Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer
File:                     908b5814-2031-4b54-b9e1-bc5eaacf8745.cer (raw, json)
Hash identifier:          nHvEDVulLYeDCGgVZaRmwHmsLwH5HoPBegHtfBCEJz8=
Subject key identifier:   C7:2D:23:07:FB:59:EE:C0:F9:36:6D:95:10:B0:DD:10:27:EB:FC:7C
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285846466A8869363BE6DC183A4100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 20 Jun 2024 15:54:15 +0000
Certificate not after:    Tue 15 Sep 2026 11:21:44 +0000
Subordinate resources:    AS: 401167
                          IP: 23.182.72.0/24
                          IP: 2602:f8a1::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:46:6a:88:69:36:3b:e6:dc:18:3a:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jun 20 15:54:15 2024 GMT
            Not After : Sep 15 11:21:44 2026 GMT
        Subject: CN=908b5814-2031-4b54-b9e1-bc5eaacf8745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:10:76:2f:1c:4a:3e:b5:d3:9b:02:bf:ae:3d:
                    a4:c4:5d:b4:0f:fb:b8:f0:08:a3:6d:8e:fa:fb:53:
                    7b:21:13:e9:99:b8:54:50:c0:95:4b:06:f3:c0:4a:
                    a6:57:fe:f9:ec:67:90:3e:8d:a2:bc:f7:c5:4e:4a:
                    76:40:94:24:51:20:b7:85:e9:d0:17:3c:54:5b:cc:
                    e8:9e:eb:cc:b0:a8:ad:cd:16:5d:55:1e:3d:ba:b8:
                    b6:69:8a:aa:50:bc:75:e7:c6:93:d9:7d:1c:ca:6b:
                    f1:3a:cd:fe:a4:49:1c:4d:30:58:54:7c:61:95:76:
                    74:44:f9:20:49:1d:28:49:3b:6e:fc:6d:0a:1f:eb:
                    35:d8:ae:a3:31:0d:8f:15:d6:0d:d5:02:95:4f:dc:
                    45:a9:15:7d:ab:c7:49:16:71:d9:c7:ef:9b:e4:e2:
                    1f:f1:e6:6d:c8:84:69:48:fc:c3:46:01:15:1c:ac:
                    14:48:be:56:56:54:6b:ba:8a:c9:a6:ef:db:7d:eb:
                    7e:55:c3:9f:89:15:a6:90:b6:2e:a1:47:f0:b7:32:
                    9d:55:c1:23:36:f7:4f:37:d8:3a:8b:7a:eb:dc:b4:
                    2e:f9:a7:c2:7f:8a:ba:dd:04:14:71:77:79:da:9d:
                    c4:c9:f2:12:d7:fd:0d:78:e9:e3:a3:d9:d6:b4:8d:
                    e8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2D:23:07:FB:59:EE:C0:F9:36:6D:95:10:B0:DD:10:27:EB:FC:7C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.72.0/24
                IPv6:
                  2602:f8a1::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401167

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:dd:72:d3:28:f9:14:9e:54:a5:cc:d2:0f:01:1e:a8:3a:ee:
         f6:55:db:f5:e9:79:77:f1:40:8c:ac:42:55:f1:c3:a8:49:b9:
         ed:4d:16:0e:d8:89:12:17:c8:7d:78:41:87:ea:d1:65:e9:27:
         cb:7b:a9:96:03:8f:16:b4:2f:53:46:23:58:f2:d1:40:05:dc:
         ab:81:35:72:03:96:c4:ae:90:7a:23:5d:94:ff:e8:05:85:0a:
         ff:58:f2:92:eb:e6:2d:21:b5:66:25:d2:14:4e:de:e2:fd:f4:
         59:55:73:c9:e8:39:88:4f:a8:09:55:b4:d4:17:ff:6e:9c:26:
         be:7e:ef:44:5f:3b:89:eb:38:a8:21:c3:08:80:1a:2c:64:c5:
         14:7e:53:16:7c:35:be:1a:df:c7:78:21:f7:99:6c:0c:2f:e2:
         c8:a1:a3:f3:5f:79:16:58:6f:94:21:89:70:61:99:ae:fb:13:
         e7:e1:bd:d2:8a:d8:b6:64:a6:92:5e:fb:70:78:4a:2d:5c:44:
         f7:37:80:d8:f5:6e:f9:67:08:46:58:bf:c4:b4:95:df:85:f8:
         ac:e1:1f:3a:6c:33:db:a3:d2:4b:60:61:00:c0:81:dd:10:f2:
         ab:2e:67:02:2f:2e:71:c7:d4:de:25:e6:03:a1:7a:d1:b0:f4:
         84:21:34:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----