3:d8:30:b0:48:ef:a8:97:32:98:24:c4:48:
                    c5:ae:83:74:12:13:c6:0e:98:3f:55:31:33:31:0a:
                    9d:09:48:19:9a:39:51:4b:cf:1a:d3:57:13:d6:2a:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6D:C8:57:26:48:90:8E:07:74:3C:AB:3A:95:1A:6F:F0:CF:73:55
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/55b99675-96ed-4747-a93e-2c02e6c365da.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.16.0/24
                IPv6:
                  2602:fd20::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46980

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a5:58:b2:24:c4:a2:db:65:06:83:61:a5:d7:ac:44:83:f1:
         f1:6c:e8:cf:7d:6d:00:85:9a:ca:2a:89:9e:03:71:1b:88:a8:
         44:74:d0:3a:b0:72:0b:16:18:db:fe:70:00:e0:cb:c5:ba:b7:
         1a:bd:46:5d:ed:88:de:e1:94:a3:4d:d8:ad:d7:1b:d8:b7:81:
         68:18:a2:25:77:68:7c:f9:e0:25:00:5c:17:6d:25:b8:7e:7b:
         c9:ec:a7:35:e0:67:84:11:ae:88:07:4d:dc:9e:fe:3c:db:a1:
         b0:8e:43:88:61:fa:c1:09:f2:ed:b1:db:60:18:d5:93:b6:19:
         9e:37:63:d4:c1:4b:82:8f:10:d7:a0:81:36:00:4a:50:2d:a7:
         a2:3a:eb:a1:05:0e:1e:cb:0d:c2:5c:2c:27:d0:4d:90:13:36:
         0c:ce:34:94:23:e0:b9:34:39:2a:6f:45:ff:ef:e3:a9:0e:8d:
         a7:8c:c2:bd:aa:f8:5e:56:1a:c1:e0:a5:fa:1f:d3:a0:b4:ff:
         73:74:ec:90:d4:d5:03:59:71:52:47:36:68:33:98:c2:1f:13:
         94:f6:37:e7:e3:fe:c7:45:1b:3c:77:59:ee:88:2d:4d:b1:2b:
         b7:86:23:bf:e2:f2:ae:b7:bc:42:4d:7b:69:07:a0:99:7b:5b:
         10:d2:42:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----