Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.cer
File:                     b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.cer (raw, json)
Hash identifier:          xZl15FXkhZcVqoGpHmwQQL28ZxX62OKecz6lfLCTIcw=
Subject key identifier:   DC:6A:15:2A:0F:A2:30:54:82:98:F4:66:63:43:97:EE:63:C4:FB:6F
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858449888D1E400339EDBE9B32DE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 Jan 2024 16:17:41 +0000
Certificate not after:    Wed 22 Apr 2026 15:17:41 +0000
Subordinate resources:    AS: 54260
                          IP: 199.188.157.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:98:88:d1:e4:00:33:9e:db:e9:b3:2d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 18 16:17:41 2024 GMT
            Not After : Apr 22 15:17:41 2026 GMT
        Subject: CN=b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:79:fc:bf:7c:14:dd:15:bf:d4:6c:49:94:ab:
                    c9:d3:d7:3a:5c:f7:40:14:ff:13:1e:4c:39:16:36:
                    a5:26:59:71:97:fa:db:52:e5:0c:6e:de:64:e5:ff:
                    bf:f3:c7:b1:a3:40:3f:21:fb:a5:03:90:93:3a:9e:
                    f8:5b:07:2d:0c:86:df:d8:73:9e:de:2f:c9:e3:1d:
                    23:7d:35:17:ee:58:00:43:ca:c4:60:67:13:e2:3f:
                    c9:6f:d4:3c:47:48:5a:f5:50:c6:eb:bf:f0:c5:8f:
                    06:f6:f2:7d:1a:26:22:35:63:4d:28:b8:c5:cc:41:
                    11:a4:0f:04:1e:2f:88:38:ef:ca:b6:5d:4e:75:d5:
                    61:e6:3c:0a:76:43:49:0e:f0:ea:4b:e5:3a:93:bd:
                    8f:35:e0:46:c0:82:7f:e6:2e:c4:8d:ba:10:bf:54:
                    c0:ad:68:d3:cb:ca:89:11:50:5a:a5:eb:fe:73:b3:
                    85:fa:04:07:c7:e9:e9:80:43:d2:55:83:31:10:8a:
                    be:cd:d5:72:78:8a:0c:27:6a:73:1d:62:64:1a:19:
                    a5:48:b9:f9:81:e3:5f:24:67:91:a1:58:75:8c:2f:
                    72:7a:fc:2a:f7:99:e8:d4:7c:04:e8:b8:d4:d3:9f:
                    53:f7:95:7b:95:04:50:db:fa:30:50:82:e1:63:82:
                    e1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6A:15:2A:0F:A2:30:54:82:98:F4:66:63:43:97:EE:63:C4:FB:6F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.157.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54260

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d3:e5:47:c6:a8:72:c0:20:bc:ac:ee:ac:f3:75:e4:61:64:
         79:85:e7:ff:54:2e:0d:5a:29:38:10:f1:3e:b7:d1:7f:fa:69:
         9a:86:26:fe:98:1f:04:a5:b7:d3:61:92:ab:24:7e:7f:3b:90:
         02:96:a6:9f:a2:00:9c:f9:e6:8e:9f:ef:15:2d:da:a5:a5:3e:
         c0:45:3c:57:b8:7d:76:59:3d:50:ce:4a:3b:6d:38:68:31:7d:
         2a:0d:18:87:05:7d:17:8e:6a:dd:4a:8d:56:35:72:43:7c:0d:
         54:80:3a:1d:3b:05:c5:3c:c6:ca:02:d1:d7:38:21:8b:e5:52:
         70:78:01:38:b9:11:8c:14:bf:9f:a4:4a:16:77:69:b3:34:6d:
         ca:72:c5:1b:b7:56:3b:a6:af:f3:a3:7d:9e:f6:6c:3f:51:e7:
         cc:b4:97:1a:3b:c2:92:7c:fa:87:25:ec:95:86:1a:8e:e5:ae:
         9b:50:fe:23:b4:40:9a:6f:f7:12:40:75:ea:aa:54:5b:e5:0f:
         05:1d:54:15:ae:45:5a:93:b8:2a:b9:2a:ce:71:df:41:ab:ce:
         d2:15:39:d4:71:4b:35:6c:ed:2c:67:b8:fa:f9:e9:58:44:88:
         19:b1:73:5d:c0:b3:0a:2d:89:b8:f7:13:aa:ca:82:6b:72:90:
         e3:8c:2d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----