Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9667db5-eac0-4052-ad03-bf44d03f3bae.cer
File:                     c9667db5-eac0-4052-ad03-bf44d03f3bae.cer (raw, json)
Hash identifier:          HM5eVQ0bw455RSCaCzKUiv6WRCmV2h6NUNocNURp65s=
Subject key identifier:   78:5C:60:5A:29:70:1E:45:2D:CC:46:DF:61:9C:52:F7:FA:8C:71:A3
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858459432EACD0D1716335383DB40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9667db5-eac0-4052-ad03-bf44d03f3bae/c9667db5-eac0-4052-ad03-bf44d03f3bae.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9667db5-eac0-4052-ad03-bf44d03f3bae/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 Apr 2024 19:48:18 +0000
Certificate not after:    Tue 21 Jul 2026 19:48:18 +0000
Subordinate resources:    AS: 400996
                          IP: 192.190.255.0/24
                          IP: 2606:b2c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:94:32:ea:cd:0d:17:16:33:53:83:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr 17 19:48:18 2024 GMT
            Not After : Jul 21 19:48:18 2026 GMT
        Subject: CN=c9667db5-eac0-4052-ad03-bf44d03f3bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0f:9e:49:2e:49:0d:d8:c3:3c:ea:b4:aa:05:
                    b7:42:2a:91:c5:85:d3:45:fa:65:7d:f9:97:2b:42:
                    9f:02:c1:6e:4c:2a:06:b0:34:44:4a:06:ba:18:85:
                    86:08:85:4c:43:30:bf:9d:22:0c:79:0f:0e:ff:9a:
                    a4:f4:4b:43:5f:3e:8b:c3:ee:00:1a:d2:e6:72:17:
                    d1:e4:ac:80:04:54:a0:47:d9:8b:92:2b:bc:45:45:
                    8c:74:67:81:93:c7:b9:8d:a3:d7:90:ed:7b:7a:cc:
                    70:c8:59:4c:29:1e:2f:59:5e:71:e5:d1:70:87:9b:
                    04:b0:85:73:69:eb:9a:37:eb:a0:6c:1b:fb:4c:af:
                    7e:bd:5f:da:f9:8b:db:f6:88:2e:73:e1:46:73:63:
                    ef:84:4f:b0:d6:7d:d4:d6:54:b2:62:bc:6d:c0:68:
                    9f:c4:61:75:66:df:df:21:0d:57:c9:4c:df:dc:97:
                    3b:ba:c5:8b:dd:d0:5a:ba:ea:64:07:a9:be:69:bb:
                    61:6a:45:cb:19:b2:42:10:12:bf:ed:c0:9c:f8:22:
                    1f:a2:15:ef:da:cb:22:49:c0:d1:ed:8b:b6:a4:a1:
                    3d:e9:73:e8:94:4c:2a:55:1c:6e:88:d0:de:f1:eb:
                    02:77:e1:dd:51:8a:6f:ab:87:f2:0b:6b:d8:b3:64:
                    72:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5C:60:5A:29:70:1E:45:2D:CC:46:DF:61:9C:52:F7:FA:8C:71:A3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9667db5-eac0-4052-ad03-bf44d03f3bae/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9667db5-eac0-4052-ad03-bf44d03f3bae/c9667db5-eac0-4052-ad03-bf44d03f3bae.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.255.0/24
                IPv6:
                  2606:b2c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400996

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e6:42:0f:10:a8:73:1c:cb:3a:b3:3c:42:e5:01:2d:ea:1e:
         fc:b0:f1:c6:77:4b:2b:09:74:88:b6:bb:f9:05:66:89:88:14:
         8b:a4:84:63:92:ed:aa:77:93:00:6f:ac:d5:a3:02:c3:a8:ee:
         f6:9f:f8:ad:20:84:39:59:1a:02:58:69:19:72:b6:7e:22:ba:
         23:51:4e:e3:6c:e7:63:7e:70:7d:d7:b4:c8:0b:17:52:dd:cc:
         0b:ea:34:50:21:9e:9f:98:90:3d:20:1c:a3:8f:c9:fb:09:49:
         52:99:1e:bb:84:0f:ad:b7:09:64:08:40:8f:be:2c:48:d0:65:
         b2:fc:93:42:c6:7b:bd:df:16:6b:5c:e6:af:a5:ab:33:2c:fb:
         e7:c2:60:ff:eb:25:94:e9:4b:1b:72:4a:5e:a1:39:54:75:bc:
         77:44:95:52:67:66:92:12:bf:73:97:5b:43:ac:99:d7:43:a1:
         73:9b:5b:5e:6a:0f:f6:94:87:fb:56:e6:05:75:ed:38:3d:2b:
         82:5f:18:d0:3b:eb:cb:5c:ec:35:dd:02:8f:0c:94:54:5e:1f:
         46:82:fa:95:5f:de:77:ec:a0:d3:1e:69:39:c4:4a:06:5c:27:
         85:40:e0:bf:00:ef:41:a4:6c:9a:bb:37:84:cb:9d:6d:64:40:
         39:3b:e6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----