Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc.cer
File:                     b036528c-d877-46d3-a948-64c8f3b600cc.cer (raw, json)
Hash identifier:          JzITScdwqc8FX48g7JftUrCQIY7/ha/yR6Ico+CymgU=
Subject key identifier:   51:45:D2:CC:87:7A:2C:B7:0E:3A:3E:E9:2A:DD:F1:78:19:17:A3:29
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858456FBE88107168C2C294FE4700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/b036528c-d877-46d3-a948-64c8f3b600cc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:24:42 +0000
Certificate not after:    Wed 08 Jul 2026 18:24:42 +0000
Subordinate resources:    AS: 23038
                          IP: 208.71.200.0/21
                          IP: 2620:10d:a000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:be:88:10:71:68:c2:c2:94:fe:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr  4 18:24:42 2024 GMT
            Not After : Jul  8 18:24:42 2026 GMT
        Subject: CN=b036528c-d877-46d3-a948-64c8f3b600cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:df:56:8c:ba:cf:84:03:78:88:46:f8:ed:13:
                    a5:ea:99:a8:08:c2:a1:62:9a:f1:98:e4:42:b7:62:
                    06:6a:dd:23:41:59:f5:b1:f3:14:ae:28:a4:37:f6:
                    ca:cc:15:21:be:be:be:41:cd:b1:36:ed:fe:23:79:
                    6c:34:3c:d5:36:8a:36:b5:0e:ce:58:16:4a:e0:2b:
                    bf:75:ef:01:a4:b9:83:99:09:56:c1:15:68:99:e2:
                    a1:50:5a:79:a4:d7:6b:af:46:63:02:f7:95:0f:ce:
                    ae:93:f0:87:c7:5e:b4:48:bb:d3:36:c1:0c:f5:1e:
                    a0:44:bb:1a:88:87:35:79:d5:75:f6:34:1f:cf:e1:
                    f1:2d:53:23:70:77:db:88:62:93:d2:17:e3:8a:ab:
                    53:30:c0:d0:d4:c5:21:75:d3:50:e6:46:d5:02:66:
                    fb:32:98:46:c9:9c:0a:02:c8:b6:e8:99:88:8e:70:
                    ae:17:44:60:d1:e8:83:72:eb:a3:11:76:1f:22:06:
                    87:b3:be:68:5a:c6:4e:3b:dc:ec:87:11:7d:1d:c5:
                    4b:51:cd:6c:3a:aa:e9:ef:10:2c:81:4f:c1:02:94:
                    90:47:dc:da:51:4d:c0:2e:69:af:45:f1:4a:96:a6:
                    60:b8:52:b2:2c:c7:2c:cd:99:66:33:97:86:3e:79:
                    a5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:45:D2:CC:87:7A:2C:B7:0E:3A:3E:E9:2A:DD:F1:78:19:17:A3:29
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/b036528c-d877-46d3-a948-64c8f3b600cc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.200.0/21
                IPv6:
                  2620:10d:a000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23038

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:56:c4:2c:af:3a:07:b1:ec:bf:a9:b7:31:07:ed:36:b4:27:
         8d:c1:ab:5d:6c:a8:42:2b:6e:0c:dc:db:33:ae:3f:59:42:1a:
         d4:26:d0:3c:86:d4:84:97:43:c8:7c:8a:21:16:4a:e4:92:34:
         fd:32:68:56:ce:5b:20:2e:ed:5d:69:45:34:f7:24:05:fd:81:
         bd:60:60:a1:6f:f5:1f:3d:84:5e:c5:61:62:a7:4c:14:bd:11:
         05:03:03:1a:dc:60:b1:09:3b:e0:65:f3:9a:20:6a:8e:f4:0e:
         29:19:d1:d0:42:e4:51:d9:9f:be:dd:7f:b0:44:ef:75:86:73:
         af:b3:4c:55:a5:22:71:14:d5:be:7b:7b:3c:18:2a:0c:ef:44:
         dd:13:4d:c9:57:c3:25:3a:56:b7:80:06:c0:fd:4d:9d:8b:73:
         b5:d2:28:5d:93:98:e4:d5:d2:81:0b:ee:4a:6a:d6:6e:ab:1b:
         89:c3:81:f3:3c:fb:71:b9:96:92:9d:e8:1e:cb:be:e4:1f:34:
         dd:df:dd:10:7d:f6:11:b9:d0:91:c4:85:87:ce:c8:c8:5f:31:
         d2:ee:10:6d:38:f6:f1:fd:99:59:12:a8:6b:03:03:89:f1:7f:
         29:08:7e:84:dc:58:58:05:a8:63:d5:ef:96:1a:51:93:28:ab:
         f2:33:c2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----