Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6.cer
File:                     faa26853-2597-4aa9-8c42-c61cf2081ff6.cer (raw, json)
Hash identifier:          V7KBtmoWX5ehYs4t0FDNqXUYAu+ceCWgYmkfHMV1AEg=
Subject key identifier:   23:DF:F3:38:56:68:8A:EC:76:A7:53:D1:44:56:10:1D:A7:0E:BE:CB
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858458EE8F79758A1010C4859F400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/faa26853-2597-4aa9-8c42-c61cf2081ff6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 Apr 2024 22:20:16 +0000
Certificate not after:    Sun 19 Jul 2026 22:20:16 +0000
Subordinate resources:    AS: 21515
                          IP: 2604:9800::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8e:e8:f7:97:58:a1:01:0c:48:59:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr 15 22:20:16 2024 GMT
            Not After : Jul 19 22:20:16 2026 GMT
        Subject: CN=faa26853-2597-4aa9-8c42-c61cf2081ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bc:2b:41:74:09:ea:6a:6a:c2:56:e6:99:d7:
                    8f:e9:6d:bc:dd:ae:7b:42:1d:63:d2:fc:3b:48:52:
                    97:2c:00:7e:7f:63:09:d2:51:b3:1d:df:9b:a5:0c:
                    5d:74:28:ad:a0:18:20:33:f6:d6:ce:02:58:f6:05:
                    ba:25:d3:43:a0:29:25:22:99:09:40:a0:8e:6f:ee:
                    ea:41:7f:2d:e7:2b:e2:ed:eb:71:c4:d6:44:b7:e8:
                    ab:46:e4:0c:ba:75:fc:16:33:2c:ff:3f:4a:5c:1a:
                    1b:b8:b7:e5:42:5e:ca:83:9a:d6:75:3b:11:08:c8:
                    01:e2:b5:a6:e0:ff:77:f7:00:56:15:f2:50:c1:0c:
                    3f:55:0c:d6:3b:08:d0:10:52:ea:bb:3c:fc:f5:13:
                    f3:ff:0a:83:4e:92:be:37:92:e2:ac:7d:ec:a6:7d:
                    94:fc:5e:7e:38:90:5b:4a:4d:16:b9:8f:44:24:0b:
                    d6:a3:c5:ed:29:8d:e6:b8:af:04:91:1c:b1:ae:62:
                    38:ad:21:36:fe:c4:f2:0b:fa:5b:58:45:c6:20:53:
                    b9:8a:df:e3:bb:0b:be:3a:fe:64:fc:2e:9a:96:bc:
                    1e:fd:59:3b:ec:bb:66:51:ab:ad:7c:1a:66:b0:1a:
                    89:f8:e0:95:e6:ce:eb:21:cb:44:e5:0e:bb:fa:ce:
                    80:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DF:F3:38:56:68:8A:EC:76:A7:53:D1:44:56:10:1D:A7:0E:BE:CB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/faa26853-2597-4aa9-8c42-c61cf2081ff6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21515

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:73:26:22:69:18:1b:24:89:fb:bb:8d:b0:6f:8d:c0:59:5c:
         20:ff:0d:a1:dc:7a:88:31:0d:ad:bc:1f:92:2b:40:55:86:57:
         33:5d:11:f8:79:84:55:d8:4d:2c:ca:ca:92:9d:b6:34:7a:bb:
         54:aa:d0:87:ce:d2:8b:f7:ff:f9:32:da:a3:d4:7d:7a:d1:f8:
         19:5c:99:84:9e:92:b2:23:34:54:c9:65:dc:a6:68:cb:63:20:
         4b:43:b2:46:30:02:f2:fc:98:f8:3a:05:9f:cf:ec:e5:33:63:
         18:3c:42:b0:25:c3:dc:4f:10:f3:8c:f6:39:f2:4e:17:8b:47:
         7c:3a:43:1f:bd:62:b0:7e:cf:07:ae:5f:f1:24:05:aa:e1:8e:
         8f:aa:f8:f7:af:d2:fb:71:a3:88:06:11:e8:ce:60:af:8d:bd:
         d9:52:82:c6:e4:26:fe:45:c7:82:72:e0:c8:e7:13:b6:48:62:
         6c:6d:4d:8b:7e:11:60:ef:1e:47:47:29:8b:58:de:d4:e7:d0:
         54:52:dd:56:73:94:2d:67:8c:44:82:cb:3a:b9:59:36:e0:d8:
         2e:a0:b2:92:44:1f:b8:96:ea:05:c3:8b:64:b7:48:bb:49:7c:
         1c:df:2c:3b:e5:39:84:be:77:66:13:58:b5:f7:62:71:a9:39:
         26:22:5f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----