Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/597e66df-62b5-455d-b2ef-76173c167b74.cer
File:                     597e66df-62b5-455d-b2ef-76173c167b74.cer (raw, json)
Hash identifier:          sT76XlqIjOySl6quWImAXAJixRxcsOT7/7+IdQHWx+s=
Subject key identifier:   8B:E6:5F:7E:83:6D:46:91:E1:22:23:6C:75:E5:46:2A:7B:88:D9:3B
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858477A896A0A172A8793CBB50E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/597e66df-62b5-455d-b2ef-76173c167b74/597e66df-62b5-455d-b2ef-76173c167b74.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/597e66df-62b5-455d-b2ef-76173c167b74/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 09 Oct 2024 00:45:26 +0000
Certificate not after:    Tue 12 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 397093

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7a:89:6a:0a:17:2a:87:93:cb:b5:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct  9 00:45:26 2024 GMT
            Not After : Jan 12 01:45:26 2027 GMT
        Subject: CN=597e66df-62b5-455d-b2ef-76173c167b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:cc:40:76:33:49:29:ee:f6:75:2d:d2:76:c9:
                    bb:10:d5:90:a5:ba:14:31:ae:b3:26:11:bc:64:79:
                    4b:1f:56:0e:8a:d2:7e:c7:96:92:7f:d0:12:4f:f8:
                    d0:25:e5:5d:78:9a:9f:3d:6b:47:f8:1f:66:d6:a2:
                    f0:ce:d2:4e:be:67:3a:8c:6d:2a:94:51:fb:cc:9f:
                    eb:46:c7:64:c9:fb:b0:31:2d:61:1b:6a:b4:90:76:
                    3e:c6:c0:96:b3:5e:3a:3c:0a:af:af:95:4a:b6:a6:
                    69:e5:4d:1a:53:13:bf:b3:a9:94:ce:78:b1:c8:0a:
                    27:93:8b:c8:eb:7c:77:1a:ba:4f:54:96:ec:32:a0:
                    a2:ed:25:a1:15:e2:82:2d:03:44:6f:99:6a:53:86:
                    55:81:11:1a:7f:9d:f2:f7:89:db:03:bc:a5:91:ff:
                    ba:66:fa:88:4d:10:4d:3d:cf:c0:7e:bb:fd:be:17:
                    e6:6e:4a:af:d9:89:52:07:14:7c:77:96:7c:ab:d0:
                    b7:3f:d3:cb:5e:07:53:4c:50:4f:82:f6:fd:63:44:
                    ba:dc:0c:dc:d7:0e:af:47:cf:58:39:ef:9a:fb:b2:
                    bd:65:5e:7f:d6:cb:e3:e9:fb:d5:54:f0:d7:d1:9e:
                    6c:b9:21:0a:67:79:a1:90:1d:60:6a:02:05:f4:9d:
                    e5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E6:5F:7E:83:6D:46:91:E1:22:23:6C:75:E5:46:2A:7B:88:D9:3B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/597e66df-62b5-455d-b2ef-76173c167b74/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/597e66df-62b5-455d-b2ef-76173c167b74/597e66df-62b5-455d-b2ef-76173c167b74.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397093

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:87:a9:54:8d:b6:1d:27:4c:d1:b2:3d:6f:57:23:02:74:1e:
         be:1d:82:1d:a6:0d:35:35:4b:63:c9:cb:95:5a:51:64:af:9a:
         76:2d:15:0b:bd:fb:11:cc:f6:38:7d:ce:54:f7:86:e1:54:04:
         51:9b:5a:d4:db:94:55:c1:c6:41:55:95:9a:0d:d3:d5:f7:1a:
         62:77:ce:a5:a8:e8:d0:92:f4:18:c5:8d:9f:5b:af:83:a3:a3:
         5d:57:2e:38:7b:38:d7:9e:e6:e7:f6:1b:ed:a6:e6:e2:5d:15:
         74:f9:a2:82:96:16:4b:bb:0a:29:ba:bc:e9:49:42:a5:38:df:
         5a:39:60:bd:b8:3b:b5:a5:b0:0a:6d:d7:4b:31:d7:27:c4:21:
         c0:af:43:fb:cb:7f:eb:da:65:ae:4c:42:cf:41:f4:66:c3:eb:
         e0:36:34:aa:19:9b:de:98:c6:6e:57:a9:68:c3:77:fc:0e:e2:
         28:87:cd:56:a4:ed:d3:a4:bf:ca:d6:60:9c:a4:e0:ae:63:a9:
         ea:37:0d:0b:ed:64:b3:2f:1d:93:86:89:79:44:e4:bf:2c:01:
         d9:60:0f:b0:33:6a:e3:96:72:32:0b:19:82:5b:1a:ba:92:33:
         c2:e0:ba:35:d9:17:6e:a3:a4:15:35:36:f1:20:f4:17:8b:e2:
         f0:35:93:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----