Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347.cer
File:                     cad5f01e-99f4-43e5-a86b-ce2f2de6b347.cer (raw, json)
Hash identifier:          qd6eOdrM+R7JqgdMM9oAMwsQukeu4ccCYhUARkKLdUk=
Subject key identifier:   1D:1C:F4:6A:E4:8E:19:70:B2:6C:0C:6B:A2:83:27:71:BC:22:E1:12
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858458E5612624D495B73FA5AAD00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347/cad5f01e-99f4-43e5-a86b-ce2f2de6b347.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 Apr 2024 17:24:17 +0000
Certificate not after:    Sun 19 Jul 2026 17:24:17 +0000
Subordinate resources:    AS: 62564
                          IP: 2602:f953::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8e:56:12:62:4d:49:5b:73:fa:5a:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr 15 17:24:17 2024 GMT
            Not After : Jul 19 17:24:17 2026 GMT
        Subject: CN=cad5f01e-99f4-43e5-a86b-ce2f2de6b347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:85:14:85:75:9d:eb:af:51:a9:ff:1e:4c:c8:
                    ac:13:3b:64:72:20:2c:93:3b:1b:29:09:64:cb:08:
                    38:6d:52:33:53:8c:95:76:da:c7:f9:0b:32:0f:50:
                    73:54:dd:b0:9e:c7:6f:8e:13:b1:f7:7f:1c:a8:bf:
                    33:49:ac:95:ba:00:79:33:89:6a:09:59:65:d6:e1:
                    16:8d:43:f9:68:f7:af:35:17:4d:65:92:d8:c5:6c:
                    a4:ba:e9:f1:ed:e5:5d:0c:83:7e:65:d5:dd:ff:74:
                    09:f2:bf:5a:38:ce:3f:90:1e:0d:11:76:17:2c:ad:
                    e9:83:be:2e:16:eb:10:f2:de:88:8f:9c:0e:db:73:
                    ce:c3:62:eb:05:7b:b8:5e:e8:57:c4:ae:d3:68:87:
                    db:21:92:9b:88:19:cb:93:f1:fe:40:eb:6c:97:ae:
                    60:62:d6:33:9b:50:b9:46:29:a4:04:75:10:3e:bc:
                    fc:de:27:da:71:0d:1c:48:3a:fc:01:24:0c:28:3b:
                    2e:26:9a:66:00:36:a5:73:ab:4c:9c:0d:6c:41:ff:
                    e5:ad:71:d5:69:cf:63:cc:54:ca:3e:e3:0c:0a:ce:
                    ab:a0:f3:14:09:35:66:60:df:b7:0b:6f:17:4b:36:
                    ee:f5:9b:71:11:59:f6:7b:23:74:81:7d:a2:c7:f9:
                    2b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1C:F4:6A:E4:8E:19:70:B2:6C:0C:6B:A2:83:27:71:BC:22:E1:12
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347/cad5f01e-99f4-43e5-a86b-ce2f2de6b347.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f953::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62564

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:6c:0f:88:fb:f7:fd:e5:7f:97:dd:c4:cb:ae:2f:92:e9:1a:
         4e:ec:4c:50:f7:e8:53:6b:e7:62:2d:ca:bd:3f:69:da:5b:cc:
         8d:75:18:7e:05:ae:cd:50:61:e5:93:76:bd:60:a5:0f:a1:37:
         f9:9e:11:dc:48:a5:4a:14:e9:56:18:98:a0:31:bc:58:e8:64:
         5b:4e:b6:c7:cb:b4:d6:81:bf:bb:a8:b6:89:e0:b9:61:c5:26:
         6c:8f:e9:23:4f:31:a5:f2:5f:12:90:3a:e5:83:e0:8f:ff:f4:
         34:e4:c9:a2:b9:9b:4f:37:f0:09:a6:93:3d:ec:35:e5:32:56:
         35:06:00:f3:b2:be:3f:e6:60:97:e3:38:a3:30:70:e3:c2:8c:
         42:3b:c8:48:fe:ff:26:1a:66:84:83:a6:c4:80:98:1d:63:ce:
         6d:7c:7b:94:ce:ad:06:19:ac:54:ce:1a:85:95:49:05:38:6e:
         84:28:ea:f9:41:1f:b3:96:8b:1e:8c:74:06:34:c5:e7:c5:4e:
         fe:ca:74:c1:76:47:0d:ad:f3:e1:78:77:e9:ab:3a:2f:8f:70:
         6e:9d:61:cf:4b:0b:61:e5:3a:35:fd:87:68:1e:b1:60:b3:3d:
         cd:ce:67:bc:ab:3b:8b:cf:1d:47:85:08:44:43:67:cc:b6:f4:
         49:f9:8d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----