Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6e020922-17bf-485e-a6af-97b5658f90b9.cer
File:                     6e020922-17bf-485e-a6af-97b5658f90b9.cer (raw, json)
Hash identifier:          +r9gwXzBQhf3imtDY0x8lgC3GQybpptISa4Cr01HToY=
Subject key identifier:   D5:E9:31:AF:7F:66:22:E3:31:41:DE:1F:52:1D:CF:61:1B:CF:3B:6A
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858474F74EF72B1E9E8DC4A171C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6e020922-17bf-485e-a6af-97b5658f90b9/6e020922-17bf-485e-a6af-97b5658f90b9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6e020922-17bf-485e-a6af-97b5658f90b9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 23 Sep 2024 14:24:24 +0000
Certificate not after:    Sun 27 Dec 2026 15:24:24 +0000
Subordinate resources:    AS: 399258

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:74:ef:72:b1:e9:e8:dc:4a:17:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 23 14:24:24 2024 GMT
            Not After : Dec 27 15:24:24 2026 GMT
        Subject: CN=6e020922-17bf-485e-a6af-97b5658f90b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:03:f1:35:fe:be:66:18:77:94:e0:08:bb:
                    fa:f0:ce:fa:bb:55:97:05:9f:a2:66:70:c6:db:36:
                    2e:bb:00:67:c3:7a:d2:d8:5f:9d:2d:7d:e3:ae:9f:
                    83:4c:7f:02:85:97:27:d9:13:f6:dc:60:7f:1f:9c:
                    d7:84:2f:db:55:2d:7d:28:a2:b5:63:6d:5e:ee:a9:
                    d0:58:a2:70:54:1d:f6:43:94:9f:3f:04:cf:2c:5c:
                    7b:13:0a:1b:2a:fc:08:ed:03:95:d9:93:db:7c:52:
                    0b:df:61:f9:a6:9b:29:34:89:20:eb:02:ce:3f:b0:
                    c3:38:02:6e:68:cd:13:fc:c4:88:bf:6e:83:6f:39:
                    36:dd:86:5f:23:36:90:fc:4a:72:e0:fd:b0:59:e0:
                    53:a2:c6:ce:ed:b5:00:76:e5:e1:72:5c:4f:71:b7:
                    97:38:67:44:da:ed:2c:4b:04:98:e7:5d:2e:e0:f9:
                    62:b8:21:8a:63:c6:5d:39:62:eb:bb:b8:4b:12:72:
                    96:20:3e:67:04:3c:18:8f:0a:f1:5e:92:e5:5d:2e:
                    59:e9:e9:ba:66:04:50:c9:7d:70:42:34:17:8a:a7:
                    61:12:8e:f8:d8:8e:24:e3:5d:d1:e2:3f:80:b6:d5:
                    ec:d6:74:37:17:a3:45:d2:36:2e:ed:43:40:67:34:
                    ee:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E9:31:AF:7F:66:22:E3:31:41:DE:1F:52:1D:CF:61:1B:CF:3B:6A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6e020922-17bf-485e-a6af-97b5658f90b9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6e020922-17bf-485e-a6af-97b5658f90b9/6e020922-17bf-485e-a6af-97b5658f90b9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399258

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a8:0e:c6:55:46:ee:e5:f6:86:ee:5a:c2:f4:4c:63:a7:bd:
         42:96:12:1e:06:87:b3:80:2e:51:6c:9f:da:f5:c3:4f:48:0e:
         b3:a5:96:5d:1a:26:bf:ae:de:28:0a:f3:62:30:6b:db:6d:e0:
         2f:92:a5:89:ec:71:f3:7b:c9:38:d2:f0:ae:1b:8f:9c:ee:d2:
         99:cd:fb:b2:d9:22:a6:ea:9c:3d:f2:f6:f7:89:29:58:25:b1:
         1c:56:de:a0:df:ec:6f:40:69:64:74:7e:7d:73:49:cd:82:e3:
         54:55:cd:f2:e2:ed:0e:75:59:e6:38:93:0f:e8:2c:32:85:b5:
         47:db:09:a1:df:09:40:7c:da:56:36:91:ec:2d:6e:fe:7e:8a:
         61:d3:a3:83:53:8b:08:24:9e:f1:4b:73:97:c9:b1:a7:a8:69:
         e3:9c:30:1c:87:34:62:03:45:76:11:76:a8:6e:49:7e:e4:53:
         a5:af:b2:a7:89:35:ac:98:5d:af:07:c8:f5:9b:3b:34:97:fb:
         37:55:a1:9d:28:53:7c:a2:11:c3:5c:d6:88:42:1d:02:0e:7e:
         b7:c2:47:0f:98:74:27:f0:7f:2f:88:97:7b:53:d8:71:d6:59:
         c7:9f:f8:d4:45:9a:2e:58:5c:7b:e1:c1:94:52:ec:34:5f:56:
         7e:43:d8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----