Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
File:                     5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer (raw, json)
Hash identifier:          ON1Wxrm+fergtU1h1f9cSDrObGM6ZZsYl3ZyQOzQhHY=
Subject key identifier:   06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844BAF146F6B117C4691DF56900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 31 Jan 2024 00:05:38 +0000
Certificate not after:    Mon 04 May 2026 23:05:38 +0000
Subordinate resources:    AS: 22135
                          IP: 173.242.0.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ba:f1:46:f6:b1:17:c4:69:1d:f5:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 31 00:05:38 2024 GMT
            Not After : May  4 23:05:38 2026 GMT
        Subject: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f8:a3:9c:54:7a:e5:55:91:84:5d:0b:1a:08:
                    ba:11:c8:ee:db:26:25:be:de:5e:c8:7b:5d:67:2a:
                    f8:82:5d:d3:fa:0e:05:c8:d8:b2:9f:11:83:59:08:
                    ef:73:cf:a7:2f:1f:47:3a:1e:94:5c:20:a0:98:94:
                    8b:81:54:2c:1b:21:3c:63:ac:2f:f1:e4:36:4b:b7:
                    e3:63:2c:e4:e0:61:e0:83:84:67:01:1a:23:4f:4d:
                    d7:6a:e7:9c:d9:0a:3c:73:f7:75:e9:da:af:46:61:
                    5f:11:7f:38:61:8e:ea:ca:9d:e6:15:e2:40:db:12:
                    8e:3f:f7:cb:88:e7:cb:12:d8:63:18:62:65:22:68:
                    67:d2:4a:14:bd:59:d2:7b:c0:31:bd:e9:26:29:1d:
                    07:d1:56:4c:90:d0:be:14:b6:a0:cf:8d:01:01:e0:
                    0f:96:ad:99:bb:af:6f:68:6c:b1:d9:66:70:b3:33:
                    82:a5:69:93:89:e7:d9:28:4f:fa:e3:69:f6:d9:94:
                    0f:69:d1:31:4c:e4:64:24:da:68:fc:09:35:89:64:
                    71:28:48:a6:f2:3a:e0:0d:37:80:41:94:a6:e8:9e:
                    91:bc:40:26:cf:18:68:cf:ee:06:9f:e7:94:1d:1b:
                    a0:78:38:f1:f7:0a:eb:3d:19:10:4b:55:a2:ca:eb:
                    ac:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.242.0.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22135

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ac:59:6b:af:91:5e:ce:c1:9c:95:aa:57:9d:e6:8c:c5:69:
         06:f1:9c:9f:ae:8b:4a:5f:e7:28:4c:c6:2a:87:4a:78:11:35:
         77:e7:a3:e6:ce:6b:8c:e7:b7:5d:2b:fc:20:64:ab:8a:4c:00:
         0b:d0:e1:91:53:09:b6:c2:d2:3a:06:11:ff:42:12:46:53:de:
         d7:12:8c:84:38:65:82:ed:f8:36:cb:fb:c5:7d:ca:ba:fe:2e:
         a8:ac:2a:fd:e2:63:41:08:51:ab:15:2a:19:03:75:1f:30:68:
         15:b2:f9:7b:66:38:26:0c:23:bf:52:dd:2f:3f:37:9d:2e:ef:
         af:4f:e0:a5:c2:e4:93:15:9f:7a:2f:85:7f:58:67:6b:d6:f4:
         72:43:87:3c:a6:14:3b:a7:0f:db:f7:4f:4b:06:39:30:82:8d:
         d2:9a:6e:bc:df:af:b5:85:22:30:4e:3c:48:a5:73:a6:e0:84:
         6c:b0:0d:eb:d1:00:6e:94:b4:c5:79:c3:21:bf:14:01:92:b0:
         67:23:a9:9c:0d:c5:78:c7:b6:41:70:85:63:87:fd:49:92:b7:
         96:f4:05:60:1b:46:83:e3:ad:ed:33:b1:9f:f0:ef:dc:bd:93:
         2c:49:c2:ef:4d:ec:c9:bc:37:5e:e5:a6:c7:d3:e1:48:80:0c:
         a3:ca:73:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----