Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
File:                     9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer (raw, json)
Hash identifier:          LfTpkho9MhHTzSf6GsS3xQKpQKsuh5Xxw6fLTikE+oU=
Subject key identifier:   ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584793A992CDFA85234551A84A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 18 Oct 2024 00:45:26 +0000
Certificate not after:    Thu 21 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 25828
                          AS: 54885
                          AS: 394217
                          IP: 192.102.16.0/24
                          IP: 192.207.45.0/24
                          IP: 2601:3000::/28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:a9:92:cd:fa:85:23:45:51:a8:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 18 00:45:26 2024 GMT
            Not After : Jan 21 01:45:26 2027 GMT
        Subject: CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:68:c1:f5:31:a7:e9:63:25:61:b9:c6:b1:f3:
                    19:5d:f5:1a:22:3e:94:c5:94:ef:e8:05:40:c4:1e:
                    a0:4b:96:6b:80:d2:87:de:cb:21:b6:0e:05:e9:9c:
                    49:96:61:a4:a6:16:5b:54:0e:21:e4:95:fb:5e:1b:
                    c1:3a:d3:4a:29:fa:e2:38:c6:53:61:df:16:7c:dd:
                    6e:1a:8f:96:05:8a:ac:fd:0b:16:40:6f:de:ca:90:
                    36:89:83:aa:a2:95:ed:87:e4:5a:fd:4e:a7:4d:fe:
                    bc:bf:5c:5c:ac:61:07:4a:6f:3a:06:52:59:fd:29:
                    e1:ff:4c:8b:df:38:63:b9:ac:0d:a1:46:df:3f:56:
                    f6:6a:d3:5b:3c:70:e2:63:6e:4d:d3:56:ca:5c:e7:
                    23:36:55:5f:9d:3e:30:9c:4f:2d:08:8b:da:fc:67:
                    bb:9e:e6:2d:81:51:7e:2e:fe:d3:fe:44:74:55:a3:
                    6d:9c:2c:4e:57:20:b0:c1:a4:5b:61:6a:0b:2f:63:
                    55:b1:27:25:27:81:00:6e:f4:17:c3:76:44:d2:b3:
                    e2:8d:41:bb:11:d7:20:98:37:38:f8:a0:78:5c:b3:
                    ae:7b:4c:9d:3f:f9:f5:b5:6c:dd:f4:17:8d:fd:a4:
                    fe:18:69:55:f4:51:e0:59:c9:b1:24:41:bd:59:34:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.16.0/24
                  192.207.45.0/24
                IPv6:
                  2601:3000::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25828
                  54885
                  394217

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:0e:56:6c:86:93:e7:d7:79:81:d0:b0:ed:03:99:23:10:ca:
         65:4c:f6:28:bd:a5:af:a8:da:55:ef:1d:d9:01:32:a0:c8:4d:
         2e:5b:5f:10:92:97:6b:73:ba:30:be:8c:cd:8c:ee:c1:9d:d8:
         8c:15:0c:1b:5f:4a:3b:ff:e0:19:2a:b6:25:8e:80:83:31:2a:
         ad:32:cd:06:07:69:76:7c:4b:34:60:f1:c9:c8:09:65:13:8c:
         54:f4:1c:83:06:1d:60:1d:e3:63:cb:db:46:5c:17:54:e5:07:
         ec:42:1f:07:77:73:ec:e6:69:1e:36:43:78:26:d0:17:3b:92:
         a6:9d:d7:55:c1:a8:99:9f:0d:90:48:a7:07:f9:2b:04:b5:d4:
         1f:22:af:34:ec:ea:f0:e8:3d:48:30:46:36:85:fd:89:2f:31:
         70:bb:86:1b:8c:87:50:31:b2:d0:57:42:b3:f5:db:65:4b:f2:
         7d:1c:dc:f7:de:0c:86:f0:09:9c:e6:e2:34:d9:93:5a:13:5d:
         ab:f1:0f:64:78:28:a0:3a:ed:92:f4:3c:d8:d6:ce:4f:8b:d3:
         04:d7:33:57:b5:a5:db:1f:36:40:7e:26:40:2d:14:c6:2d:12:
         a1:6d:8b:aa:1d:e5:87:27:b6:a9:27:35:a9:27:12:a5:50:bb:
         75:4a:5f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----