Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881.cer
File:                     93638ba7-22ee-4fb0-8a1d-d1e213fa2881.cer (raw, json)
Hash identifier:          nIKv2/oUz/Upgy5S3Zd0AXtA9JA4F28dESulJVSUHfI=
Subject key identifier:   76:55:CB:AB:65:03:13:E4:1E:8A:BC:64:6A:3D:A1:60:33:69:E4:EC
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844FAB11CEEB6EE576DC9F82100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/93638ba7-22ee-4fb0-8a1d-d1e213fa2881.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 22 Feb 2024 20:08:05 +0000
Certificate not after:    Wed 27 May 2026 19:08:05 +0000
Subordinate resources:    AS: 31930
                          IP: 142.137.0.0/16
                          IP: 2620:fa:8000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fa:b1:1c:ee:b6:ee:57:6d:c9:f8:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb 22 20:08:05 2024 GMT
            Not After : May 27 19:08:05 2026 GMT
        Subject: CN=93638ba7-22ee-4fb0-8a1d-d1e213fa2881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f6:ca:0c:b3:6f:c2:0f:48:69:f1:04:21:9d:
                    ec:f1:cb:28:6d:14:ad:8a:e4:2a:97:aa:e8:9e:29:
                    44:b5:fb:61:a0:63:4b:df:c6:81:19:d6:fe:4d:4f:
                    f6:1c:cc:bd:be:5a:03:91:91:6b:7a:d6:b7:fe:98:
                    09:b1:23:8e:d8:45:76:2f:80:09:bd:8d:6b:2c:04:
                    6f:e8:eb:62:35:76:de:62:82:f6:15:83:7f:66:ee:
                    76:73:ae:b0:c4:4d:ee:9b:ae:1e:82:d7:f7:4a:34:
                    de:c1:ca:6e:41:bf:bf:54:fb:01:40:74:26:7e:47:
                    77:7e:b0:c5:41:25:67:ad:6c:1d:0c:6e:df:e6:ca:
                    eb:cb:74:ca:f3:05:31:20:36:88:0a:1b:b0:5d:ac:
                    7e:2d:83:fa:17:77:3c:a1:25:15:20:b7:26:14:fc:
                    9c:57:79:28:04:bb:00:90:c5:a5:e2:55:bf:33:b0:
                    d3:25:c2:ab:d6:72:cb:8b:27:23:5f:ea:f3:fc:b1:
                    35:51:c7:25:cc:ae:17:03:0e:0f:49:80:65:58:e7:
                    bf:7d:31:41:74:4b:4d:b8:95:65:61:58:0d:32:b4:
                    0e:4b:d7:22:e7:da:33:48:40:2a:a9:2f:90:e9:c1:
                    be:ac:e8:47:1f:09:eb:83:87:b2:9c:dc:c2:93:3d:
                    26:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:55:CB:AB:65:03:13:E4:1E:8A:BC:64:6A:3D:A1:60:33:69:E4:EC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/93638ba7-22ee-4fb0-8a1d-d1e213fa2881.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.137.0.0/16
                IPv6:
                  2620:fa:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31930

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:48:82:31:6a:df:58:fa:5b:22:42:fe:33:c2:07:0b:af:d8:
         96:97:01:e4:4c:a6:7b:dc:db:f7:4e:86:6d:5b:0a:08:a9:ff:
         b2:54:14:d6:1c:ad:e3:61:a7:ec:ee:8f:9b:15:82:9d:cb:48:
         61:37:2c:41:79:eb:f8:ad:fe:f7:8c:4d:63:9c:f7:03:41:80:
         49:8f:77:7c:51:48:0a:12:c6:9e:99:f1:09:85:30:56:57:e2:
         b4:d0:e6:a8:0b:de:22:6b:1a:a8:39:5b:f8:6c:c7:67:38:28:
         ac:9a:f3:5e:13:b2:78:53:a9:c2:cf:b7:9f:1a:ec:76:59:41:
         76:62:ae:ce:1c:28:90:29:98:c9:91:30:e2:65:9a:af:3a:0d:
         c6:ff:6b:aa:3b:ee:6d:06:e6:0c:57:d3:c9:97:f7:be:e8:8f:
         4f:4b:bb:ef:71:5c:24:06:a5:50:c1:5f:f9:5f:01:99:e8:38:
         ca:9f:eb:68:2b:bc:90:06:79:3b:88:5b:09:17:26:08:cf:bc:
         89:21:6e:f4:0f:1e:5f:b3:8b:66:8d:c1:a9:58:48:0a:a3:9f:
         11:98:59:32:0f:0e:3c:b3:57:01:36:04:c8:95:f2:15:70:4f:
         a1:cd:2c:e1:8e:b5:4e:6f:51:5d:03:a1:3b:55:d6:47:a7:65:
         76:9d:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----