Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7239948d-c2b8-4644-b00c-f9cf98d1d177.cer
File:                     7239948d-c2b8-4644-b00c-f9cf98d1d177.cer (raw, json)
Hash identifier:          r+/cHYfMJ1Ul0oSSEow5HWc+jjZC3yV5NkDc/DBWf7g=
Subject key identifier:   B8:25:7F:B0:F6:A2:72:8E:EB:99:47:A4:2C:07:F8:57:7A:6A:ED:C6
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858456C28CE829E1D6CED2B529040
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7239948d-c2b8-4644-b00c-f9cf98d1d177/7239948d-c2b8-4644-b00c-f9cf98d1d177.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7239948d-c2b8-4644-b00c-f9cf98d1d177/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 03 Apr 2024 11:35:36 +0000
Certificate not after:    Tue 07 Jul 2026 11:35:36 +0000
Subordinate resources:    IP: 2602:803:a000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:28:ce:82:9e:1d:6c:ed:2b:52:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr  3 11:35:36 2024 GMT
            Not After : Jul  7 11:35:36 2026 GMT
        Subject: CN=7239948d-c2b8-4644-b00c-f9cf98d1d177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ee:c9:2e:31:82:96:26:22:14:31:5e:a7:ab:
                    90:ae:93:41:a5:11:2a:da:4c:73:9f:da:1c:31:b2:
                    06:09:a8:40:67:bd:8c:aa:48:1b:d0:2a:34:7c:79:
                    68:94:b6:96:7a:25:0c:35:c0:42:e7:df:dc:d7:0c:
                    42:1a:03:98:00:00:a9:59:66:98:f9:cf:70:4c:53:
                    1d:6d:bd:30:c5:f2:d1:75:34:b3:ec:13:04:08:9d:
                    c5:a9:c1:ba:eb:9a:7a:4e:71:78:98:70:d0:1c:a8:
                    1f:e3:34:ef:3e:5b:f7:bc:de:70:47:2f:02:6d:94:
                    d6:9c:c5:c0:11:58:82:b8:0a:2e:78:34:21:71:1f:
                    e4:43:aa:4c:4c:61:1c:0a:53:9c:8d:74:ef:44:c7:
                    0f:6a:fc:6d:3d:c8:54:a1:b1:ea:08:09:60:f8:99:
                    47:88:b9:17:98:45:df:56:ef:b8:26:2c:5a:16:d8:
                    c6:a9:21:28:72:d2:ad:82:06:dc:91:82:84:8f:1c:
                    cd:83:94:f8:3b:fc:f5:cb:88:a6:13:6f:00:03:8a:
                    5d:b6:51:82:0d:ad:e4:c6:3f:00:2a:be:cb:5c:8b:
                    2c:6e:ac:af:73:11:19:ac:68:ac:16:a5:de:68:b6:
                    8a:aa:b7:08:68:2a:24:1f:38:47:2d:18:fe:f3:48:
                    6e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:25:7F:B0:F6:A2:72:8E:EB:99:47:A4:2C:07:F8:57:7A:6A:ED:C6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7239948d-c2b8-4644-b00c-f9cf98d1d177/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7239948d-c2b8-4644-b00c-f9cf98d1d177/7239948d-c2b8-4644-b00c-f9cf98d1d177.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:803:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:e0:fd:dd:9c:b9:8c:c5:ad:9a:af:37:60:6e:85:a2:62:95:
         49:4a:d4:a7:0b:a3:81:32:05:b9:49:1d:45:45:30:43:fe:8d:
         73:e4:9c:6d:ff:aa:38:10:ae:8d:f2:da:ec:89:61:af:e0:0a:
         59:93:75:ef:08:cd:0c:81:bd:38:21:ca:9b:0a:41:d3:74:51:
         5b:f0:5f:e2:39:72:36:f8:8c:2d:d8:9c:fd:f9:95:c0:af:51:
         d4:5c:b2:0a:39:2f:60:52:30:05:35:d3:0d:2c:ee:12:9e:a3:
         3b:23:6b:f0:9e:e4:69:9c:69:37:14:51:de:41:f3:04:31:d6:
         48:fa:cd:a3:8d:e1:c0:f8:d3:0d:10:3d:73:53:f4:fd:2b:d5:
         36:cc:f4:9c:89:86:99:13:a4:56:9a:72:ba:40:78:87:a8:8f:
         0f:26:cb:f4:e8:ff:3a:a5:8f:21:a2:17:2b:27:82:63:52:71:
         4f:b6:be:36:24:e7:54:e9:99:1b:86:cc:b3:40:e0:6c:da:45:
         13:7e:6a:1d:57:fd:fd:48:ee:7d:24:c3:11:18:49:d7:7a:ef:
         da:f6:ec:04:b3:2c:f8:de:e7:ae:a5:1d:47:08:93:c0:7a:77:
         e5:88:e4:63:15:d1:ea:e8:51:f9:d5:08:be:72:a5:56:3d:82:
         0b:78:35:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----