Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab.cer
File:                     dac9cb7f-b46d-477e-8698-95f66c423aab.cer (raw, json)
Hash identifier:          w9IvZ5zq5nOMRZ50ALMz/MjUimUxPwE1WmS88ixzmT4=
Subject key identifier:   A9:64:71:5B:F3:C2:52:FB:05:C5:52:3B:AE:67:29:68:CB:6E:37:70
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584542AE30711AEA4647B15CFE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 19 Mar 2024 15:00:24 +0000
Certificate not after:    Tue 16 Jun 2026 14:53:56 +0000
Subordinate resources:    AS: 17160
                          IP: 104.247.116.0/24
                          IP: 2602:f93a::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:ae:30:71:1a:ea:46:47:b1:5c:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Mar 19 15:00:24 2024 GMT
            Not After : Jun 16 14:53:56 2026 GMT
        Subject: CN=dac9cb7f-b46d-477e-8698-95f66c423aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ee:fa:7e:3c:de:3e:eb:71:92:97:64:70:97:
                    08:8b:3b:d2:9e:86:5d:e2:5b:7e:bd:0a:e3:04:ba:
                    90:69:f3:38:7e:ab:a1:c6:ed:fd:8b:86:75:22:6e:
                    8e:78:6a:96:7b:d7:26:65:2d:72:03:61:ec:35:40:
                    4f:92:01:79:37:c7:4a:29:e8:ba:0c:05:cb:86:84:
                    e8:e9:a0:2c:87:46:42:52:3c:3a:a5:4a:09:b8:cb:
                    5d:bc:89:c0:3b:cf:b8:d8:6a:40:18:c7:3b:f9:1b:
                    66:cd:f4:40:e5:d9:0f:44:08:50:dc:4b:d6:1f:5b:
                    43:28:2a:44:2e:b6:d3:5e:9e:4d:00:23:86:1a:2b:
                    1a:b5:df:e2:cb:a9:98:16:6a:db:64:87:95:15:bc:
                    c9:19:9a:54:ec:c2:72:ac:48:1a:63:ba:47:84:d4:
                    0f:34:8d:ba:7b:f9:f4:cf:be:69:af:46:46:f7:8e:
                    f7:a0:ce:08:0a:02:43:03:de:7c:15:5e:27:8e:d8:
                    65:95:c8:63:41:ff:da:81:62:24:9b:18:b9:0f:9b:
                    c1:e6:49:9f:21:3c:ac:5d:94:a1:b0:50:f1:df:b1:
                    24:27:3d:af:a4:4c:ef:99:a9:50:c8:08:27:b5:a6:
                    4c:41:b0:43:1a:d7:28:07:74:8e:33:b4:67:b3:4c:
                    55:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:64:71:5B:F3:C2:52:FB:05:C5:52:3B:AE:67:29:68:CB:6E:37:70
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.116.0/24
                IPv6:
                  2602:f93a::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17160

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:cd:22:18:7f:8b:05:87:69:74:e9:01:36:63:cd:1a:00:c1:
         be:cc:f1:94:90:0b:dc:0d:b8:b0:08:11:22:b4:53:e1:d0:ba:
         a5:0c:bd:c9:88:c3:7d:c9:d8:43:5d:48:ef:f0:00:7a:77:10:
         96:90:94:17:5a:93:7e:0a:85:6a:2a:0a:89:72:14:33:15:4b:
         a0:a7:e0:6e:4a:36:8c:00:ac:d7:75:59:3f:48:c2:11:4d:15:
         3f:d2:db:1e:ac:ed:87:ad:9f:f0:73:44:fd:a2:d7:19:63:f1:
         62:a8:81:c4:dc:13:4d:47:bd:ec:c3:35:79:11:b2:f1:4b:a1:
         11:52:7d:fc:65:cd:29:7a:b0:da:84:e4:e8:1d:c2:cf:62:9d:
         99:02:d7:67:bf:01:eb:a3:a1:a3:68:93:29:7b:1b:3a:51:1d:
         ca:ac:23:45:8d:fc:11:b3:0f:af:a7:b3:4c:8b:90:04:2d:64:
         91:6f:4d:d1:2d:cd:05:62:14:48:8b:7f:8f:77:fb:96:39:7c:
         07:83:b9:2d:31:2a:0f:96:85:bf:56:c5:b6:d3:7f:45:fd:23:
         18:1f:7a:da:70:f9:2e:5d:19:7d:15:a5:06:24:c3:20:1c:95:
         54:6f:f6:8a:89:7f:84:0d:6d:2c:8a:a9:34:38:b6:74:fc:6b:
         a8:d9:41:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----