Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491.cer
File:                     c8607cef-f8a0-4a7c-8845-db8d32964491.cer (raw, json)
Hash identifier:          uPDffJuTTOa4d+XuoLucDdA1X52HS9aPn9/ROrAq/nY=
Subject key identifier:   44:08:C4:D0:D5:E1:2F:18:8A:42:37:69:60:1E:84:4F:69:F7:4D:34
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844E20956D13C81AD0398AF5000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 14 Feb 2024 00:10:38 +0000
Certificate not after:    Mon 18 May 2026 23:10:38 +0000
Subordinate resources:    IP: 52.129.46.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e2:09:56:d1:3c:81:ad:03:98:af:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb 14 00:10:38 2024 GMT
            Not After : May 18 23:10:38 2026 GMT
        Subject: CN=c8607cef-f8a0-4a7c-8845-db8d32964491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:1e:ee:a9:9a:6b:8c:f8:1a:9b:93:9b:bb:
                    69:34:86:ac:93:56:92:cd:3e:73:2f:57:24:df:1b:
                    53:76:95:68:f9:e1:48:9a:03:57:bd:5e:eb:a9:0c:
                    6c:3c:ab:af:2a:f4:74:ef:0e:f1:37:23:5f:d9:47:
                    72:22:b7:10:31:1c:04:97:f3:29:05:6b:99:02:98:
                    f2:ca:43:fd:8b:ab:b6:a9:65:1b:db:e5:eb:0a:50:
                    97:fc:0b:fe:44:05:24:83:09:3b:b9:64:eb:af:15:
                    bf:ef:9d:a4:ae:9f:b4:56:47:8f:d4:a8:51:02:be:
                    e4:95:0a:03:ee:55:8b:b0:52:dd:fe:58:13:09:1e:
                    62:3d:2a:bc:a1:b1:df:85:7b:26:fe:7c:7e:9e:f4:
                    24:76:88:25:88:53:de:be:eb:6a:86:05:30:b0:f0:
                    22:3c:5a:59:80:1a:ad:e0:dc:c6:a9:b6:7d:1e:36:
                    e4:bc:ad:27:9a:ba:d8:71:dd:04:93:90:50:c1:c9:
                    61:e3:f7:1f:ec:43:0a:a2:07:03:9f:0f:4c:ba:8b:
                    32:17:fd:41:8f:f1:41:4c:4a:34:8a:50:6b:3b:47:
                    01:da:ff:a6:87:b3:5d:72:d8:c9:37:64:8f:21:9c:
                    a0:35:93:e2:1a:ad:ff:0f:c5:49:0f:f9:f0:2b:c6:
                    18:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:08:C4:D0:D5:E1:2F:18:8A:42:37:69:60:1E:84:4F:69:F7:4D:34
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d2:1b:b4:c1:45:35:2c:13:6c:01:9f:27:de:de:fd:ee:0d:
         9f:5b:cf:86:96:8f:43:a3:81:10:43:0d:b4:24:3e:71:ef:80:
         00:0a:5e:cc:32:cc:f3:d2:30:88:49:ea:d1:bf:a8:b2:90:f3:
         e4:05:15:36:07:dd:b0:bd:40:8b:71:ab:75:44:89:bd:da:33:
         ab:46:1d:48:ed:72:26:53:aa:9c:11:5a:3b:ae:fd:10:14:e3:
         8b:eb:b4:1e:b6:50:11:f2:2a:70:7c:5f:7a:16:6c:fe:1d:90:
         f4:8e:65:6f:3c:4d:d3:83:08:a1:ef:81:1c:f6:0f:4d:21:31:
         2d:6b:32:23:f2:81:bb:ae:fd:44:d4:81:45:a4:40:8b:14:51:
         61:7e:c1:aa:df:ec:f0:7e:eb:0f:0c:46:12:02:a9:0f:74:73:
         c1:7c:95:53:33:7e:86:17:be:84:16:44:9a:c6:26:fe:a3:8b:
         53:57:bb:1f:4c:05:5f:dd:84:84:47:5d:43:ef:c4:fc:02:4d:
         56:b8:df:75:d7:29:d7:86:43:e8:d3:8a:cc:ee:1c:3a:cd:a6:
         e7:51:9c:ad:49:30:27:8c:04:96:74:7a:1b:9d:93:6c:60:26:
         e1:10:cd:9b:c8:0e:fc:91:98:47:e1:2b:25:11:44:c3:b0:cb:
         21:40:b4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----