Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer
File:                     b824dfb2-be33-4946-af95-2296acd823af.cer (raw, json)
Hash identifier:          OYy/xDxKLuvWFts9DaOvPpR7rIeUoipgpLrWW+Smp2M=
Subject key identifier:   39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858458991A41921BEACED1B334280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 14 Apr 2024 00:25:16 +0000
Certificate not after:    Sat 18 Jul 2026 00:25:16 +0000
Subordinate resources:    AS: 54402
                          IP: 2607:4940::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:91:a4:19:21:be:ac:ed:1b:33:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr 14 00:25:16 2024 GMT
            Not After : Jul 18 00:25:16 2026 GMT
        Subject: CN=b824dfb2-be33-4946-af95-2296acd823af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:22:4b:2b:0f:4d:b3:85:78:d8:25:fd:59:60:
                    e2:c1:24:00:7c:fd:6a:27:7c:71:30:16:b6:9a:15:
                    01:2f:96:2e:b9:01:d8:63:5e:42:97:53:8e:4e:ea:
                    a1:a9:df:ee:74:58:c0:f8:aa:0f:1e:59:e6:4d:a2:
                    50:d3:49:02:40:a8:8d:c3:f2:2f:ff:e4:07:c1:2a:
                    79:b6:07:ee:18:52:b3:ad:13:87:e7:c3:6a:9d:10:
                    9c:37:4c:4f:2c:69:4c:60:23:79:f2:8f:44:ad:2e:
                    40:ed:ac:02:ef:d0:a2:93:ea:d1:37:02:2e:53:7a:
                    29:bd:9a:84:1a:26:ce:2b:cc:82:3c:8e:14:6c:40:
                    6c:5f:a1:45:ce:90:ad:ec:5c:78:81:e1:5a:6f:92:
                    5c:86:2b:3e:73:d5:bd:0f:53:14:b5:62:e3:a9:f4:
                    8d:c2:31:fb:b4:83:92:80:10:01:8c:d6:6d:50:c7:
                    2a:77:46:3a:2a:e8:59:f7:02:4b:34:31:25:8b:24:
                    3e:f2:53:c5:b0:2d:bb:c2:1b:e7:aa:b8:dc:fa:03:
                    90:23:2b:bf:f0:c9:5b:cb:85:f6:a5:24:10:e9:b8:
                    f3:06:89:bd:8c:80:83:eb:93:fa:ed:9b:02:59:31:
                    56:44:0c:1b:cb:b6:d1:82:ef:81:21:4f:a3:2c:3f:
                    b0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54402

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:bc:13:22:7d:b5:ef:98:9f:1b:e7:8f:57:2f:63:28:22:14:
         e4:5c:6e:f0:4d:84:b3:95:91:ff:1a:43:0a:5d:3c:9e:ff:64:
         ac:b1:7b:f4:e2:78:5b:ab:43:d4:e7:55:23:25:51:2d:5b:ac:
         6b:97:65:fe:cd:c0:7b:3f:83:4d:0a:cd:82:d6:4a:2b:a2:87:
         1d:af:98:51:b6:74:e3:60:db:6b:d8:50:35:ef:01:b0:40:07:
         1d:cd:81:0e:b8:94:8a:ef:85:09:e5:ac:ff:9b:50:3e:b6:a7:
         79:7b:63:e9:1b:c1:c4:57:ba:c2:ec:62:83:79:20:b1:ee:a7:
         42:f0:7f:88:81:38:a1:32:ee:5b:08:a1:b9:be:88:e3:f3:c1:
         9d:49:da:9a:8e:6b:d4:cd:c4:20:0b:a0:53:da:7c:31:13:6e:
         bf:3d:37:90:f1:a1:92:ea:32:40:3d:d9:06:f3:58:e2:22:fe:
         f2:55:99:b1:cf:f5:15:83:a0:9f:4d:62:7e:ff:d6:c2:e1:ba:
         b7:99:ce:14:08:6e:32:27:f2:63:6e:db:19:e0:1c:f1:1b:5a:
         75:73:9b:65:1d:c0:51:d6:26:65:5b:fd:62:52:9d:34:c6:4e:
         4f:a9:e4:69:ca:5d:9d:59:4d:8c:50:fd:5a:5b:6e:4f:85:34:
         10:37:36:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----