Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer
File:                     7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer (raw, json)
Hash identifier:          IfKI96D7xNykdLib6LOnVo8GnK9FBeFcni3zIrKq7JU=
Subject key identifier:   69:61:30:F5:96:DC:44:BC:35:07:F4:81:95:8A:64:32:64:F8:7C:AA
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584488315503713F15DBFE43C200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/7aeb1cf3-9b67-4e65-93ee-39960a392b68.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 12 Jan 2024 19:48:28 +0000
Certificate not after:    Thu 16 Apr 2026 18:48:28 +0000
Subordinate resources:    IP: 137.165.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:88:31:55:03:71:3f:15:db:fe:43:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 12 19:48:28 2024 GMT
            Not After : Apr 16 18:48:28 2026 GMT
        Subject: CN=7aeb1cf3-9b67-4e65-93ee-39960a392b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1f:12:a1:a7:d5:47:a4:6c:e2:b7:70:72:e0:
                    0c:c0:86:6a:72:62:ea:fb:47:6c:d1:dd:d9:2e:d3:
                    8a:08:17:bc:cb:41:d0:eb:10:6a:b2:43:b6:51:0c:
                    5c:22:4b:d3:ba:ed:15:0c:ef:19:80:0d:da:5e:62:
                    ec:ff:d3:d4:19:f5:92:fb:24:1c:86:17:a3:7b:74:
                    f4:02:9b:17:27:33:bb:4d:32:c6:5b:2c:31:fa:59:
                    c7:0f:88:8e:ce:e2:76:4a:37:e9:04:6f:8c:73:e0:
                    9b:5d:39:d2:f4:94:4f:18:fa:5e:46:03:8a:64:3d:
                    d3:52:e5:74:3c:bd:22:92:a1:b6:e9:3f:c6:d2:39:
                    5d:c2:a2:1b:8d:3d:e8:08:92:9a:b6:ba:d8:bd:bf:
                    66:53:a2:c5:93:78:4e:b7:a1:78:d5:b3:04:c7:48:
                    e5:dd:3c:46:8a:e3:b8:4e:95:2f:35:04:a2:d9:f1:
                    dc:49:ae:97:29:2f:ad:a0:6b:08:79:b8:09:a9:b9:
                    69:4b:fb:d3:43:70:c6:a5:2f:af:d5:e1:3c:12:13:
                    ad:cc:30:95:45:52:41:80:55:3d:04:09:80:f2:11:
                    02:02:c9:b9:b4:dc:dd:da:ed:fd:27:e2:0e:23:0b:
                    df:4d:1d:0b:e5:6d:93:34:c8:01:e2:fc:5c:fc:8d:
                    2b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:61:30:F5:96:DC:44:BC:35:07:F4:81:95:8A:64:32:64:F8:7C:AA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/7aeb1cf3-9b67-4e65-93ee-39960a392b68.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.165.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:be:ed:55:59:32:ee:9f:17:f2:24:7c:4b:c2:97:19:38:d0:
         b6:6c:5e:90:15:ad:6a:56:ee:fa:65:8b:ba:c9:67:d1:c8:7f:
         94:88:57:2a:fd:44:00:8b:59:bc:8a:41:ca:00:31:05:f2:30:
         3f:45:a2:ed:2a:5a:fb:40:5f:ab:04:16:19:74:8d:89:74:82:
         81:88:6b:f6:f8:a6:54:55:cb:8f:93:c7:05:01:ee:76:e0:d1:
         a6:00:f8:3f:18:61:02:15:13:a5:c3:9f:29:71:6c:47:3d:97:
         0c:57:fb:83:6b:48:79:29:a1:c9:31:e3:6d:37:ca:cd:2d:c1:
         a5:37:78:e3:54:a2:6b:b9:da:b1:ad:91:03:a4:51:4f:e2:59:
         b2:62:9b:f9:ef:3d:ab:1c:d9:63:de:73:e3:28:52:74:cb:f9:
         b7:af:58:62:67:40:d4:ac:88:ad:f5:9c:5c:63:5b:09:89:8d:
         fa:30:9c:04:8d:62:75:01:e8:13:83:4e:0b:e5:f1:87:42:14:
         17:2b:7b:e6:d6:e7:13:70:4e:ca:95:b0:57:33:03:3e:69:e3:
         37:2c:99:9e:4a:14:44:e9:bd:e4:14:cc:5b:35:84:66:e8:09:
         f0:87:11:a4:bf:84:03:21:5d:bc:fc:0b:40:30:e5:62:75:f4:
         6a:18:0b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----