Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
File:                     b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer (raw, json)
Hash identifier:          jz/XGx2wI+XxmNrtdPAvVprsPNsKy/orsfiTokcd04g=
Subject key identifier:   1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858474F74EF674ADEF4F9360AFFE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 23 Sep 2024 14:24:24 +0000
Certificate not after:    Sun 27 Dec 2026 15:24:24 +0000
Subordinate resources:    AS: 11248
                          IP: 204.8.24.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:74:ef:67:4a:de:f4:f9:36:0a:ff:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 23 14:24:24 2024 GMT
            Not After : Dec 27 15:24:24 2026 GMT
        Subject: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b5:54:4f:8d:30:aa:fc:2d:58:36:11:16:dc:
                    46:3f:8a:b5:83:8b:14:26:79:9e:af:72:23:1c:e8:
                    22:27:82:eb:b0:55:8d:72:4e:a4:f8:18:06:84:4a:
                    b2:a7:07:93:62:d1:c0:43:f5:8d:31:18:ff:69:a1:
                    d9:a2:c3:ca:cc:6a:4b:a9:84:4e:7f:c4:b3:91:5f:
                    e2:e1:14:81:f3:72:ab:3a:5c:30:d2:19:28:03:1b:
                    d2:d3:78:d2:ca:62:42:2a:e7:b0:91:d9:5e:88:cb:
                    bb:76:a2:f2:fb:1a:8b:91:40:10:3c:94:ba:90:49:
                    65:07:df:94:c8:f2:02:4d:32:97:04:f8:19:b3:f5:
                    f8:00:1a:7a:ff:88:58:03:d3:5f:c0:d8:34:d3:7b:
                    98:16:1b:db:b3:2c:2e:24:5d:7d:16:10:7e:f7:bd:
                    45:2c:40:2e:2b:1f:05:da:82:58:a2:1e:fd:8c:a0:
                    b9:bc:37:b1:35:4d:4d:a0:70:28:c6:1f:38:a3:60:
                    84:bc:8f:c1:68:5a:b0:fc:c3:64:0c:6e:c3:5a:c2:
                    75:a7:76:28:b9:e7:7e:cb:d3:39:ee:37:65:3b:39:
                    b8:8f:98:02:a7:51:d6:67:72:bb:35:30:54:c9:de:
                    f3:07:44:78:7e:03:2a:df:eb:e9:f3:0a:94:b8:e0:
                    9f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.24.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11248

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:2d:5f:32:c7:c5:3c:af:2b:a9:e8:69:b6:0a:1a:c2:07:69:
         23:ce:e1:9a:ca:49:13:d9:af:1b:58:98:77:a5:44:9a:11:79:
         6b:f3:ec:4d:c1:27:f0:b1:dd:46:82:0f:37:8e:6b:ec:bb:4f:
         5d:3c:03:20:dd:d0:47:b6:e3:7f:f4:83:94:49:82:e5:d5:55:
         41:dc:ca:0e:c3:b5:30:30:48:68:d1:2b:7d:28:70:9d:95:87:
         03:04:65:06:f3:36:83:d5:07:7c:5f:33:93:4c:cb:a3:92:4a:
         dd:a3:77:09:ac:2f:2d:b3:a2:fa:ce:0f:35:93:36:3d:51:21:
         b8:2b:53:5f:5a:f3:f4:51:ad:d6:bb:26:69:8c:b7:47:6f:3a:
         59:14:a2:78:36:b9:20:be:da:b4:57:f1:d8:2d:d3:33:f1:98:
         0f:79:99:e3:28:89:4a:93:8e:fb:d7:ba:37:46:e8:82:de:4a:
         76:f1:3e:33:a7:22:37:dc:8f:7b:2a:a8:0d:f5:95:d3:01:ca:
         94:fa:76:b1:2b:42:14:37:c4:20:ef:8c:ca:4c:32:e1:ed:ef:
         42:d6:bc:3d:5c:72:3b:b1:d9:27:e4:ec:02:14:01:ae:a2:1c:
         fc:89:dd:ec:ef:6c:d8:e8:8f:41:e6:80:bb:e8:ab:19:b1:5d:
         2e:19:ea:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----