Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d74c96e-4da7-4027-b92a-f02a640fd436.cer
File:                     6d74c96e-4da7-4027-b92a-f02a640fd436.cer (raw, json)
Hash identifier:          8d1c4GBUqVbBRO42OrrXVsFB3vXCkmeBTSoFGK1PuL0=
Subject key identifier:   8F:8C:88:EC:DF:1C:EB:D4:15:29:6C:D4:AD:78:88:E8:3B:5D:E5:D3
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858479ED44E1CD9CAED72D5D193C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d74c96e-4da7-4027-b92a-f02a640fd436/6d74c96e-4da7-4027-b92a-f02a640fd436.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d74c96e-4da7-4027-b92a-f02a640fd436/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 22 Oct 2024 00:45:26 +0000
Certificate not after:    Mon 25 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 399461
                          IP: 2602:fcbc::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9e:d4:4e:1c:d9:ca:ed:72:d5:d1:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 22 00:45:26 2024 GMT
            Not After : Jan 25 01:45:26 2027 GMT
        Subject: CN=6d74c96e-4da7-4027-b92a-f02a640fd436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:0c:8b:ff:38:97:3b:42:19:08:86:3e:0d:
                    c5:7e:b5:44:90:6a:1a:2b:82:85:cb:d1:7c:a7:ca:
                    df:14:9a:4b:76:ac:42:d0:84:7c:15:10:9a:35:c6:
                    7a:12:1f:a6:7f:2f:32:b9:8b:6f:e1:9c:1a:5a:39:
                    50:ee:91:0f:c5:e2:15:78:cc:a4:ae:10:89:94:22:
                    41:40:36:a8:b7:82:44:08:c2:d8:ee:3c:4f:75:21:
                    db:09:fd:59:05:05:43:f9:5a:4d:75:77:0f:6d:51:
                    b2:ab:93:10:15:24:d8:1c:da:57:d6:2e:78:c1:8a:
                    42:68:d4:b1:8a:96:d4:00:ef:f1:3a:19:e7:f2:1b:
                    85:aa:3d:b0:66:1b:53:13:26:01:47:c7:f0:82:00:
                    b5:89:dd:c6:5c:41:1f:30:08:a3:43:c4:57:2f:59:
                    93:c4:ae:1f:e8:83:cd:19:f2:a2:84:f2:70:b6:55:
                    63:d6:26:4a:d0:8d:87:04:dc:44:8f:48:82:36:1b:
                    1b:ba:49:24:59:29:b9:7c:7a:8a:56:9f:7c:7b:2e:
                    e6:8a:de:bd:fe:6e:3b:29:be:11:f6:99:47:7d:01:
                    78:31:b0:12:28:b4:83:c3:e4:c5:11:13:42:98:7b:
                    3b:d6:5b:ec:f5:81:42:bf:3e:a1:ad:e7:97:49:53:
                    97:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8C:88:EC:DF:1C:EB:D4:15:29:6C:D4:AD:78:88:E8:3B:5D:E5:D3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d74c96e-4da7-4027-b92a-f02a640fd436/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d74c96e-4da7-4027-b92a-f02a640fd436/6d74c96e-4da7-4027-b92a-f02a640fd436.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcbc::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399461

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:0e:64:b6:27:19:d6:fd:b5:b6:9f:6c:b5:71:3f:71:4f:e2:
         16:49:26:9c:24:2f:2c:e2:0e:9b:44:f3:b5:3e:12:92:a4:24:
         98:a5:66:bc:11:f7:7f:21:03:a0:77:27:ba:ae:57:35:ca:28:
         2d:73:a8:c8:09:74:18:a3:5f:76:43:54:a5:fc:40:4b:d6:9d:
         85:bd:42:94:72:b0:e9:d8:b0:0e:d9:e8:e8:49:dc:26:b4:62:
         88:b3:29:6d:ed:90:e9:70:7b:87:c4:00:79:5d:a3:9c:c1:12:
         cd:d7:d0:ca:6e:e1:50:af:8b:9b:3c:5b:9f:8d:03:f2:88:da:
         92:4d:fd:9a:6e:af:66:01:71:5e:a7:e0:e4:c4:e7:a2:cc:55:
         00:b2:ae:ce:7a:b4:cd:14:8b:33:2c:97:38:6f:b8:ec:de:6d:
         95:78:a3:be:9b:32:b5:a6:20:7e:8c:47:8d:ed:4e:aa:e4:c6:
         a8:c6:73:fe:70:83:3d:06:77:6c:2a:3e:fd:3b:14:aa:ec:6c:
         84:45:8a:89:bd:c6:99:9a:e3:82:14:e1:92:f9:8d:52:88:47:
         47:85:e6:ae:22:56:db:29:54:38:45:f2:cb:0c:3c:0c:be:c0:
         cf:47:17:86:19:53:ac:1b:7b:b1:00:7e:84:15:50:f4:bc:97:
         c7:7a:92:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----