Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer
File:                     bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer (raw, json)
Hash identifier:          RF7cURHHAyq2STpWJ9UVMjRR66peuXJjZYvY2xZIuHQ=
Subject key identifier:   DD:EB:C3:81:75:BE:8F:B2:2B:40:D7:B0:98:6F:E6:4F:05:46:38:56
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285845061A9A05307211383740F4F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 26 Feb 2024 22:14:31 +0000
Certificate not after:    Sun 31 May 2026 21:14:31 +0000
Subordinate resources:    AS: 22679
                          IP: 23.172.152.0/24
                          IP: 2602:f971::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:1a:9a:05:30:72:11:38:37:40:f4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb 26 22:14:31 2024 GMT
            Not After : May 31 21:14:31 2026 GMT
        Subject: CN=bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fa:13:bb:3d:a7:9f:04:5b:29:6e:7d:3d:8f:
                    51:77:04:a5:70:0f:c5:db:c6:1f:99:0b:9a:1e:d0:
                    37:69:fe:d5:f3:7b:e1:8b:5e:aa:80:5b:6a:ad:53:
                    1d:ca:42:7e:e2:09:d3:9b:15:9c:3e:b0:d9:bf:aa:
                    28:ba:15:cf:20:82:0e:92:b8:c7:72:96:c2:90:49:
                    58:d7:18:dd:24:d5:71:e2:8f:e0:94:e4:8f:72:bf:
                    4e:35:b2:8b:12:f6:e5:14:23:52:83:88:dd:6d:77:
                    e1:da:0f:9d:e9:01:8d:b0:a1:26:8b:cd:bc:2c:d9:
                    3b:16:8c:f5:ae:f2:f9:9a:0b:f2:d7:06:14:c9:14:
                    47:5b:e5:1d:2d:42:52:fe:15:7d:30:64:0f:60:02:
                    77:a9:87:db:e8:47:b0:bd:f0:b3:c0:5a:3a:1d:bc:
                    5e:0a:65:30:b7:af:3f:c7:f4:e7:53:cb:f1:3c:93:
                    6c:ca:f5:ec:2c:68:9c:d5:3c:d8:63:4b:cd:35:e1:
                    ed:5a:1e:41:3a:95:6d:d5:29:dd:a8:1b:df:39:2d:
                    a3:f5:ca:df:cb:6c:60:f2:f9:61:7d:aa:6b:ce:3b:
                    34:65:6a:dc:08:8b:91:d2:02:0c:76:b6:f1:fe:2b:
                    5d:f2:c7:b9:f8:77:5b:2b:7d:cc:b5:6a:77:92:8d:
                    6c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EB:C3:81:75:BE:8F:B2:2B:40:D7:B0:98:6F:E6:4F:05:46:38:56
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.152.0/24
                IPv6:
                  2602:f971::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22679

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e3:80:56:c7:d0:48:85:3a:07:c9:99:34:f2:b8:11:73:3e:
         ec:29:9a:02:33:c3:70:22:be:65:d4:06:57:a1:59:64:99:6a:
         51:fa:bf:b2:1c:5e:fa:21:dc:a0:3b:88:37:c2:6c:96:79:f8:
         20:ff:19:f9:b4:ed:a7:e6:23:32:8c:e2:ce:65:78:47:ec:0c:
         1c:a5:39:1c:6a:cf:f3:52:ef:1f:f2:06:28:69:b4:f4:e7:b7:
         43:0b:57:7f:26:6c:01:5e:fd:6c:bf:7d:04:5a:4c:62:59:3e:
         83:b8:2b:a7:41:20:ba:ad:93:5b:5f:a5:ff:81:ca:e4:7f:f2:
         d1:35:25:37:ca:9b:1e:09:c7:b6:7c:2b:2a:29:19:cf:0f:5c:
         6e:2f:1b:20:da:f7:fa:66:b2:b7:b8:fc:7d:93:c4:c1:13:b4:
         eb:17:49:0b:8c:16:1f:d3:8b:3b:81:ad:7e:e3:37:69:54:0c:
         01:21:0a:6f:3c:43:38:53:5d:80:14:be:16:78:65:cc:39:1c:
         a0:9e:79:8d:3d:3a:22:2f:f8:9b:fd:c3:b9:29:1d:44:41:7c:
         36:b1:33:97:39:22:2a:09:92:33:7d:8f:d2:34:5e:5b:0c:0f:
         c1:cc:5b:da:86:09:b0:1d:99:83:37:18:f7:d4:60:8f:82:2e:
         57:bf:d1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----