Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.cer
File:                     6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.cer (raw, json)
Hash identifier:          4VQtTvezq+pVbHDVqIxpYuUUZ3SzBPntq3NcbZ+f5lo=
Subject key identifier:   B9:1F:DC:17:A2:A1:17:56:56:E7:50:27:96:16:9F:3F:BA:DA:1B:28
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844A2E7BEE3AAB11BA1620CFE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 22 Jan 2024 09:27:02 +0000
Certificate not after:    Sun 26 Apr 2026 08:27:02 +0000
Subordinate resources:    AS: 22242
                          AS: 54563
                          AS: 395279
                          IP: 192.190.8.0/24
                          IP: 2620:10f:e000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a2:e7:be:e3:aa:b1:1b:a1:62:0c:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 22 09:27:02 2024 GMT
            Not After : Apr 26 08:27:02 2026 GMT
        Subject: CN=6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:24:f5:1b:22:5a:2d:3a:e1:ab:62:c1:62:d7:
                    f4:12:52:de:cf:03:d8:13:11:fa:f3:44:0b:a3:c6:
                    14:bd:a5:94:83:a3:18:1f:8e:9d:94:0d:8b:92:b8:
                    d5:34:7c:8c:e3:f4:dd:08:f6:2c:dc:ec:65:1a:73:
                    62:6a:ff:a2:a1:1a:29:c4:2e:b6:54:fe:75:56:71:
                    90:4a:9d:9c:8a:b6:2f:71:48:c1:e1:b1:16:87:d5:
                    1d:61:ce:19:9a:af:7a:f7:de:fc:0b:a9:56:7a:bd:
                    92:d2:dd:8b:c3:8e:98:40:46:9b:f6:07:89:d3:83:
                    b0:ab:f3:32:da:09:78:4d:bb:11:0e:c2:47:39:76:
                    01:6c:73:77:1d:41:f4:94:b6:00:bc:9e:f7:17:99:
                    6d:98:d4:02:db:d9:7e:62:5e:25:45:4b:71:74:e8:
                    33:20:19:81:77:ed:77:74:24:28:dc:48:ff:bd:a9:
                    3a:0e:c1:7a:f4:11:5b:51:e9:44:9a:99:a0:21:af:
                    ae:25:be:7e:12:30:1c:a5:4d:9e:2c:7b:97:5c:1e:
                    69:7b:b6:5d:f1:4d:f7:7a:8d:1f:90:b8:61:64:01:
                    64:87:1b:35:cf:3d:09:d0:4b:85:3b:0b:c0:8b:6d:
                    99:05:40:df:d9:13:27:dd:15:fd:b7:82:f1:f5:f7:
                    70:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1F:DC:17:A2:A1:17:56:56:E7:50:27:96:16:9F:3F:BA:DA:1B:28
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.8.0/24
                IPv6:
                  2620:10f:e000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22242
                  54563
                  395279

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8e:72:fe:61:e0:d4:f5:2a:dd:73:4d:5e:07:6f:4b:7b:80:
         e7:47:13:2e:36:0e:e6:c8:af:0c:41:6e:ea:a6:6d:5b:a3:dd:
         5d:b1:71:76:70:1d:d9:b4:c6:97:93:5e:17:68:b4:5c:59:00:
         8d:82:eb:79:85:2e:31:ce:b0:40:f0:67:f8:73:b2:a3:db:d2:
         50:ea:0c:5b:64:ab:2f:b5:12:02:02:c5:b4:a8:b1:c6:38:01:
         b7:70:25:a0:57:a7:6a:13:ea:5f:ad:f6:4e:fe:7c:e4:4e:38:
         7d:f6:90:ce:c1:83:87:69:e6:7f:63:43:d4:eb:b2:b6:a0:85:
         02:1e:40:f3:1c:df:66:8b:cd:03:aa:f7:70:32:18:51:3e:0d:
         94:0d:cc:9d:c4:cc:5e:ce:ef:38:cb:e6:4b:1f:ea:07:b8:1e:
         fd:b4:7b:bd:85:5e:23:69:d9:e9:bc:a7:c8:9b:0a:f5:9c:a1:
         8c:08:4f:79:a8:15:66:8f:d0:ea:42:69:bf:2b:41:87:40:f2:
         58:63:69:8a:aa:a5:ff:6e:fb:9a:cd:49:34:2a:7e:15:ac:54:
         dd:2c:7d:46:a6:b7:8c:13:c7:06:b0:90:ac:2e:d5:87:b3:93:
         4a:91:d6:92:2d:a2:c0:f8:4a:8c:5b:74:5a:5c:41:c3:19:5c:
         4c:e0:9e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----