Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
File:                     b2959336-6afe-411c-b979-dac0a693f8c4.cer (raw, json)
Hash identifier:          nZ/WPcBelFWyMd+RIhDqsdbevEWLIOihJEgSeJK2nug=
Subject key identifier:   1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844E5C47728E2C165299751C900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 15 Feb 2024 08:15:06 +0000
Certificate not after:    Wed 20 May 2026 07:15:06 +0000
Subordinate resources:    AS: 11870
                          IP: 167.23.0.0/16
                          IP: 2620:150::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e5:c4:77:28:e2:c1:65:29:97:51:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb 15 08:15:06 2024 GMT
            Not After : May 20 07:15:06 2026 GMT
        Subject: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a2:dc:9a:73:e4:2a:79:f0:7c:32:f2:9b:f4:
                    42:0c:7b:80:e8:13:bd:7d:8e:7b:4f:7c:ed:30:7a:
                    7d:b8:10:53:6a:c7:23:9e:98:03:73:13:11:e9:9e:
                    72:da:9a:04:7e:b4:17:e9:80:85:1b:3d:d3:f9:05:
                    43:13:c4:f1:5b:75:2b:5a:02:8c:45:4c:d0:d0:a3:
                    8b:fa:8b:4e:9a:22:37:71:4c:84:8f:e1:02:0d:1f:
                    bc:50:f6:55:4a:4b:6a:56:22:97:6f:3d:f9:13:1a:
                    7f:a4:27:5d:c1:fc:65:b4:aa:1f:c0:7a:32:2c:6d:
                    4a:78:fc:9a:79:12:16:b8:1a:3c:4a:22:96:1a:d9:
                    92:a7:43:b5:87:0a:04:62:25:16:56:01:1f:77:2f:
                    e8:41:8e:6b:14:42:d3:78:15:0b:fc:6b:60:91:48:
                    14:23:43:d0:ba:eb:cc:05:8a:0d:d9:0a:9d:ca:cd:
                    74:73:ce:c9:0d:f6:04:2a:1e:f6:96:88:c0:f7:63:
                    7e:38:60:6a:d2:b2:58:0d:fe:1d:99:ff:d8:a4:cf:
                    0c:8a:c0:56:9d:f7:1d:1f:e0:8e:5c:eb:f0:45:53:
                    58:f2:dc:2d:36:ff:ca:b4:27:c4:65:83:29:73:3a:
                    a9:8d:7d:95:da:fb:45:b9:11:fa:6c:ff:7d:87:20:
                    40:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.0.0/16
                IPv6:
                  2620:150::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11870

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:fa:ea:cf:fa:18:20:85:1e:2d:82:b2:1c:74:3f:b8:13:75:
         65:a5:bb:e8:28:80:72:08:a2:e3:da:d8:97:db:8e:b4:a0:40:
         b9:20:dc:c0:86:12:be:23:00:74:be:ea:7f:d7:0e:c6:b9:54:
         15:25:74:73:cf:9c:35:d7:1b:b7:02:f5:52:54:8b:c6:ef:24:
         59:bd:a5:7f:51:a1:78:42:94:ae:7f:4a:32:ad:6c:25:dd:69:
         16:7c:b2:e0:f2:18:a6:f0:49:81:ba:8d:c3:b1:0d:b0:cb:79:
         dc:25:71:8b:2f:f8:15:99:33:3b:53:ab:0d:eb:51:f8:7c:dc:
         ef:af:4b:91:5e:a4:50:6d:09:86:19:eb:8c:ae:57:f7:f2:42:
         e6:67:56:a6:73:32:eb:fb:30:1a:80:2d:bf:b9:de:58:68:a6:
         be:c4:75:49:ac:fe:53:a7:aa:57:ea:a3:79:43:13:8a:cb:96:
         4e:fc:05:cf:2a:6d:d4:8d:9a:84:07:26:80:49:24:cc:e1:24:
         13:ff:ca:64:74:a5:43:85:a2:3b:c3:55:c2:71:d5:4a:01:c7:
         41:3f:7f:10:1f:f5:62:0f:6b:35:d7:8b:b7:17:61:03:9b:cd:
         1c:21:5d:bd:94:82:fc:bf:16:97:87:96:ba:0a:ee:03:c4:dc:
         77:67:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----