Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
File:                     6c0836c5-0c38-41a2-917d-c9df009f1a31.cer (raw, json)
Hash identifier:          Qa1VrFsQgW5QiZC3YGK+lfNbO8SwP5oO0EqZiSqhG78=
Subject key identifier:   8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844F36CCE013769F435E42BE740
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 20 Feb 2024 05:39:48 +0000
Certificate not after:    Mon 25 May 2026 04:39:48 +0000
Subordinate resources:    AS: 26277
                          IP: 64.235.32.0/19
                          IP: 72.18.192.0/20
                          IP: 216.108.224.0/20
                          IP: 2607:3fc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f3:6c:ce:01:37:69:f4:35:e4:2b:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb 20 05:39:48 2024 GMT
            Not After : May 25 04:39:48 2026 GMT
        Subject: CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b1:f4:07:89:0e:5a:41:e2:cb:3d:5c:c9:f0:
                    ec:e6:20:c3:b6:c3:ee:3b:be:f2:4f:07:ac:41:ad:
                    f6:13:c6:75:e6:81:37:60:8f:9b:1c:f1:39:39:c8:
                    4d:a3:a6:ff:4c:e5:d5:bf:d5:cb:63:72:5f:57:97:
                    bc:94:90:4a:15:fe:25:c5:66:c4:de:ac:6a:65:99:
                    0c:4f:55:0c:78:2f:31:35:36:fc:18:16:33:9a:a8:
                    e1:76:a1:31:50:36:c7:30:8b:07:84:c9:cb:9d:2b:
                    b9:20:5d:de:80:dc:66:82:bd:14:80:0f:6a:1f:4c:
                    3d:07:a6:26:b4:cf:56:cc:42:f3:c0:72:a9:12:34:
                    cb:9d:dc:1e:e6:79:04:c9:8f:6e:d0:d7:e6:33:ea:
                    ff:f8:60:5e:d8:ed:86:bd:2b:48:54:67:89:eb:21:
                    a1:ff:0b:bf:24:b2:74:8f:a4:c3:cc:03:ab:25:14:
                    dd:27:3c:c3:3a:9a:b4:b5:2d:45:f1:b3:a9:ee:b4:
                    3f:9c:e3:bc:5a:f4:bf:68:34:38:1d:d8:a5:5b:be:
                    c4:8a:18:2c:da:95:70:9b:20:82:30:96:f5:bf:9f:
                    2d:35:e4:da:39:37:8a:48:93:fe:8e:b9:06:92:01:
                    05:72:16:4b:47:4c:50:fb:94:0d:53:54:8d:02:a8:
                    7c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.235.32.0/19
                  72.18.192.0/20
                  216.108.224.0/20
                IPv6:
                  2607:3fc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26277

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:b2:cb:26:3f:d4:89:ba:05:f5:62:76:07:d6:27:75:5a:f0:
         e2:4b:3a:2e:33:ae:1b:30:3b:59:dd:d0:e2:df:b5:bc:c9:0a:
         f2:58:05:8b:14:43:d4:74:b1:af:fb:48:78:28:eb:a8:86:a7:
         82:a4:4a:88:58:75:90:97:09:f0:39:61:72:6a:b6:27:72:d4:
         3c:7b:4b:66:ce:7b:1c:38:4e:75:69:e7:ec:93:23:0e:a2:6a:
         d4:0b:a9:9c:50:39:67:b5:2d:12:63:f3:a8:15:9d:0b:f2:47:
         dd:12:0a:39:ed:52:31:17:9e:3a:ad:d0:56:b3:9c:20:df:13:
         96:6f:d1:a3:63:67:8b:19:13:5a:e7:c1:c6:57:f7:0d:1b:91:
         93:3f:64:8d:17:23:b2:5f:60:57:01:4b:92:88:bf:17:cf:e9:
         c8:17:ba:79:c2:1a:c9:01:2c:16:0d:c4:97:93:a2:38:4c:c6:
         d8:b2:d1:53:a1:41:80:eb:1b:7b:e3:ce:dd:33:b2:72:3a:65:
         66:32:52:d2:43:94:a4:09:37:c5:b6:88:64:5b:5e:92:e7:4b:
         b5:3c:34:18:44:7c:65:ad:b6:29:33:7b:32:70:99:c7:e6:5b:
         df:65:53:13:ba:ae:79:1c:b9:f1:c1:e2:de:5b:d3:1f:39:f4:
         43:52:e1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----