Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.cer
File:                     a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.cer (raw, json)
Hash identifier:          aK9sOhVLyJf2lnJswaeZ9nlStDqZyDWvAXQokVJpczI=
Subject key identifier:   A6:5D:16:ED:E4:20:78:B1:26:C4:2B:81:88:3C:D8:02:96:14:7C:AB
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844FAD2EA0DC6B05FE03E742700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 22 Feb 2024 21:16:11 +0000
Certificate not after:    Wed 27 May 2026 20:16:11 +0000
Subordinate resources:    AS: 14070
                          IP: 208.85.100.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fa:d2:ea:0d:c6:b0:5f:e0:3e:74:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb 22 21:16:11 2024 GMT
            Not After : May 27 20:16:11 2026 GMT
        Subject: CN=a58b4d13-3bf0-4acc-bfd4-aedce2f866bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:dd:96:2c:e5:4a:02:a4:7d:1d:27:d1:3a:
                    e9:0a:5b:00:ff:8b:40:b4:b8:5a:72:e9:8b:b9:07:
                    20:c0:d7:c6:55:5c:db:ea:f2:a6:0c:76:85:7b:ce:
                    bb:6b:ce:2b:3a:13:71:1b:4b:8a:d1:17:c9:17:a4:
                    9a:e2:22:dd:b4:49:9a:59:89:71:71:02:23:ee:43:
                    65:ee:2d:cb:b7:44:79:c4:0a:c7:fb:d7:b1:82:d4:
                    75:71:6e:c3:a9:2f:19:81:85:b8:a6:1e:4f:db:d7:
                    e5:53:1f:a4:e3:40:8d:5a:c5:74:b6:1f:7e:a2:2c:
                    d4:56:c5:c7:aa:09:88:4c:0f:b1:2d:cb:70:8a:fd:
                    1e:76:9d:ad:95:52:c5:80:ba:c7:7a:b8:6e:7a:9f:
                    18:a4:a0:5d:1b:ff:98:63:b7:61:06:f8:17:6c:13:
                    b0:8f:8d:9f:2b:64:de:92:5c:75:e3:45:11:97:4c:
                    e4:ae:9c:9a:a1:27:61:26:35:c4:5e:bb:8d:14:4d:
                    4e:fe:41:2b:81:89:2e:7f:ad:a4:09:4d:ea:30:14:
                    6a:9c:d2:49:19:bc:9e:c6:13:91:e8:29:4a:24:77:
                    78:a7:af:ee:71:91:7d:16:c6:03:77:a5:0d:0b:fa:
                    a9:01:6d:62:71:97:3c:cd:56:d2:18:fe:32:81:ac:
                    b6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5D:16:ED:E4:20:78:B1:26:C4:2B:81:88:3C:D8:02:96:14:7C:AB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.100.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14070

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:b8:7e:6c:8f:06:7e:b6:d8:63:58:45:e1:ba:26:26:99:d5:
         11:b6:99:13:c2:28:f2:83:d6:b3:46:30:99:03:9b:c9:20:1d:
         0d:44:82:5b:ae:b0:d9:e3:6b:fc:c5:26:89:e4:c6:3b:22:0b:
         8d:a3:31:b2:f0:e0:c8:1e:a3:51:70:d3:fe:97:a3:d9:3b:29:
         db:eb:68:ce:25:c6:7d:7d:30:a4:00:ff:79:20:0f:4d:60:ff:
         51:31:dd:54:b0:0c:95:98:bd:c6:66:39:df:fc:e9:c3:95:72:
         f5:ac:fc:a2:2d:15:4a:a5:03:42:a6:f4:05:cd:5b:81:f1:68:
         e5:d4:cf:7b:24:50:5a:bb:52:8c:94:8b:46:3b:77:2d:4e:2c:
         9d:f9:91:94:54:72:ee:bb:b3:14:92:93:15:6d:c3:83:ef:f3:
         5e:8d:f5:8e:7a:03:c2:5b:d9:b4:93:45:7e:6f:b7:ec:72:3f:
         3b:7e:0c:78:03:49:b1:ea:b6:d1:d4:ce:a7:7d:19:47:92:88:
         43:a9:07:9a:a8:e7:1f:86:b7:be:a9:86:60:8f:7f:66:97:67:
         b7:52:a6:cb:f2:4a:07:f2:7b:63:e4:50:96:8c:91:1f:de:39:
         cc:71:95:69:f0:77:00:56:dc:08:9a:74:d2:a2:5f:28:a5:c2:
         c0:dd:e3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----