Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9.cer
File:                     b5e37906-d457-4ca4-a7b1-f3a32fd7bff9.cer (raw, json)
Hash identifier:          DSwowTmOR+6pYANfaMA3QbghxdXgjB5QZ9twOgfCRZw=
Subject key identifier:   3F:6E:D7:1E:BC:23:A0:CF:28:75:24:8F:E8:8F:8F:2D:CC:B4:57:41
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844D36B5964402F8B1706420D40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 08 Feb 2024 18:31:00 +0000
Certificate not after:    Wed 13 May 2026 17:31:00 +0000
Subordinate resources:    AS: 399536
                          IP: 208.79.136.0/24
                          IP: 2620:92:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d3:6b:59:64:40:2f:8b:17:06:42:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb  8 18:31:00 2024 GMT
            Not After : May 13 17:31:00 2026 GMT
        Subject: CN=b5e37906-d457-4ca4-a7b1-f3a32fd7bff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ea:e2:a0:85:75:f2:17:1e:2e:32:76:1d:57:
                    56:44:3a:f4:d9:86:e9:02:bb:57:6b:61:15:4d:53:
                    0b:04:46:bd:36:e3:b7:83:05:aa:aa:a0:5d:fb:04:
                    fa:1b:e5:ca:7a:1f:3e:9c:2f:30:7d:5f:3b:6f:0d:
                    26:5b:16:98:a0:2f:a6:f8:e3:bb:ee:fc:b5:d4:30:
                    e8:65:c6:7a:c8:c5:c4:82:bf:60:a1:2f:d3:d9:4b:
                    09:cf:f2:d8:e3:59:97:91:26:62:93:e5:ce:34:1b:
                    61:63:af:72:fe:f9:69:42:95:23:62:7b:64:74:a3:
                    3e:90:96:9f:58:0c:aa:31:ba:ee:08:34:9d:84:95:
                    93:ae:a5:3a:4f:7c:45:26:af:a9:42:21:2c:74:00:
                    27:0f:55:6d:d4:b2:dc:f5:ae:db:37:28:ce:aa:21:
                    e0:64:7b:a9:5e:49:e5:11:8c:3b:ab:d6:cc:ab:44:
                    73:68:40:72:ec:df:90:9b:ec:98:aa:8c:10:0d:04:
                    81:2f:43:80:93:0e:29:32:db:36:c9:f8:2e:b4:bb:
                    3f:a5:59:c5:9b:24:e2:a2:8f:d2:ad:10:c8:66:68:
                    e6:f5:01:d6:93:46:b3:e8:3c:5c:92:9a:55:a7:05:
                    66:91:bd:8e:15:44:fe:0e:74:32:33:24:0d:67:3a:
                    94:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6E:D7:1E:BC:23:A0:CF:28:75:24:8F:E8:8F:8F:2D:CC:B4:57:41
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.136.0/24
                IPv6:
                  2620:92:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399536

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d8:72:b1:2a:2f:69:6b:45:49:67:2c:33:53:84:d7:7e:ee:
         89:be:60:b2:b1:8e:2f:75:39:86:d1:20:67:e1:f9:a8:78:32:
         63:52:47:09:e7:df:b1:a1:16:da:46:ba:49:03:8b:b2:e8:cb:
         39:96:f3:f8:f9:a0:17:67:1d:19:36:1f:6e:47:ba:42:68:94:
         e6:10:d9:63:a5:0c:b4:de:a6:ba:e2:d3:8c:1a:a1:70:71:b3:
         e3:1f:a5:ee:da:54:f4:56:14:56:1b:6f:bf:6e:0f:22:18:33:
         fb:dd:e0:3f:0d:c8:9f:f3:de:e7:df:32:5a:59:38:24:05:bf:
         55:fb:51:40:48:16:d6:5e:4b:8d:57:9a:9d:4f:ea:73:50:31:
         0f:55:86:4f:5c:ec:45:94:90:ae:d3:78:54:d0:26:7a:07:fe:
         b0:77:9c:43:93:04:6c:a5:ff:32:db:19:1b:aa:23:2d:f4:80:
         03:68:aa:ae:86:1d:5f:04:dc:36:18:41:1f:96:dd:fc:fd:a4:
         46:9b:9e:a8:8d:c1:ab:6b:40:af:62:29:48:fd:6a:28:cd:f8:
         5e:d9:06:5e:b1:35:0c:7c:62:fb:15:4a:db:d5:e5:ab:5a:95:
         cb:0b:44:bb:15:63:e2:05:70:15:4b:39:71:04:79:5e:04:69:
         c9:0e:0b:1e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----