Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b.cer
File:                     cb7393ae-ce6f-4290-b73b-77b4ab015a2b.cer (raw, json)
Hash identifier:          h8zdLbUHLaqcmv9pGEZIrMjC8IfcQ59gNbDkhgfnGlY=
Subject key identifier:   82:3F:E9:B1:41:70:94:1B:C7:84:1A:20:02:21:2B:A2:68:9F:66:46
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858450BA2CC9D95F6DCBB8539C340
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b/cb7393ae-ce6f-4290-b73b-77b4ab015a2b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 28 Feb 2024 21:47:59 +0000
Certificate not after:    Tue 02 Jun 2026 20:47:59 +0000
Subordinate resources:    AS: 54805
                          IP: 198.72.80.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0b:a2:cc:9d:95:f6:dc:bb:85:39:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb 28 21:47:59 2024 GMT
            Not After : Jun  2 20:47:59 2026 GMT
        Subject: CN=cb7393ae-ce6f-4290-b73b-77b4ab015a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:54:17:11:6f:d7:2b:fb:97:79:40:31:95:0a:
                    9c:5a:dc:c6:6c:4b:eb:a1:79:be:37:d3:2b:7a:da:
                    f6:9e:9e:6b:0a:a6:63:76:2d:59:48:86:9e:9d:75:
                    41:77:ef:47:82:30:24:e5:6f:f0:cd:2d:1b:7f:8c:
                    8e:a7:02:7d:0e:da:8a:b1:4e:4c:20:d1:51:58:c3:
                    00:96:1f:5d:f1:e2:a6:ee:4b:31:d3:36:6a:08:5e:
                    bc:54:65:f2:4b:c8:d4:b5:59:ec:68:84:70:82:0f:
                    8e:58:17:7e:74:aa:ee:e0:35:23:44:29:af:ce:e5:
                    98:25:59:30:19:96:fb:55:39:8a:78:d7:01:e9:66:
                    0c:14:54:67:34:9d:d3:9d:c1:8f:9a:20:ef:4d:bd:
                    f3:fd:65:a6:c1:29:7c:01:df:90:c9:ee:07:28:20:
                    fa:11:22:b8:1a:76:bf:66:15:1a:fb:c9:85:ec:38:
                    4e:89:a1:7a:91:8f:79:6b:24:cf:e1:4e:75:a5:1a:
                    09:4a:87:db:46:3d:d0:c1:66:3b:c3:2b:dd:6e:b3:
                    60:bf:49:52:81:cd:db:fc:09:68:84:87:91:ff:5a:
                    0a:26:86:22:a1:56:98:78:e5:0a:a1:0f:00:63:24:
                    a7:b4:dd:a7:99:62:d7:cc:0f:26:26:98:b7:7a:c7:
                    34:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3F:E9:B1:41:70:94:1B:C7:84:1A:20:02:21:2B:A2:68:9F:66:46
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b/cb7393ae-ce6f-4290-b73b-77b4ab015a2b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.72.80.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54805

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a8:8a:63:5e:97:0c:58:74:1d:04:52:c0:b7:79:58:dd:4b:
         85:00:86:8f:76:d9:79:d7:36:bb:20:9d:d8:15:f9:74:9f:81:
         55:04:c9:a8:3a:71:60:fa:a6:b6:a8:0d:0a:05:e1:3e:75:e5:
         39:37:ba:5b:67:13:e3:1c:38:b6:ce:0f:40:91:b4:38:90:6c:
         b2:7b:73:c5:11:92:bc:d8:7c:93:aa:74:43:f9:77:1e:9d:77:
         78:3c:4d:55:a0:15:1c:34:06:92:2b:a2:d1:d2:40:c4:7a:91:
         85:67:96:ca:3b:79:99:8b:fd:b4:67:a0:f6:0e:aa:70:44:53:
         be:48:bb:db:12:19:23:7a:ba:0b:74:e3:32:d9:5c:94:b9:ea:
         da:3e:e6:fc:33:af:a7:1a:c7:44:00:cf:e3:92:5a:12:03:d8:
         c3:65:ef:74:7e:0f:dd:81:d7:dd:cd:fe:46:40:a5:f8:db:9e:
         ce:a3:18:fb:ed:19:58:d5:61:92:c6:87:ee:67:0f:88:e1:50:
         1a:78:2a:92:df:0c:60:f5:ff:75:69:05:2f:05:d7:d8:a5:07:
         94:80:a0:e4:03:4b:ab:f1:ad:8d:6b:15:ae:72:0b:3e:8f:29:
         86:a7:36:1a:3e:6e:ed:93:ff:92:c5:24:63:3d:82:af:bb:8f:
         43:c5:f4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----