Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0c46ba8-9ebf-4560-95e2-b7355f9d111c.cer
File:                     a0c46ba8-9ebf-4560-95e2-b7355f9d111c.cer (raw, json)
Hash identifier:          ROv3J3mPuocEXozv+0y49r1/fCh7ZvCYSC8YpUushAM=
Subject key identifier:   E4:AD:5E:A6:0D:F7:5B:9A:24:A4:7A:E5:5B:BA:19:4C:5E:D6:A1:F3
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858456A217C7899AF9D66B2B27680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0c46ba8-9ebf-4560-95e2-b7355f9d111c/a0c46ba8-9ebf-4560-95e2-b7355f9d111c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0c46ba8-9ebf-4560-95e2-b7355f9d111c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 02 Apr 2024 18:09:14 +0000
Certificate not after:    Thu 02 Jul 2026 02:28:38 +0000
Subordinate resources:    AS: 27392
                          IP: 2602:f92c::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6a:21:7c:78:99:af:9d:66:b2:b2:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr  2 18:09:14 2024 GMT
            Not After : Jul  2 02:28:38 2026 GMT
        Subject: CN=a0c46ba8-9ebf-4560-95e2-b7355f9d111c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f3:7b:c3:3b:20:01:cd:70:de:e0:3d:dd:16:
                    fa:58:d9:b7:42:2d:e1:80:64:23:24:80:95:ee:b5:
                    11:0b:ad:18:c5:22:a1:26:13:15:7b:7f:03:01:f0:
                    3a:6c:e8:13:ab:05:b7:81:96:79:ed:7d:a5:3d:f9:
                    ae:b5:29:17:17:61:52:ca:c1:ae:c0:1d:87:0a:e4:
                    a0:fb:a5:36:d1:cf:8c:b5:0a:63:58:44:40:93:c0:
                    bf:e8:77:d7:32:32:f9:c5:1a:77:d8:fb:db:23:34:
                    2f:75:ff:80:e4:cf:ea:ee:1f:9b:b3:8c:83:c8:ee:
                    f4:d9:50:9a:5b:e8:9a:2e:39:0c:48:50:24:94:3e:
                    d3:a9:17:84:1d:b7:9e:41:08:c4:9f:71:a6:92:ab:
                    cd:6b:62:b3:20:90:56:f7:8a:65:ed:f6:96:44:23:
                    66:24:ce:34:65:80:25:43:45:e3:37:94:9a:0e:5f:
                    ce:2f:02:c6:9f:b1:86:51:7a:15:bc:2f:e8:03:c5:
                    d3:61:69:3f:17:b5:21:bf:ae:20:5e:8b:32:14:4c:
                    c6:b4:84:5f:06:e3:64:59:b7:72:45:00:32:ee:1c:
                    c4:ab:fe:17:e7:7f:7f:05:d2:7f:5a:9f:35:3f:ea:
                    76:9e:4c:c0:d6:3b:f2:79:e2:23:80:78:c2:ef:22:
                    2c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AD:5E:A6:0D:F7:5B:9A:24:A4:7A:E5:5B:BA:19:4C:5E:D6:A1:F3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0c46ba8-9ebf-4560-95e2-b7355f9d111c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0c46ba8-9ebf-4560-95e2-b7355f9d111c/a0c46ba8-9ebf-4560-95e2-b7355f9d111c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92c::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27392

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6d:57:50:b7:8d:7d:a2:e3:06:6d:e9:2e:bc:c3:72:8a:27:
         29:d5:e3:7e:2d:6f:27:e1:a6:c3:eb:47:cb:8b:e6:f1:ee:ae:
         88:b8:c4:15:85:6f:5b:5c:a7:b7:3d:f9:8a:65:01:54:a2:a4:
         db:10:84:bf:de:32:c1:c8:ac:3d:4f:f7:42:28:b1:fc:d1:fe:
         1e:81:0a:fc:a1:31:e5:4c:f0:14:d5:b4:4d:4d:28:a4:31:3d:
         41:27:41:2d:9c:43:ae:79:df:2b:76:79:f8:70:cc:0e:70:c1:
         5e:18:e1:83:91:77:c8:05:83:2c:cb:6f:d1:a2:ce:af:34:a9:
         22:63:b6:ab:d4:30:f6:38:44:e7:fb:67:6b:bb:54:14:b7:99:
         7f:3f:fd:3f:3a:b5:0b:7d:2a:48:45:69:cc:87:d0:8b:c9:85:
         f5:c7:08:20:4b:13:d5:56:f1:02:58:bf:bd:59:25:33:f9:f5:
         23:7f:9f:aa:fb:1c:e4:2f:6a:76:2a:a9:0f:c1:5a:7f:3e:86:
         dd:bb:f8:98:4d:87:4e:71:9d:13:c1:3d:3e:d5:78:da:b1:2d:
         10:d7:02:1f:38:a7:74:5a:c6:e1:d5:bd:a7:e0:37:b4:60:69:
         06:92:09:81:2e:a3:bd:22:fd:d6:8f:ba:b6:2f:4c:71:20:5b:
         58:6f:ca:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----