Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/831828bc-46aa-4c27-b6f2-832286d94619.cer
File:                     831828bc-46aa-4c27-b6f2-832286d94619.cer (raw, json)
Hash identifier:          uyKhFNlAgXOdng5q8hZ7S9WPU3uQQdtC8vc6DcxUfss=
Subject key identifier:   9B:97:0E:16:C9:60:F7:1B:45:38:81:61:F8:96:FD:44:B9:E1:F8:E4
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844991E1EC2FFDC7B8CA8096200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/831828bc-46aa-4c27-b6f2-832286d94619/831828bc-46aa-4c27-b6f2-832286d94619.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/831828bc-46aa-4c27-b6f2-832286d94619/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 Jan 2024 21:18:30 +0000
Certificate not after:    Wed 22 Apr 2026 20:18:30 +0000
Subordinate resources:    AS: 21641
                          IP: 2607:8bc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:99:1e:1e:c2:ff:dc:7b:8c:a8:09:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 18 21:18:30 2024 GMT
            Not After : Apr 22 20:18:30 2026 GMT
        Subject: CN=831828bc-46aa-4c27-b6f2-832286d94619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a3:c3:a8:99:11:eb:dd:7b:8c:ab:f2:ce:06:
                    d3:17:4f:38:a9:42:d3:9c:d2:d9:ef:81:9d:5d:de:
                    6d:e8:98:f1:15:1e:33:a5:33:3b:53:41:4f:2e:e0:
                    09:f7:00:9c:47:de:dd:45:8e:bf:f9:c6:4b:e3:1f:
                    94:33:7b:a6:3e:0f:28:a9:cc:8a:a9:dc:8d:eb:9d:
                    69:35:70:30:ba:c2:61:78:fc:fd:fc:b5:a3:48:eb:
                    bb:d3:43:80:7f:a3:21:36:d6:2d:40:54:22:12:1a:
                    08:8f:91:0d:52:54:dd:8e:d4:a0:35:e0:35:7d:40:
                    5f:1c:95:d5:ff:49:0d:bd:2f:5e:7b:eb:da:5a:cd:
                    24:ce:1a:81:d6:8f:1a:e0:ab:64:2a:fe:04:8d:9f:
                    a2:d0:1f:39:4f:f9:5b:73:71:25:a5:5e:23:55:8f:
                    a3:b3:80:7b:33:86:46:fd:98:dd:cc:cb:a5:0f:00:
                    90:e9:12:0a:40:d8:e9:78:83:f7:20:9a:17:b0:aa:
                    8f:5a:e0:c6:cb:14:ca:ab:e4:dd:b5:49:9f:e2:78:
                    2e:a1:0a:75:19:fb:6d:46:c8:32:87:e5:ab:0c:47:
                    bf:a4:58:9c:b0:31:cc:eb:1f:14:41:c6:e7:3a:89:
                    3b:53:fa:68:12:b0:31:7e:04:44:44:bd:92:3a:2f:
                    37:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:97:0E:16:C9:60:F7:1B:45:38:81:61:F8:96:FD:44:B9:E1:F8:E4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/831828bc-46aa-4c27-b6f2-832286d94619/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/831828bc-46aa-4c27-b6f2-832286d94619/831828bc-46aa-4c27-b6f2-832286d94619.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8bc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21641

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:c1:34:41:d0:62:0b:b4:78:48:21:cc:ea:d4:17:1c:38:aa:
         16:53:c8:a4:6d:37:c4:0a:6c:ea:03:48:83:9c:61:c5:b5:6a:
         5e:af:c1:7d:42:88:24:b1:4a:5b:96:81:57:5a:3b:14:90:db:
         71:c6:d7:a2:c2:19:83:0a:41:17:d6:24:93:bc:f5:ed:cc:61:
         53:8b:6a:9f:c9:3c:79:e3:fc:eb:9c:56:1f:c4:ba:c1:1e:40:
         00:4d:f4:05:54:86:7e:6b:fe:aa:99:63:80:8a:98:d9:ac:dc:
         f1:de:2f:58:62:84:04:5b:e9:9c:3d:dc:dd:89:1d:31:e9:61:
         ba:f5:b1:38:64:1a:c3:05:8e:1b:91:37:1f:73:8a:85:32:11:
         6c:57:19:24:d3:fc:e5:61:eb:27:d5:ac:df:c1:5b:ac:5d:cf:
         42:3c:98:81:dd:e8:80:4b:e5:d5:73:40:06:92:54:59:64:46:
         f2:b1:dd:54:93:0a:c4:79:b8:50:0a:b6:8e:e8:df:1c:69:e8:
         79:70:eb:76:9f:2c:9f:5f:7e:86:1b:90:6a:c7:f6:c6:39:62:
         4a:30:64:93:9d:fe:46:f1:78:5e:02:fc:bd:0b:0c:e7:24:b7:
         76:18:58:61:7d:c2:ac:1a:21:9e:a4:36:35:30:02:48:46:de:
         22:ed:71:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----