Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885.cer
File:                     cb73ddb9-215c-471d-8f60-61fdc9b87885.cer (raw, json)
Hash identifier:          Mx7LpZ3XoqK8vbTGAXU5WXOle5xLAeyAGgUT0so3ZAY=
Subject key identifier:   0B:73:A6:AA:8D:EB:EB:F5:ED:E7:CF:1B:7E:24:8C:70:F6:A2:74:7D
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858452424C78645ED481245C58DC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885/cb73ddb9-215c-471d-8f60-61fdc9b87885.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 08 Mar 2024 16:29:17 +0000
Certificate not after:    Thu 11 Jun 2026 15:29:17 +0000
Subordinate resources:    AS: 40907
                          IP: 67.199.244.0/23
                          IP: 2620:134:a000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:24:24:c7:86:45:ed:48:12:45:c5:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Mar  8 16:29:17 2024 GMT
            Not After : Jun 11 15:29:17 2026 GMT
        Subject: CN=cb73ddb9-215c-471d-8f60-61fdc9b87885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:04:a2:22:12:12:13:9b:df:44:65:79:35:1d:
                    f2:e8:fa:85:aa:79:e6:83:5e:84:c2:1d:d1:03:66:
                    e5:12:c6:48:9e:d1:00:17:9c:39:e6:84:79:ed:a5:
                    7b:08:be:08:62:c6:ca:11:00:e3:29:70:17:3a:23:
                    0a:a8:98:11:2e:27:7f:d3:f1:99:e8:88:2b:a4:a1:
                    29:bf:e4:ac:e0:44:d0:7e:86:b4:3b:41:46:2a:8e:
                    ac:5c:d6:0b:1c:3a:a8:a7:df:52:be:b6:06:57:65:
                    96:01:40:01:e0:b0:4a:f7:35:94:20:61:39:61:3b:
                    93:83:f3:af:9e:42:0d:07:64:18:0f:c8:1f:0e:cf:
                    be:53:2c:82:21:34:7a:a7:df:fc:25:5d:38:d9:51:
                    c0:5d:11:0c:8e:f4:0f:00:ca:ee:39:d1:15:59:bf:
                    db:f9:41:7e:a3:8d:20:77:4a:ac:67:7c:96:ad:b9:
                    fc:b0:94:d0:52:43:9b:d1:36:e3:49:ea:a5:0b:9b:
                    fc:98:7a:c0:d9:4f:26:88:bd:cf:17:c8:33:2e:f5:
                    39:2e:a1:4c:f8:13:f0:ac:d1:cb:08:94:b4:91:f2:
                    a5:d2:08:77:99:fa:a4:7b:46:da:e1:f9:87:29:f4:
                    5d:6d:72:e1:83:ba:ca:e6:6c:48:5c:7f:15:44:02:
                    59:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:73:A6:AA:8D:EB:EB:F5:ED:E7:CF:1B:7E:24:8C:70:F6:A2:74:7D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885/cb73ddb9-215c-471d-8f60-61fdc9b87885.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.199.244.0/23
                IPv6:
                  2620:134:a000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40907

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:cf:07:57:1a:ec:6a:6f:b6:85:20:de:1a:d9:b3:f4:a0:60:
         43:ea:3b:dd:67:ee:25:db:5e:57:6f:b8:68:88:74:10:9f:f8:
         d0:36:18:33:3f:65:ad:54:4e:22:28:fa:3a:e3:da:5f:6d:21:
         e2:5b:f3:5c:49:af:99:8a:2d:31:11:43:99:01:e4:c4:9c:e4:
         9b:da:cf:e0:e4:e5:da:52:83:f6:a3:1a:96:e6:ba:80:db:5c:
         39:eb:be:21:28:b1:9d:aa:c5:71:13:05:76:75:e5:b2:9d:87:
         87:a1:b5:ee:7b:b6:02:58:07:dd:3a:cc:07:5b:c2:4e:a3:71:
         15:79:fd:61:e9:45:64:e7:b4:f1:9d:7c:fc:10:6c:0a:93:60:
         a8:4b:80:38:b1:a1:0c:b6:e0:eb:f4:69:93:ea:0c:2f:6f:bd:
         d8:4b:cd:77:7f:61:ad:bc:ec:84:ed:12:5d:b2:98:20:17:e3:
         35:80:ed:ca:19:a0:92:37:82:97:6f:b7:3b:c5:fa:9c:bd:9a:
         f7:e8:4a:43:14:94:c5:06:fc:0e:0e:eb:41:1f:7a:0b:a5:55:
         ab:b1:1e:39:50:ef:22:ae:cd:80:7a:99:3f:30:ef:b5:58:7b:
         7a:39:f2:e3:b6:a0:95:e0:9c:84:84:8b:62:a0:59:1f:54:4a:
         92:0c:3e:64
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----