Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8182fded-d790-489b-a08d-2426b39a19cc.cer
File:                     8182fded-d790-489b-a08d-2426b39a19cc.cer (raw, json)
Hash identifier:          MMKpc0nEhYduT1J37o9ZwKaaFin13Jt/sz039tXOqGw=
Subject key identifier:   8F:D8:A3:34:73:99:9C:5D:F1:D5:AB:5B:30:F7:67:C0:D7:D9:BB:83
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858478B498E5B6FBE79855BE9D300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8182fded-d790-489b-a08d-2426b39a19cc/8182fded-d790-489b-a08d-2426b39a19cc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8182fded-d790-489b-a08d-2426b39a19cc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 15 Oct 2024 00:45:31 +0000
Certificate not after:    Mon 18 Jan 2027 01:45:31 +0000
Subordinate resources:    AS: 40557
                          IP: 204.62.202.0/23
                          IP: 2620:9:4000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8b:49:8e:5b:6f:be:79:85:5b:e9:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 15 00:45:31 2024 GMT
            Not After : Jan 18 01:45:31 2027 GMT
        Subject: CN=8182fded-d790-489b-a08d-2426b39a19cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:87:b8:57:e7:71:91:71:fe:17:08:e6:72:1f:
                    4b:71:87:04:da:32:01:f4:64:de:99:a5:2d:34:48:
                    fb:49:1e:f6:d7:37:27:01:ed:9b:8f:85:4d:7c:c7:
                    9a:e1:d1:0a:21:29:aa:f6:e7:e4:f8:96:d1:cd:d9:
                    4b:91:a6:8c:da:1c:f6:f0:99:d4:94:4c:4f:30:4e:
                    cb:0e:78:18:61:1a:0e:8d:eb:05:05:bb:61:15:f0:
                    68:1a:d2:9d:6b:51:18:b2:9f:c3:df:48:87:b1:47:
                    dd:b1:37:5b:3a:e2:f3:dc:0f:ea:d8:01:28:c4:96:
                    eb:57:80:16:12:d6:57:1d:34:dc:82:af:48:c8:4d:
                    fa:7b:86:e7:96:d0:e7:65:14:7b:76:cd:d4:0a:9e:
                    d4:2e:f6:db:02:10:a6:59:eb:cf:9f:2f:17:38:d7:
                    b4:92:a4:56:74:dd:10:8c:7c:01:9c:a8:a3:c9:5f:
                    b6:a6:64:ee:11:98:ad:dc:55:02:24:8e:c7:be:94:
                    72:7d:d9:79:86:21:55:c2:dc:25:a4:84:68:29:08:
                    6b:18:4f:7c:86:e5:25:ac:87:a2:2c:b9:6e:12:62:
                    72:a5:d6:e8:c7:7a:49:91:1d:3a:04:8c:17:e1:d2:
                    70:84:8e:77:80:d4:da:7f:25:76:c9:f4:4a:e1:15:
                    de:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D8:A3:34:73:99:9C:5D:F1:D5:AB:5B:30:F7:67:C0:D7:D9:BB:83
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8182fded-d790-489b-a08d-2426b39a19cc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8182fded-d790-489b-a08d-2426b39a19cc/8182fded-d790-489b-a08d-2426b39a19cc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.62.202.0/23
                IPv6:
                  2620:9:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40557

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:0c:4a:fc:17:99:34:b2:ec:3b:2d:80:44:fd:28:2f:3c:76:
         3e:47:c6:ca:3f:7c:2d:dc:32:5b:fe:fd:d1:b5:9e:e6:23:4e:
         dc:e4:38:77:cd:60:cd:32:0f:a0:78:a4:d6:c0:3c:85:ab:12:
         a1:4f:70:2c:d4:80:5f:01:5e:89:c4:5f:f6:76:b6:37:f1:da:
         fa:78:e4:e6:32:66:e3:6a:dd:75:ca:06:5e:3c:ff:6e:15:6f:
         31:91:49:cf:df:81:67:6d:c1:21:f7:43:37:20:d8:bf:96:ec:
         e4:a7:c3:4c:0e:eb:11:2f:94:0b:72:ed:17:fc:65:1f:6a:8d:
         1a:3b:87:39:a9:c7:97:87:a9:1a:76:7f:2a:7f:dc:57:4e:93:
         dd:58:57:85:01:e5:bf:b4:42:cd:25:26:cb:2a:65:26:64:48:
         f9:63:a9:bf:2f:25:ec:d0:6b:cf:62:2e:95:0f:27:60:8b:9a:
         f6:44:7b:da:ba:c6:f8:52:a6:36:59:fd:24:bd:1a:65:fb:6f:
         27:0e:f6:ca:96:4c:df:09:87:a8:00:8b:0c:8e:4f:77:4c:82:
         b3:3a:02:cb:7d:23:f2:06:1f:42:b4:b8:26:58:83:9a:d3:b9:
         3c:b8:f3:91:38:f7:53:9e:4a:71:4a:62:90:c8:0e:ac:19:52:
         be:21:72:92
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----