Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f01a9c28-73c8-4599-9a8d-d975ddebc5a7.cer
File:                     f01a9c28-73c8-4599-9a8d-d975ddebc5a7.cer (raw, json)
Hash identifier:          BvKan8BCn32eBCkeEPudD6zfjFUYLb7OHYCMArCWDdw=
Subject key identifier:   32:2F:3F:C4:11:16:1F:79:49:DC:CD:5A:15:6F:F3:E6:07:F6:DA:A1
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858449623C23B9B6C8422D9733200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f01a9c28-73c8-4599-9a8d-d975ddebc5a7/f01a9c28-73c8-4599-9a8d-d975ddebc5a7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f01a9c28-73c8-4599-9a8d-d975ddebc5a7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 Jan 2024 19:42:26 +0000
Certificate not after:    Tue 21 Apr 2026 18:42:26 +0000
Subordinate resources:    AS: 31996

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:96:23:c2:3b:9b:6c:84:22:d9:73:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 17 19:42:26 2024 GMT
            Not After : Apr 21 18:42:26 2026 GMT
        Subject: CN=f01a9c28-73c8-4599-9a8d-d975ddebc5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fd:97:a4:04:e8:d6:a3:26:c1:17:66:a6:e7:
                    72:ef:c6:df:38:1b:ec:37:54:c7:af:88:02:31:80:
                    00:ae:8e:bf:93:ed:5f:22:be:06:12:0d:42:2f:85:
                    42:01:30:55:41:71:c0:d8:91:19:25:57:ff:a9:d1:
                    8d:3b:c3:4c:e0:27:49:25:d1:ce:af:f9:15:1b:aa:
                    ba:fc:bf:d9:76:54:f7:40:47:ff:fa:9a:99:0d:0a:
                    ca:38:34:60:4e:ba:80:7b:4b:cd:8c:c9:fc:4c:f5:
                    fa:86:6f:22:5e:77:e8:0b:ba:41:18:30:30:70:64:
                    16:03:fc:32:31:e6:4a:04:5b:81:20:c4:39:ce:aa:
                    bd:d4:78:bb:21:20:57:bd:7e:99:38:0d:91:71:4e:
                    8f:42:66:09:2a:76:7d:d7:ce:6d:bb:d4:d7:23:61:
                    37:41:69:24:e7:90:e5:e7:dc:db:c6:33:7b:91:e4:
                    dd:cf:ca:a9:06:47:15:58:a2:9b:d0:d4:ab:96:ea:
                    5c:af:0c:3f:ae:4c:55:82:2d:7a:c9:59:05:a8:0b:
                    52:35:d1:04:dd:57:10:a6:0f:10:74:ad:36:4c:04:
                    0c:37:3f:93:d8:ee:bf:d0:46:49:a8:b9:a8:21:bd:
                    7e:3b:40:8f:ba:ba:9d:b3:0a:a2:45:51:ba:4d:ee:
                    06:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2F:3F:C4:11:16:1F:79:49:DC:CD:5A:15:6F:F3:E6:07:F6:DA:A1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f01a9c28-73c8-4599-9a8d-d975ddebc5a7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f01a9c28-73c8-4599-9a8d-d975ddebc5a7/f01a9c28-73c8-4599-9a8d-d975ddebc5a7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31996

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:05:d1:a0:09:b4:2d:f2:63:1b:ba:36:2b:c7:b7:54:cd:53:
         1d:91:65:82:f2:4e:34:1a:7d:60:03:1e:d9:2d:68:03:37:1e:
         2e:85:ae:ac:af:7d:82:52:0b:12:11:9f:83:e2:50:f5:92:b5:
         9e:98:78:50:a1:ab:88:bf:7c:19:cf:43:83:d2:ef:38:52:ca:
         06:ad:15:13:8e:2b:63:aa:f0:9a:c5:97:ac:b8:f8:53:59:2d:
         6a:c9:cf:9b:51:b4:e1:58:49:b8:db:6f:8e:c3:dc:cd:70:d8:
         c9:b7:d8:cb:32:23:cb:d3:72:c9:12:c7:73:05:fc:c1:62:f5:
         9a:dd:5a:1f:05:22:83:41:a1:fc:e4:f5:5d:3b:c4:89:4e:7a:
         cb:d2:ca:1d:37:c8:42:32:45:fe:48:77:e0:97:3b:a0:3a:d6:
         b5:a1:39:6d:df:0a:aa:da:c5:a5:89:17:25:cc:2f:39:3b:0e:
         0f:bd:ec:01:55:09:f8:a7:c4:4b:28:f4:bf:65:e3:02:26:fa:
         9f:17:05:15:f6:8f:c7:e8:6d:c0:ce:d6:e2:08:46:14:04:7f:
         56:1a:9c:22:e3:3d:21:0a:16:84:90:86:46:d7:5f:7d:b3:7f:
         64:f8:bf:61:44:c0:c9:7d:38:5d:74:0f:8d:88:8e:82:a9:f2:
         4e:2e:df:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----