Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer
File:                     a2235d90-d905-4ef7-9447-870904044658.cer (raw, json)
Hash identifier:          K8+xCkOCbrnL+/yWUuf7dwkg7JhLyHXNHhU5XcCvbWM=
Subject key identifier:   12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847A899B371C3DC63C67D1DA000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 25 Oct 2024 12:45:26 +0000
Certificate not after:    Thu 28 Jan 2027 13:45:26 +0000
Subordinate resources:    AS: 19852
                          AS: 23017
                          IP: 2607:5ac0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a8:99:b3:71:c3:dc:63:c6:7d:1d:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 25 12:45:26 2024 GMT
            Not After : Jan 28 13:45:26 2027 GMT
        Subject: CN=a2235d90-d905-4ef7-9447-870904044658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:34:15:04:67:fc:32:4d:9a:cf:6b:85:88:b0:
                    1a:50:df:78:a2:fa:4b:30:2d:94:e8:cb:42:44:f0:
                    db:e4:61:45:c6:e6:f4:3a:84:22:ee:f0:da:df:c9:
                    08:6d:8c:db:7c:54:e8:ee:dd:7f:17:9f:b9:3e:4d:
                    b0:6c:01:a9:86:46:5f:37:53:cf:e6:25:2a:28:2e:
                    46:65:6f:c4:a7:26:0c:d1:2f:c7:b1:5a:82:84:cb:
                    03:f5:ec:21:ed:4e:01:bf:c9:10:06:fc:24:8a:dd:
                    aa:13:9c:f9:62:07:84:a1:9a:d2:05:33:25:e3:c9:
                    0c:b3:ff:38:ab:15:9a:4a:58:e1:8e:0e:cc:79:3a:
                    f4:aa:be:b2:1e:fb:4b:8c:1b:99:a7:42:1d:61:21:
                    cb:5a:97:d8:82:0c:4d:74:29:3f:d6:17:0f:ac:33:
                    d3:00:43:ae:da:0a:85:ff:f5:00:5f:9d:7a:cb:b2:
                    23:8d:e4:1c:f5:b4:8f:b1:05:4a:fa:90:2f:14:bf:
                    7f:20:58:f9:cb:dd:56:c7:4a:53:81:62:d6:ac:43:
                    2a:7b:ab:9a:19:6e:f1:86:ca:9f:d2:3e:0d:2c:0f:
                    33:30:66:35:8b:e9:5d:1d:64:f3:3f:e1:f3:ae:df:
                    5f:63:73:6c:a9:d1:d1:13:b2:0e:52:f5:52:c3:30:
                    fd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19852
                  23017

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:6a:94:57:04:d7:9d:8c:94:1d:49:e7:ab:16:d2:fd:21:51:
         be:79:70:ae:e6:97:51:b4:c6:ea:c9:4f:15:a4:aa:f9:ed:ce:
         91:02:63:fd:2d:d7:2b:24:68:fb:16:02:f5:c5:b5:c4:8b:58:
         ce:09:a6:57:81:3d:33:ba:8e:34:7d:ea:0f:c1:d7:eb:eb:b7:
         32:b3:20:33:29:b0:a3:44:64:6c:8e:7a:d5:28:61:24:f4:b8:
         a9:27:9b:d7:95:fc:66:ca:29:f8:fc:0e:95:89:58:cf:a3:09:
         6b:41:5b:bf:13:5f:71:47:b8:7a:4f:63:79:5b:8a:d9:80:2c:
         3a:6a:44:2e:e7:fe:80:36:6a:21:13:55:30:8c:c3:70:7d:91:
         22:2b:06:2a:23:f5:d3:9d:63:1c:44:72:fa:66:c7:3c:9c:d0:
         17:71:41:84:b3:1d:37:5b:c1:44:a3:88:2c:ac:5b:59:79:0e:
         c4:69:09:68:c9:88:94:21:35:07:15:c0:a5:a8:6d:13:3f:6a:
         66:4f:a0:47:d9:b1:2c:19:0e:54:a9:48:de:89:d3:c9:83:04:
         2b:8d:0b:b8:25:97:c3:ba:89:51:35:39:db:d9:95:bc:65:5c:
         4d:8e:90:b3:45:30:37:55:be:ed:6f:c0:a7:51:23:93:dc:2a:
         75:c8:1c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----