Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262.cer
File:                     17e4ef75-3d46-4caf-8049-ad96976a0262.cer (raw, json)
Hash identifier:          C1r1jXg+eCauPBo74wPWWK3OxpEIROA0i37zk0Oe15Q=
Subject key identifier:   32:C4:FB:81:42:25:F1:FC:F9:36:0D:0A:80:E1:39:98:2F:BF:F1:65
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858473BB9077B92E0CAA2ACC5FF80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/17e4ef75-3d46-4caf-8049-ad96976a0262.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 16 Sep 2024 12:45:27 +0000
Certificate not after:    Sun 20 Dec 2026 13:45:27 +0000
Subordinate resources:    AS: 400062
                          IP: 165.140.106.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:b9:07:7b:92:e0:ca:a2:ac:c5:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 16 12:45:27 2024 GMT
            Not After : Dec 20 13:45:27 2026 GMT
        Subject: CN=17e4ef75-3d46-4caf-8049-ad96976a0262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:4e:3a:68:38:6f:0e:72:ec:a7:d0:3c:89:
                    56:72:73:af:ae:88:ac:55:84:fb:39:12:f5:8e:33:
                    e5:c3:ec:6a:74:85:1c:81:6f:05:8d:0a:bf:25:4a:
                    fa:bd:55:83:bb:74:ac:62:ca:62:92:64:f5:64:10:
                    7e:5e:25:51:b1:d8:45:09:bb:1d:d0:47:56:ed:b4:
                    35:3b:f6:00:62:3a:04:60:8d:2d:23:87:f1:20:3d:
                    f2:64:a4:40:b5:ef:7e:73:2d:c1:fe:54:d8:5d:3f:
                    ae:60:ca:48:b5:6d:1a:42:2e:7a:3e:b5:71:d7:9c:
                    ee:52:19:e3:61:f0:fc:81:ee:82:5d:64:13:de:4c:
                    c2:e8:fb:29:7f:df:c4:4e:2e:39:23:53:a3:2d:25:
                    f0:9d:d7:3b:57:51:cd:e4:c4:ed:5a:f0:4f:6a:13:
                    06:36:fe:22:ba:e7:39:4e:3d:13:c8:2e:34:73:e8:
                    3a:9d:57:5b:b6:57:34:74:75:29:90:02:53:f2:61:
                    2d:c7:0a:2a:98:1c:c4:1f:66:70:0f:12:82:67:58:
                    df:d7:05:98:39:6c:ef:6e:b9:f6:52:a3:c9:ad:75:
                    b3:55:03:cb:19:ed:d1:e1:9e:e1:be:4b:d3:36:24:
                    79:c6:e0:b3:7b:bf:25:e5:ae:18:8d:59:b4:3e:f1:
                    55:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C4:FB:81:42:25:F1:FC:F9:36:0D:0A:80:E1:39:98:2F:BF:F1:65
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/17e4ef75-3d46-4caf-8049-ad96976a0262.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.106.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400062

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:60:df:18:45:5b:be:bb:7a:23:b5:b2:28:ac:e9:18:00:53:
         9c:7d:95:48:51:50:02:d7:48:b7:1f:86:fa:7f:3b:03:8d:87:
         76:24:c1:39:77:c8:9c:b5:d1:70:40:2d:97:96:9a:a6:a5:84:
         05:02:3e:5f:f7:c7:9e:c9:af:cd:e4:a3:bb:f9:20:48:e3:41:
         c2:06:c6:fa:72:77:3c:79:29:9a:60:ca:03:4c:ed:8a:07:af:
         6b:c2:ee:be:e2:5f:2e:f1:35:a1:dd:47:ce:74:36:8c:ea:87:
         3b:d9:ee:b9:aa:d3:b6:87:76:60:00:d5:b8:d6:e7:db:ae:aa:
         fd:d4:75:a8:eb:23:6b:07:6e:7d:08:12:c1:ce:ac:e1:e0:60:
         98:b3:5c:a8:f2:25:e1:2a:41:90:ee:25:84:1a:a3:3a:8e:45:
         af:ab:45:63:50:76:9b:a1:a3:fd:d3:a5:58:31:6d:bb:98:4a:
         ba:48:eb:78:d0:a3:6a:1c:68:cf:73:c1:69:6f:fc:75:8f:8b:
         10:b0:d2:d4:6f:a7:1b:68:e7:99:4e:6c:67:f2:26:e7:31:0c:
         93:cc:9b:35:39:c9:f4:90:8d:63:1a:35:1c:2a:66:7b:9c:09:
         e6:a5:d2:8e:5d:4a:13:26:11:bc:c1:51:27:99:1a:07:bf:21:
         96:0e:f0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----