Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f.cer
File:                     d51877be-b85b-4cf7-ae49-18c7da88238f.cer (raw, json)
Hash identifier:          oHhUVKlYO9Ho0SiiSdsUz9aOVGIHyYtrI1WRMXUINFo=
Subject key identifier:   76:F6:1F:3C:F7:95:21:F5:2A:6C:26:7F:38:C1:32:3D:D4:7E:3C:97
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858478273C8D0D9D4B84631240D40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/d51877be-b85b-4cf7-ae49-18c7da88238f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 11 Oct 2024 20:48:20 +0000
Certificate not after:    Sun 16 Aug 2026 20:39:13 +0000
Subordinate resources:    AS: 18581
                          AS: 19508
                          IP: 199.245.201.0/24
                          IP: 204.52.250.0/24
                          IP: 205.167.40.0/23
                          IP: 205.167.70.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:73:c8:d0:d9:d4:b8:46:31:24:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Oct 11 20:48:20 2024 GMT
            Not After : Aug 16 20:39:13 2026 GMT
        Subject: CN=d51877be-b85b-4cf7-ae49-18c7da88238f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:82:de:71:fe:0d:f6:eb:40:95:4c:b6:e4:c6:
                    f5:7c:ad:fb:60:c1:d4:2c:e8:57:a4:b4:e3:f1:e4:
                    fc:45:aa:88:5e:59:c1:7c:5f:dc:b7:43:94:fa:66:
                    a1:66:9a:f8:6b:68:03:9c:7c:0d:ce:41:dd:46:68:
                    dc:28:73:e6:31:7a:c5:b1:ef:60:fa:7a:e1:2a:a0:
                    01:08:9e:47:33:0c:01:c0:b8:b7:37:99:5c:8e:bd:
                    c9:51:c9:1a:1b:51:f0:22:59:e6:59:c1:dd:40:9a:
                    28:4b:85:46:27:07:95:86:f8:92:61:da:de:c3:1d:
                    96:6a:3e:2c:e0:f9:d0:be:c2:df:ba:77:29:61:4c:
                    02:62:ca:ee:10:2b:69:9c:d5:fd:0a:26:85:df:2e:
                    70:29:89:5b:49:01:f9:37:e4:bb:f3:f4:c8:98:db:
                    ae:b3:b3:ae:35:c6:b1:13:9a:8c:3b:59:72:ad:83:
                    72:1d:43:88:3e:d8:eb:b6:54:be:cb:18:a3:49:3d:
                    f0:a9:91:4d:2b:46:22:0d:3a:34:e0:2e:d5:7a:4d:
                    9f:ac:95:23:2b:5c:9d:0a:21:d1:82:f0:0c:01:8c:
                    fe:a4:71:d4:21:ae:e5:ce:99:9b:50:38:6c:68:3f:
                    71:b3:b1:b6:35:b9:19:ca:bb:c6:c4:ae:c4:8e:3d:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F6:1F:3C:F7:95:21:F5:2A:6C:26:7F:38:C1:32:3D:D4:7E:3C:97
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/d51877be-b85b-4cf7-ae49-18c7da88238f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.245.201.0/24
                  204.52.250.0/24
                  205.167.40.0/23
                  205.167.70.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18581
                  19508

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:8b:64:99:7b:19:98:db:7a:c6:50:cd:4a:52:e5:b5:6b:cd:
         14:9f:c9:73:86:b7:5f:01:7f:61:65:e1:6b:c9:78:5d:2a:1a:
         36:a9:87:97:ce:c5:f3:1f:43:0c:da:19:52:e7:a0:37:9f:cd:
         4d:70:f1:06:e6:8d:99:27:a3:e2:c2:da:25:ef:72:97:63:54:
         1c:84:35:8e:1d:44:eb:61:84:4c:6f:d1:4d:f1:22:68:03:03:
         f7:18:a9:75:4f:c7:cf:3a:0f:f2:a4:96:6d:43:bc:ef:34:2c:
         7f:7f:e6:b2:44:1c:2c:dc:ba:4c:2a:4a:dd:d3:af:a0:73:6c:
         82:8f:e8:e9:cc:b2:73:48:03:2e:33:4d:69:6a:06:c7:e9:20:
         c7:82:62:b6:fa:b1:21:b6:e3:7c:77:3c:7a:4d:e9:a7:f8:e8:
         86:7a:6e:87:35:4e:fb:d9:09:3e:16:fe:f2:a9:ef:5a:2a:f1:
         d2:c6:b5:4c:33:ae:47:86:98:c6:a1:5a:e5:67:2e:78:26:2f:
         5e:49:be:a6:29:35:a8:48:00:d3:6c:fa:37:9d:ae:af:74:9b:
         4b:82:6c:36:ca:72:3d:79:a2:c3:4e:b9:90:58:12:6b:cb:dd:
         7e:ad:61:8e:df:7d:73:a2:cd:67:8a:8f:50:bc:bc:92:fe:1e:
         67:f9:e4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----