Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5795d76b-b961-41d5-a1c4-1acb2ac4455a.cer
File:                     5795d76b-b961-41d5-a1c4-1acb2ac4455a.cer (raw, json)
Hash identifier:          R1wtSaU+awd9y97HA/Vak/JeIIkM2bJ7F1pjFnA51n0=
Subject key identifier:   51:00:42:47:6F:5E:2E:41:87:4D:D3:D5:EB:C0:98:98:38:20:62:67
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847C8D267154519E50F9069C900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5795d76b-b961-41d5-a1c4-1acb2ac4455a/5795d76b-b961-41d5-a1c4-1acb2ac4455a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5795d76b-b961-41d5-a1c4-1acb2ac4455a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 06 Nov 2024 01:45:33 +0000
Certificate not after:    Tue 09 Feb 2027 01:45:33 +0000
Subordinate resources:    AS: 55217

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d2:67:15:45:19:e5:0f:90:69:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Nov  6 01:45:33 2024 GMT
            Not After : Feb  9 01:45:33 2027 GMT
        Subject: CN=5795d76b-b961-41d5-a1c4-1acb2ac4455a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8e:19:52:0d:56:74:b4:dc:b6:52:42:57:a7:
                    89:fe:75:31:7d:9e:fa:3d:3f:b7:ec:06:7e:50:70:
                    ae:dc:54:e4:16:d8:cf:56:20:d3:a9:69:de:23:c8:
                    a9:cf:f8:32:9a:bc:97:7c:83:39:16:a6:5c:1d:df:
                    2d:88:3d:10:36:e7:49:a0:d3:55:3c:23:a8:eb:5e:
                    b2:35:68:65:f4:a5:01:5f:bc:74:d6:01:5b:25:3e:
                    a9:ef:40:51:94:6f:4b:9c:21:71:07:d5:68:fb:c3:
                    12:fa:f0:17:dc:c5:8f:b2:a4:2a:49:4c:33:c0:4a:
                    e3:55:e5:c4:ba:53:11:07:31:78:96:44:3c:23:36:
                    7c:d9:2a:56:f7:9d:a1:e8:27:e8:14:a0:35:08:70:
                    5a:ac:01:bb:98:3c:00:c0:b5:3a:8e:ee:75:95:25:
                    31:38:55:2d:5a:01:be:e1:b3:2e:13:34:d4:1d:1b:
                    4d:0b:4b:88:1a:74:97:1f:49:e9:20:8c:5c:63:1e:
                    7d:a6:ab:65:64:fe:7e:94:14:04:3b:08:2e:2b:78:
                    f0:8e:e2:cf:7d:64:03:07:a6:4b:be:29:e3:24:fa:
                    16:0e:12:6f:36:e1:20:dc:70:ac:86:a8:59:6f:44:
                    89:19:54:05:c5:9c:de:53:52:0d:b2:b4:b9:65:4e:
                    c4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:00:42:47:6F:5E:2E:41:87:4D:D3:D5:EB:C0:98:98:38:20:62:67
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5795d76b-b961-41d5-a1c4-1acb2ac4455a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5795d76b-b961-41d5-a1c4-1acb2ac4455a/5795d76b-b961-41d5-a1c4-1acb2ac4455a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55217

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:3d:d2:3c:f9:9e:93:6e:57:25:33:44:e8:d6:ce:d3:83:08:
         3c:e7:0c:7f:11:80:c0:1a:ef:f4:54:b6:05:93:e5:60:fd:d2:
         f9:41:97:41:b4:ca:53:1f:21:d4:44:69:34:69:cd:fe:df:8b:
         15:05:30:a9:d1:eb:c1:cf:72:b7:7c:72:9a:b3:df:53:cb:bb:
         67:19:8f:68:f5:94:c8:3b:18:2b:da:53:fa:5a:a1:63:b2:19:
         f4:49:00:27:59:bc:b8:ba:07:8a:cb:23:86:8d:c4:b0:79:00:
         f2:ca:e3:c0:e0:c2:53:c3:f3:c1:c7:a5:35:39:cc:b4:a7:47:
         9d:4a:1d:6d:7c:4c:05:40:cd:b5:0d:22:96:aa:b5:92:3a:4a:
         8b:21:08:48:59:86:dd:7a:5a:11:43:1a:54:30:3a:ff:9b:4c:
         ab:fc:78:5c:72:c2:79:11:d4:b7:f6:70:30:ac:37:e2:9e:2c:
         06:7e:0d:4c:b6:b1:b8:98:ab:54:b7:49:f1:c3:20:27:f5:63:
         3e:3e:a4:a8:8a:32:f7:08:3a:9a:6d:f9:75:7e:4f:61:e2:ea:
         20:87:07:f8:ab:66:16:42:fa:55:9c:92:95:46:04:a7:16:2f:
         7a:a7:47:e4:25:fb:d6:2c:36:95:cc:24:51:6f:ee:78:f0:c8:
         76:40:9a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----