Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer
File:                     99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer (raw, json)
Hash identifier:          i/m8b5I5wJtcDE6cuH5Z08EByb7c3SH/Y17LDjzytLk=
Subject key identifier:   06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285845256A17FF24ACE6D13AD07680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 09 Mar 2024 03:24:45 +0000
Certificate not after:    Fri 12 Jun 2026 02:24:45 +0000
Subordinate resources:    IP: 172.98.60.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:25:6a:17:ff:24:ac:e6:d1:3a:d0:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Mar  9 03:24:45 2024 GMT
            Not After : Jun 12 02:24:45 2026 GMT
        Subject: CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:39:1a:55:ac:cb:9c:4d:bf:72:04:62:1a:13:
                    fe:7a:00:de:49:06:8c:f9:0d:2d:d7:38:34:ca:2c:
                    8f:b7:dd:c7:1e:7e:54:b4:7b:19:a6:9d:64:55:3f:
                    ee:98:38:97:2a:06:03:b1:5b:6a:c6:b8:c8:7a:b2:
                    8b:5f:ae:ea:f8:a6:59:e3:2a:2c:7c:ae:65:97:fc:
                    c2:fc:b3:7c:43:01:11:0c:86:7c:60:62:2f:88:77:
                    37:a9:a7:9c:2f:e3:00:b3:1e:01:84:cf:5b:be:68:
                    a6:fd:3a:c7:23:5c:e4:66:20:ff:63:1f:b5:28:e7:
                    15:f4:fe:a5:9e:59:24:74:8f:44:7e:87:04:92:85:
                    31:e0:22:d4:a2:26:a6:df:b9:49:21:b6:bd:b3:bd:
                    7d:30:81:d7:33:04:eb:8d:e7:3a:be:ef:46:59:51:
                    26:7c:f5:f3:ef:ef:b9:91:61:d1:5c:7e:5e:1c:ee:
                    f1:41:9d:1d:96:66:40:78:ea:57:33:cc:f7:be:ab:
                    c4:bf:e4:57:97:74:61:ee:2c:03:c1:27:81:09:2d:
                    2f:ef:ac:11:b7:3a:ad:50:00:7a:4b:8e:17:f8:ab:
                    5e:68:d9:51:c0:12:94:de:2d:65:2a:e1:3d:9e:b3:
                    b4:08:e2:79:f1:16:78:8f:96:eb:26:b3:51:13:6b:
                    4b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a2:18:2d:28:3e:db:25:41:66:0b:af:8a:f5:c8:29:f7:8d:
         1e:75:9c:9c:10:7b:a0:85:5a:23:c7:3e:20:c6:70:eb:2f:d6:
         3a:5b:d5:0e:3f:bb:e0:be:b7:70:16:03:07:19:ef:6b:d8:d3:
         8d:17:5e:56:77:69:a2:af:06:0e:a8:9f:a5:cc:82:cd:f4:54:
         a4:ba:70:0f:a5:22:12:cb:e2:5d:97:06:a2:d3:aa:a4:fe:30:
         d1:ca:d7:e0:02:dd:d4:67:c1:f5:89:a8:b1:95:9a:b3:6c:37:
         aa:0a:2b:26:93:27:8b:5d:7e:c6:65:09:08:9b:34:49:cd:cd:
         15:52:3c:97:80:33:4c:b8:fd:f4:86:fa:f0:d8:17:8d:93:45:
         75:ae:a4:2f:e5:1d:7e:fc:89:f0:fd:8f:7f:27:08:e7:a0:82:
         f5:1f:40:5a:5f:b4:84:b6:ed:de:fb:ac:8e:52:88:4a:c1:cc:
         6c:90:ef:21:60:fc:56:ab:90:77:46:b3:6a:71:dd:ce:3e:5c:
         45:80:8e:c3:79:f3:07:db:c0:78:8d:f1:b4:e7:dc:08:7b:92:
         85:88:ee:96:eb:ce:c7:07:e5:f0:00:ec:fa:20:b3:32:b3:dc:
         be:70:00:08:9a:95:ca:ad:d0:5e:e6:ee:d4:b1:ed:8f:22:ae:
         17:06:7b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----