Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6379de4-347a-4c3d-b13e-6f45f69b2947.cer
File:                     f6379de4-347a-4c3d-b13e-6f45f69b2947.cer (raw, json)
Hash identifier:          EOKz1addKBaBUXpFs+mcIhWgvWmCj26aLZFAsqF2QQE=
Subject key identifier:   DD:14:DC:8C:9D:9A:81:73:6D:09:58:C5:8E:B5:CC:CC:F2:03:EE:57
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285845059DFCF974B1320DCE440680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6379de4-347a-4c3d-b13e-6f45f69b2947/f6379de4-347a-4c3d-b13e-6f45f69b2947.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6379de4-347a-4c3d-b13e-6f45f69b2947/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 26 Feb 2024 18:03:27 +0000
Certificate not after:    Sun 31 May 2026 17:03:27 +0000
Subordinate resources:    AS: 393282
                          IP: 2607:f140::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:9d:fc:f9:74:b1:32:0d:ce:44:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb 26 18:03:27 2024 GMT
            Not After : May 31 17:03:27 2026 GMT
        Subject: CN=f6379de4-347a-4c3d-b13e-6f45f69b2947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:05:f0:13:43:d5:3d:71:ed:15:27:65:51:89:
                    f9:f5:82:37:cd:85:f1:32:29:17:3d:2f:4a:70:a3:
                    7a:75:25:d8:35:a3:ae:2a:17:28:de:51:e7:a3:d4:
                    fc:bf:b0:0e:64:a0:36:5c:8b:fa:a8:39:14:f2:af:
                    63:ef:39:53:af:18:6f:f3:0a:67:70:16:4b:63:65:
                    f6:1f:10:a1:81:15:3d:9a:2d:d4:40:2b:c2:d4:2b:
                    1d:50:ce:3d:00:e5:c6:8c:ac:ef:e0:f4:4f:e1:00:
                    fc:50:0e:bb:5b:95:88:cb:6f:98:5c:39:6e:13:bf:
                    e5:de:ce:89:fb:97:50:4f:43:7d:5a:9e:c0:6e:d0:
                    ad:af:b7:3a:bc:0b:b5:7b:e1:d3:b4:28:18:9c:a6:
                    56:68:bb:3a:b0:6f:66:2c:b0:13:c1:fc:d1:9b:9d:
                    13:d3:4d:5e:49:9c:dc:d3:60:41:c8:f0:11:c7:ed:
                    86:e7:9a:fa:c4:88:3f:05:7e:ea:d5:b0:20:cd:5d:
                    06:ee:8d:bb:be:e6:d8:db:ea:66:df:44:76:c7:47:
                    87:0a:52:63:9f:b0:85:19:bc:e3:95:d7:9a:3c:82:
                    68:ff:65:66:98:09:07:06:ad:7a:b0:cc:42:5e:c8:
                    fa:b6:85:88:7b:40:d8:14:07:58:e7:95:89:35:67:
                    19:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:14:DC:8C:9D:9A:81:73:6D:09:58:C5:8E:B5:CC:CC:F2:03:EE:57
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6379de4-347a-4c3d-b13e-6f45f69b2947/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6379de4-347a-4c3d-b13e-6f45f69b2947/f6379de4-347a-4c3d-b13e-6f45f69b2947.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393282

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6b:97:52:c8:93:fb:48:7b:b3:47:e7:78:51:8a:b1:19:36:
         13:06:4c:b5:be:09:22:ea:94:65:f3:fa:27:0f:af:83:e1:0a:
         35:13:08:c2:f9:07:10:4d:f7:1e:02:eb:42:ee:2c:34:5d:1c:
         cb:8b:a1:c2:05:3e:c4:8c:7d:27:70:98:24:4a:75:49:41:21:
         53:fa:3c:33:5b:66:f1:00:99:32:67:73:91:bf:1a:0a:98:d8:
         50:67:9b:30:44:a3:31:ae:06:87:3f:85:1a:ec:fb:af:e8:c6:
         68:3c:8e:dc:28:8e:e0:82:51:f2:7e:72:5b:94:a3:37:e5:2e:
         c2:4a:57:b8:54:64:cd:73:49:90:1d:02:fe:ee:07:c3:a5:0f:
         83:5c:97:a2:50:ce:49:33:28:ad:eb:d4:45:23:91:5c:9d:bd:
         35:af:73:56:8c:48:68:40:84:21:6b:d0:8d:1a:fb:5d:3c:15:
         79:83:46:a9:a4:1e:29:b3:43:d3:43:79:dd:1e:d4:90:1b:67:
         d2:33:10:9b:ae:5a:d3:73:a4:fa:bb:80:c9:0e:14:13:0d:11:
         5d:3d:1a:95:a6:cc:d6:d3:d7:ab:e7:93:02:a4:4b:45:12:50:
         2b:be:ab:16:e3:3b:ca:cd:9e:6f:3d:85:b6:65:61:8a:de:0e:
         96:e1:b4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----