Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b.cer
File:                     4ea462c4-d76d-40b1-a18e-da445cbec96b.cer (raw, json)
Hash identifier:          pNu9birhIFdSVbb2uwlz9e0mYFpKdce+80qsq0RUNDE=
Subject key identifier:   90:20:0F:9D:10:76:DA:9B:60:32:1A:E8:12:63:2B:37:B2:88:6F:D8
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584742B3BB5B1763D760C1CA9E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b/4ea462c4-d76d-40b1-a18e-da445cbec96b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 19 Sep 2024 00:45:26 +0000
Certificate not after:    Wed 23 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 40896
                          IP: 23.155.200.0/24
                          IP: 2607:53c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:b3:bb:5b:17:63:d7:60:c1:ca:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 19 00:45:26 2024 GMT
            Not After : Dec 23 01:45:26 2026 GMT
        Subject: CN=4ea462c4-d76d-40b1-a18e-da445cbec96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0d:56:5c:0f:4d:fc:9e:8e:c6:e3:00:e8:2d:
                    0b:02:13:d4:71:65:fb:76:ed:4d:55:5b:af:fb:39:
                    ea:6d:a1:2f:ef:c5:9b:5c:af:4c:d9:1d:98:5a:07:
                    6a:0d:d0:15:11:e8:17:1e:c7:dc:aa:9d:cf:3b:48:
                    85:e8:f3:45:ec:14:84:82:9b:28:ae:10:b2:ca:49:
                    f9:5c:0d:43:21:b4:f3:30:36:34:14:5e:7a:27:8f:
                    61:7c:01:82:3d:9c:fd:0e:62:59:0b:2d:7d:8b:f6:
                    c3:d2:26:80:51:b9:fc:9c:9d:2b:e7:b2:ec:ae:d5:
                    63:8e:a7:d5:ff:cb:fd:83:58:ef:8c:7a:b8:82:17:
                    f1:61:0f:1b:d4:07:0f:22:bb:ba:95:c7:ae:36:64:
                    15:b3:c2:d3:e9:dd:0b:6d:92:93:a7:06:ed:a5:2c:
                    af:ef:fb:54:b1:c9:52:d4:de:f5:07:03:32:21:7d:
                    8a:d4:f6:06:ae:cd:b1:2d:b4:d3:17:24:67:08:72:
                    ec:5c:d0:1b:a6:62:cd:89:c2:5a:49:b1:d5:40:be:
                    4b:e6:34:1e:17:44:12:03:30:6e:69:db:e5:1f:d5:
                    74:99:e0:67:64:a9:da:4f:59:c0:2c:26:10:fe:ef:
                    7e:d6:1a:ed:81:15:7b:46:8e:fe:f3:98:ec:bb:ae:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:20:0F:9D:10:76:DA:9B:60:32:1A:E8:12:63:2B:37:B2:88:6F:D8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b/4ea462c4-d76d-40b1-a18e-da445cbec96b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.200.0/24
                IPv6:
                  2607:53c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40896

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:70:a6:f2:0f:b8:74:76:5a:f2:8d:d3:42:57:22:a3:81:3b:
         87:03:af:db:8a:e8:a9:de:b2:0a:73:e2:e8:73:75:13:2c:b4:
         1d:2e:08:23:36:a4:8a:71:0c:8b:37:5d:7b:94:1a:3c:f6:fc:
         03:19:ba:a9:4c:4f:02:cf:07:b5:72:70:d8:63:e7:84:d3:f1:
         5e:50:a4:06:60:11:50:80:80:e9:40:6a:1a:77:16:6c:47:b6:
         e1:aa:68:dc:fb:e4:1f:4c:58:a3:28:25:65:40:d6:3e:4e:ec:
         86:6c:14:5b:06:10:dd:6e:a2:36:14:93:d6:47:7f:af:10:eb:
         86:8f:4a:57:08:bf:65:81:b6:ff:61:25:24:70:e4:a6:1c:a4:
         e6:a9:1a:e8:11:37:f8:4a:01:a1:01:aa:c4:5f:11:fe:b5:4a:
         30:e5:74:62:4d:99:a4:fa:b2:19:bc:f9:ee:cc:ed:54:91:03:
         b2:92:22:4e:60:42:0d:59:fe:56:95:0f:f7:9d:ed:ca:08:c3:
         19:db:de:95:88:14:0b:01:72:77:62:58:5f:d0:91:41:b6:9a:
         c4:95:33:a7:46:8a:d4:c4:bd:b8:e5:8b:2b:92:42:b5:b5:1d:
         16:50:c3:e5:b6:6f:ab:52:b6:9d:1e:53:82:e4:ed:a3:a5:e7:
         50:41:4f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----