Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fbb8f3ab-bcec-4260-bf76-1ac4044487ef.cer
File:                     fbb8f3ab-bcec-4260-bf76-1ac4044487ef.cer (raw, json)
Hash identifier:          UePNMPd/dRbrI0TH+XQYGdR91mL0gEDISY8aS9HmnUU=
Subject key identifier:   E3:03:6C:DE:27:93:BB:16:33:D5:A4:C5:74:C0:28:63:74:38:D4:34
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584484EA87EB276ED2E91DF2D000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fbb8f3ab-bcec-4260-bf76-1ac4044487ef/fbb8f3ab-bcec-4260-bf76-1ac4044487ef.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fbb8f3ab-bcec-4260-bf76-1ac4044487ef/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 11 Jan 2024 15:38:23 +0000
Certificate not after:    Wed 15 Apr 2026 14:38:23 +0000
Subordinate resources:    AS: 397594

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:84:ea:87:eb:27:6e:d2:e9:1d:f2:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 11 15:38:23 2024 GMT
            Not After : Apr 15 14:38:23 2026 GMT
        Subject: CN=fbb8f3ab-bcec-4260-bf76-1ac4044487ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cb:b3:2d:2f:f0:b0:de:11:d3:9a:cd:93:50:
                    2f:b8:2b:f5:ca:f5:60:3a:1b:d5:ea:9f:21:67:58:
                    c6:82:86:2c:eb:11:f4:8f:9f:cb:84:20:d9:83:66:
                    d6:97:18:9e:67:0f:ae:1c:c8:83:49:e5:e8:0f:7b:
                    da:17:5a:83:28:70:fa:86:e5:c2:f6:c0:1f:ec:87:
                    dd:d9:29:d4:52:f4:e4:bf:22:f3:86:62:3d:93:d6:
                    2e:66:7c:c8:36:11:98:3a:1f:47:9e:e0:e6:13:5a:
                    e0:cf:79:9d:c1:81:1f:41:82:f5:fe:41:0a:93:e6:
                    49:b2:55:82:d4:bd:e3:b2:9a:bb:2f:60:da:fc:ab:
                    f0:28:e2:86:dd:99:5e:3f:3d:8d:57:18:94:5e:38:
                    87:08:c1:da:1d:54:df:5a:b0:5f:f0:56:a6:91:70:
                    87:35:05:94:30:30:bf:82:11:80:91:f5:1f:2d:10:
                    27:96:39:d3:b3:cf:ad:4c:5b:ce:f7:ee:3b:d2:67:
                    65:4c:93:99:2d:8a:b7:dd:28:5b:91:53:c3:5e:96:
                    49:a6:3e:20:fd:65:a7:09:76:b7:52:fd:27:2c:0e:
                    ce:ff:3d:c1:cd:b3:79:51:57:20:25:0d:10:21:aa:
                    3b:d0:e2:e4:5d:7d:67:87:16:7b:47:45:e0:1b:f0:
                    cd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:03:6C:DE:27:93:BB:16:33:D5:A4:C5:74:C0:28:63:74:38:D4:34
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fbb8f3ab-bcec-4260-bf76-1ac4044487ef/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fbb8f3ab-bcec-4260-bf76-1ac4044487ef/fbb8f3ab-bcec-4260-bf76-1ac4044487ef.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397594

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:93:75:16:70:a4:84:d8:a2:1f:52:29:19:29:1e:a1:77:fc:
         59:b9:fc:dc:69:c2:13:25:9a:2c:a8:6f:6c:c7:4e:c0:52:80:
         e7:68:5b:14:ee:94:aa:9a:29:04:b7:22:70:76:bd:31:61:fd:
         dc:8f:b3:43:c0:a7:1a:20:09:85:c2:f2:2c:4e:d6:4e:d1:39:
         e6:d4:3e:19:51:11:1f:78:e7:d5:14:76:96:00:07:d8:ad:5f:
         b6:1e:ec:95:59:47:45:98:b4:f6:11:4e:83:28:c6:e9:bf:ba:
         5b:1a:1f:a5:33:c5:8f:d2:5d:e1:5c:83:65:fb:77:d2:12:31:
         7f:e3:ab:20:33:f9:94:4a:e8:cf:a7:37:63:6a:62:c2:56:ac:
         63:1f:a0:cf:52:42:2e:5c:34:32:94:9a:2d:14:22:65:98:84:
         a4:93:22:09:f6:87:aa:a1:7c:f7:bc:5d:89:73:46:b5:b8:17:
         da:1e:58:b5:ab:be:03:b1:7d:75:12:34:92:cf:fe:12:c0:e8:
         82:3b:dc:b0:21:e4:00:58:0b:40:0b:3e:f7:8f:46:f0:9f:78:
         59:e4:17:d7:7a:41:99:d3:15:2a:f4:62:e1:b8:8d:72:a6:4d:
         7b:86:ac:0f:11:3f:c7:1d:74:6e:b0:6d:b2:79:de:37:82:6a:
         fc:6e:40:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----