Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d74c96e-4da7-4027-b92a-f02a640fd436.cer
File:                     6d74c96e-4da7-4027-b92a-f02a640fd436.cer (raw, json)
Hash identifier:          K/Uaa9ONIDJh1LVYuEWeVRxTkhl+84M+CkEBrjWtKxw=
Subject key identifier:   8F:8C:88:EC:DF:1C:EB:D4:15:29:6C:D4:AD:78:88:E8:3B:5D:E5:D3
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858455979358643F3E22ACFAEBC10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d74c96e-4da7-4027-b92a-f02a640fd436/6d74c96e-4da7-4027-b92a-f02a640fd436.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d74c96e-4da7-4027-b92a-f02a640fd436/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 27 Mar 2024 18:57:14 +0000
Certificate not after:    Tue 21 Oct 2025 16:35:02 +0000
Subordinate resources:    AS: 399461
                          IP: 2602:fcbc::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:59:79:35:86:43:f3:e2:2a:cf:ae:bc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Mar 27 18:57:14 2024 GMT
            Not After : Oct 21 16:35:02 2025 GMT
        Subject: CN=6d74c96e-4da7-4027-b92a-f02a640fd436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:0c:8b:ff:38:97:3b:42:19:08:86:3e:0d:
                    c5:7e:b5:44:90:6a:1a:2b:82:85:cb:d1:7c:a7:ca:
                    df:14:9a:4b:76:ac:42:d0:84:7c:15:10:9a:35:c6:
                    7a:12:1f:a6:7f:2f:32:b9:8b:6f:e1:9c:1a:5a:39:
                    50:ee:91:0f:c5:e2:15:78:cc:a4:ae:10:89:94:22:
                    41:40:36:a8:b7:82:44:08:c2:d8:ee:3c:4f:75:21:
                    db:09:fd:59:05:05:43:f9:5a:4d:75:77:0f:6d:51:
                    b2:ab:93:10:15:24:d8:1c:da:57:d6:2e:78:c1:8a:
                    42:68:d4:b1:8a:96:d4:00:ef:f1:3a:19:e7:f2:1b:
                    85:aa:3d:b0:66:1b:53:13:26:01:47:c7:f0:82:00:
                    b5:89:dd:c6:5c:41:1f:30:08:a3:43:c4:57:2f:59:
                    93:c4:ae:1f:e8:83:cd:19:f2:a2:84:f2:70:b6:55:
                    63:d6:26:4a:d0:8d:87:04:dc:44:8f:48:82:36:1b:
                    1b:ba:49:24:59:29:b9:7c:7a:8a:56:9f:7c:7b:2e:
                    e6:8a:de:bd:fe:6e:3b:29:be:11:f6:99:47:7d:01:
                    78:31:b0:12:28:b4:83:c3:e4:c5:11:13:42:98:7b:
                    3b:d6:5b:ec:f5:81:42:bf:3e:a1:ad:e7:97:49:53:
                    97:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8C:88:EC:DF:1C:EB:D4:15:29:6C:D4:AD:78:88:E8:3B:5D:E5:D3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d74c96e-4da7-4027-b92a-f02a640fd436/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d74c96e-4da7-4027-b92a-f02a640fd436/6d74c96e-4da7-4027-b92a-f02a640fd436.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcbc::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399461

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e2:96:e9:88:3c:bb:47:e8:23:79:6f:0f:51:30:1a:09:10:
         f3:3a:aa:dc:0c:26:4b:97:3e:bc:ef:53:02:1d:50:a2:03:f6:
         23:60:20:37:47:bd:11:37:83:c5:02:9d:87:7e:b0:a2:cb:12:
         ef:81:e7:62:f8:26:03:4a:8c:52:1b:35:71:16:d9:06:cc:69:
         4e:a9:47:ce:1b:6e:a8:76:ef:11:d0:de:ba:25:67:f7:02:91:
         77:5f:d6:74:25:03:27:60:bd:fb:3a:2d:eb:8e:ce:57:72:cd:
         07:61:71:c9:7b:db:44:5e:24:3d:b7:32:06:e8:bb:c0:b9:0f:
         7f:c8:9b:30:e3:e1:3c:15:05:77:8b:74:1d:f5:25:bf:4e:f6:
         c5:90:fa:7b:4a:1a:9a:7f:f1:a4:ac:aa:77:f0:62:2b:58:1c:
         51:3a:e4:72:b2:70:8c:b3:bd:36:56:24:23:36:4f:5a:4c:6d:
         3b:e7:14:b6:50:66:24:27:5c:96:35:6e:04:ef:ef:44:ac:35:
         fe:0b:b6:7e:8a:38:a3:94:9a:e6:a7:b4:6a:3c:fe:56:81:6f:
         41:f7:86:6c:82:6b:17:3b:2f:fb:8a:83:19:f8:ce:16:fd:e1:
         06:68:85:96:56:2b:a4:2e:ba:28:be:b5:73:ac:15:1e:dc:8e:
         a3:34:d5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----