Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer
File:                     4a81e924-7e18-4312-95fd-09d6d0b08bce.cer (raw, json)
Hash identifier:          f6AnuBiHrTvJu/ZFTdXfILpuutN4DRuJNUBQaxr5BpA=
Subject key identifier:   33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847C76D0DE9D0A0F4ED6484FA00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 05 Nov 2024 13:45:32 +0000
Certificate not after:    Mon 08 Feb 2027 13:45:32 +0000
Subordinate resources:    IP: 207.167.108.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c7:6d:0d:e9:d0:a0:f4:ed:64:84:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Nov  5 13:45:32 2024 GMT
            Not After : Feb  8 13:45:32 2027 GMT
        Subject: CN=4a81e924-7e18-4312-95fd-09d6d0b08bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5c:23:c5:e2:e7:6e:99:b5:78:fc:1e:7c:bf:
                    b9:37:88:64:6b:cf:55:74:2f:26:7b:80:68:d2:e2:
                    01:93:4a:47:71:29:a8:37:ee:db:27:23:29:9e:7d:
                    29:47:a9:2e:10:55:ce:29:9f:ba:c2:e0:25:93:ee:
                    f6:bf:25:96:7a:50:53:b0:0a:98:54:ad:29:92:9c:
                    7c:96:ec:ca:66:7d:e7:4a:f4:46:7a:cf:45:50:db:
                    09:48:88:fe:02:64:a4:f5:68:3a:ea:f9:8e:56:6e:
                    fd:d9:a6:ec:c1:f5:01:4e:83:91:4f:41:c9:86:c9:
                    a4:6a:ea:a0:3a:88:83:20:bf:cd:e0:7b:e2:3a:ba:
                    36:85:dc:5b:7f:4c:d7:05:26:a2:d3:1b:03:d9:ea:
                    6c:09:6f:78:04:08:a5:a7:e3:93:b0:76:f7:b4:c6:
                    f9:1e:fc:cc:60:b4:73:d6:91:9e:a7:47:f7:c5:73:
                    35:58:10:30:73:3d:e2:52:5b:ed:31:5f:a3:71:40:
                    cc:06:23:cb:0a:b4:e8:87:f6:0b:7a:70:2c:fa:e0:
                    9a:71:1d:c5:d1:40:78:7e:fb:23:a1:4d:f1:95:87:
                    cf:8d:ff:8f:8c:69:09:e7:24:a6:bb:ee:ae:53:18:
                    4c:f0:9d:a4:4d:43:9c:d0:38:0c:52:81:3c:4e:b1:
                    29:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:eb:b7:fe:32:a5:c6:17:96:42:3a:e8:d0:3b:51:91:31:b7:
         25:56:f7:89:7a:bd:54:4c:1e:80:ee:19:ec:f0:82:4f:70:aa:
         85:66:bc:b7:20:ca:f0:3f:a6:8b:5c:a4:53:6e:d9:15:bf:38:
         ff:e1:14:11:a0:6a:5d:d1:c6:4a:f1:c3:bc:4e:11:cc:9c:f9:
         96:16:53:c2:4e:cc:30:90:3f:40:89:18:00:1b:d7:07:a8:45:
         5d:f7:fc:ce:fd:e0:bd:de:8f:c6:a1:8e:fd:66:7a:b2:52:36:
         cd:c6:0e:24:27:ed:ce:b8:97:94:4d:2c:aa:86:21:32:96:8e:
         cd:79:e1:48:3c:4b:5e:76:13:f3:3e:49:f5:bb:62:dd:8a:47:
         3e:ac:39:bb:d8:0b:13:3b:9f:66:79:d3:af:0d:e2:59:92:01:
         79:91:a7:a2:d4:fb:64:af:28:8b:7d:86:f5:a4:f4:db:8a:9a:
         a2:2a:37:c9:c8:b1:8c:81:e0:77:f1:8d:88:5a:61:b4:61:62:
         57:f9:37:b3:3e:8c:f1:b2:f6:1d:c6:5e:41:bb:3f:c3:26:13:
         45:c3:4c:d9:65:83:ed:5e:b8:75:c6:9e:48:0a:fa:cf:19:78:
         29:cd:81:59:0e:3c:0d:ea:62:70:be:b0:60:13:fb:a7:2a:e8:
         f6:51:97:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----