Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/462ac9f8-cc47-4eac-9b24-9c898b5261f1.cer
File:                     462ac9f8-cc47-4eac-9b24-9c898b5261f1.cer (raw, json)
Hash identifier:          kfUY79I5mqGA/j7jHn+nsuffydgq/nYIq+bJ0FMBPLM=
Subject key identifier:   2D:6C:4D:1A:7E:68:60:49:ED:3B:F3:F1:E7:07:32:91:D4:B8:28:2C
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847DC5D318963387D3114AB4540
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/462ac9f8-cc47-4eac-9b24-9c898b5261f1/462ac9f8-cc47-4eac-9b24-9c898b5261f1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/462ac9f8-cc47-4eac-9b24-9c898b5261f1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 13 Nov 2024 01:45:33 +0000
Certificate not after:    Tue 16 Feb 2027 01:45:33 +0000
Subordinate resources:    AS: 4966
                          IP: 199.248.216.0/24
                          IP: 2620:131:8000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:5d:31:89:63:38:7d:31:14:ab:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Nov 13 01:45:33 2024 GMT
            Not After : Feb 16 01:45:33 2027 GMT
        Subject: CN=462ac9f8-cc47-4eac-9b24-9c898b5261f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5a:07:a4:c5:df:32:a1:05:2a:53:1a:ec:11:
                    09:33:48:bb:f6:27:8a:aa:13:fa:66:d1:2f:9b:87:
                    77:1f:52:f6:a6:32:31:98:03:90:57:e2:de:4e:86:
                    2c:b1:9d:17:ef:86:d5:4e:35:5f:5b:db:4f:c4:c2:
                    18:c8:42:15:33:3b:92:83:78:47:0a:d3:e9:1e:92:
                    b5:10:4f:27:1a:54:af:b2:36:c7:43:25:bc:09:3c:
                    d0:92:93:07:55:73:22:c2:81:a4:05:96:f2:af:57:
                    73:2f:79:fd:a4:92:c9:62:2f:8f:64:e3:01:60:0f:
                    57:42:2d:70:45:f4:a0:3f:71:da:39:7a:a5:ac:3a:
                    1f:bf:6c:75:5c:77:75:99:c4:41:16:6c:01:bc:5d:
                    c9:3a:1c:e6:dd:ea:34:9c:b8:d4:6b:4a:af:f8:0e:
                    33:5b:f0:cf:7f:fb:1b:32:6e:88:77:2c:6e:f5:64:
                    b3:2d:2c:d6:de:a9:44:ea:79:b2:9a:7b:f0:fd:2d:
                    6b:08:a6:1a:24:71:89:7e:f6:71:1d:44:8b:fd:18:
                    94:6f:c3:e6:2d:d1:59:4e:44:43:f5:f2:ec:38:0b:
                    91:70:23:1f:6b:19:d1:04:41:d9:68:9f:b2:aa:5d:
                    f7:94:a8:5f:3c:1f:44:62:e4:03:87:77:e8:c7:cb:
                    fd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6C:4D:1A:7E:68:60:49:ED:3B:F3:F1:E7:07:32:91:D4:B8:28:2C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/462ac9f8-cc47-4eac-9b24-9c898b5261f1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/462ac9f8-cc47-4eac-9b24-9c898b5261f1/462ac9f8-cc47-4eac-9b24-9c898b5261f1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.248.216.0/24
                IPv6:
                  2620:131:8000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4966

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:6a:8f:61:8d:70:91:f0:50:7c:dc:9c:71:f1:07:84:0d:5e:
         9f:9f:9a:e3:66:b9:e6:42:ac:70:c5:e3:bd:1e:bd:a9:85:16:
         c2:4f:b1:41:e3:8c:c9:a0:cf:07:b3:5f:66:23:8b:5a:c2:eb:
         d9:34:4d:90:91:94:a8:4d:c8:a4:b5:d8:e1:52:45:0b:7a:e2:
         9e:01:ba:8c:01:22:75:f2:05:fc:da:3f:90:95:d7:c0:ca:b7:
         27:6f:99:96:8a:db:75:5c:fc:ac:51:ff:64:d4:b1:fe:ce:d8:
         ac:3d:f5:65:11:13:62:b8:3e:9b:83:e6:ba:37:23:99:17:4f:
         d3:de:ac:d9:03:fd:a9:09:79:35:9b:51:81:f6:67:4f:30:58:
         a4:a6:c4:59:fc:d4:18:91:6e:a5:bb:65:66:67:d6:85:6b:0a:
         2b:2b:72:c1:b6:69:d7:a0:9f:96:d3:14:84:b8:68:dd:ae:98:
         b5:f4:5a:15:c9:95:81:c6:0e:7c:7f:2e:2b:11:32:17:4c:f0:
         9f:73:f3:37:61:5c:a3:37:11:03:83:c6:94:ec:e3:dc:2b:cb:
         04:17:eb:65:0a:d4:b5:dc:2f:32:f6:65:62:64:d9:fc:4c:87:
         52:2b:a5:43:ce:44:54:78:30:ec:8b:82:22:d2:af:91:ec:9a:
         11:e8:31:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----