Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1.cer
File:                     dcccaaf2-6f73-4480-9c37-cb464a4369b1.cer (raw, json)
Hash identifier:          HFy8Yjvk3IH0fKGfhgoEGGv/BNYsQFojUQMs/zyC4Do=
Subject key identifier:   0A:6D:BB:48:A3:ED:05:1B:2A:6D:55:CB:76:10:0D:57:50:CF:75:83
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844A7C63DEF873E3AD114348580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1/dcccaaf2-6f73-4480-9c37-cb464a4369b1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 24 Jan 2024 03:18:34 +0000
Certificate not after:    Tue 28 Apr 2026 02:18:34 +0000
Subordinate resources:    IP: 216.120.137.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a7:c6:3d:ef:87:3e:3a:d1:14:34:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 24 03:18:34 2024 GMT
            Not After : Apr 28 02:18:34 2026 GMT
        Subject: CN=dcccaaf2-6f73-4480-9c37-cb464a4369b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:39:c7:e2:1e:ab:b0:8c:9c:9a:63:75:93:35:
                    81:f8:6c:59:60:76:0e:be:31:64:9b:11:3f:8b:e2:
                    4f:c7:cb:9b:4c:c2:11:22:8b:7c:2f:a0:17:25:c8:
                    ec:36:9c:77:dc:f7:60:ad:6b:57:cf:0f:68:9c:65:
                    45:c4:b6:83:87:82:6e:22:a6:bf:ba:0d:70:66:c7:
                    fa:58:d7:1f:43:5e:60:50:b4:cf:4d:31:3c:f7:ea:
                    dc:cc:bd:1c:e6:4c:c8:2e:bd:06:f0:53:b9:54:e4:
                    06:27:22:9d:bb:51:85:2d:bd:4a:7e:4e:e5:c1:e7:
                    76:0d:b9:46:71:9a:a5:65:9c:e1:5f:e0:05:1b:0f:
                    d6:38:e2:52:8f:df:26:f6:f7:7b:16:98:cd:8e:60:
                    fb:3a:ef:ab:ef:5b:fe:78:a1:e4:d7:8f:3b:8c:19:
                    db:ff:3d:a8:2c:de:8e:e6:e5:9b:96:23:bd:37:b9:
                    f9:b0:18:0a:a0:bd:e9:fb:22:8d:ff:36:57:16:cc:
                    9d:a0:35:76:b9:9a:1f:ff:10:4d:9f:fa:c4:3a:2b:
                    e4:a3:22:0c:53:6c:aa:20:b7:f3:6d:3e:58:94:c5:
                    9f:b8:94:c0:fe:19:42:45:fe:18:0d:3a:52:bd:58:
                    34:67:5e:3b:82:13:20:35:af:ef:4e:27:23:fb:95:
                    4b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6D:BB:48:A3:ED:05:1B:2A:6D:55:CB:76:10:0D:57:50:CF:75:83
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1/dcccaaf2-6f73-4480-9c37-cb464a4369b1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b3:f8:07:7a:75:c6:33:61:25:8b:c9:66:d1:a8:c6:45:36:
         be:7d:d6:36:5f:33:20:a1:83:e6:5c:01:3b:15:84:27:65:a2:
         0a:db:79:d9:f3:0f:75:8a:d3:f8:58:94:71:6c:41:23:b4:88:
         ca:3a:41:c3:4e:14:58:2f:63:87:b6:4a:ae:5d:a9:72:b6:8c:
         a9:90:52:a9:2c:43:47:d2:f9:83:79:6a:8d:f1:fe:07:84:3a:
         b5:8d:d5:b9:8a:e2:0e:d6:c9:b7:bf:50:a7:9f:b3:f8:38:1e:
         62:03:93:5d:79:12:6f:ba:05:48:56:98:de:b0:d5:15:b4:73:
         e7:a9:9f:59:ce:e7:75:ba:23:ea:0c:5e:61:12:9d:87:16:a8:
         12:5d:be:9c:0c:f9:ab:20:d4:c7:cf:b0:21:f9:3f:b6:df:45:
         9d:41:e1:17:b4:ef:78:35:9a:2c:14:c7:fe:9d:ce:0a:ad:71:
         67:42:10:23:38:e4:8a:3a:a3:59:1d:b4:85:bd:7d:c1:78:5f:
         4e:62:d7:97:51:64:12:84:23:08:94:ec:13:d5:cb:79:4e:7c:
         93:6c:41:4a:a8:27:d8:be:3d:2a:5c:b2:ff:e6:3f:02:63:25:
         3e:a9:44:89:e6:a2:5d:a6:78:b5:6b:b4:ce:86:36:b6:94:fe:
         19:d9:65:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----