Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0c81d5-620d-4b16-bd9c-4f5a7e809683.cer
File:                     de0c81d5-620d-4b16-bd9c-4f5a7e809683.cer (raw, json)
Hash identifier:          bIvQuKNnV4yhUbAhNEVJAtNO/LJKkmUVNKYZciYZMoI=
Subject key identifier:   77:53:2A:4C:65:87:A4:1E:5F:DF:D0:CD:E7:9D:4C:23:25:39:A9:02
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858472F28F22B1D4F48F2E5C13D40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0c81d5-620d-4b16-bd9c-4f5a7e809683/de0c81d5-620d-4b16-bd9c-4f5a7e809683.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0c81d5-620d-4b16-bd9c-4f5a7e809683/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 12 Sep 2024 00:45:26 +0000
Certificate not after:    Wed 16 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 33753
                          IP: 216.183.110.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:28:f2:2b:1d:4f:48:f2:e5:c1:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 12 00:45:26 2024 GMT
            Not After : Dec 16 01:45:26 2026 GMT
        Subject: CN=de0c81d5-620d-4b16-bd9c-4f5a7e809683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:04:73:f6:92:4b:c3:00:83:e3:2d:de:79:e9:
                    b9:2a:7d:98:d2:87:78:ed:41:5a:88:f0:00:d5:6a:
                    52:3a:d4:c4:40:2e:0d:d1:49:ec:61:ec:2a:8c:4d:
                    a7:3b:08:20:e0:af:5f:11:93:84:e0:7b:89:29:d2:
                    c0:3b:e7:97:3b:7c:83:a6:e2:8b:29:2f:bd:51:0f:
                    55:12:84:49:09:87:22:3a:91:44:dc:ca:c9:9b:13:
                    22:eb:74:68:41:8b:0e:a0:33:e7:d0:f3:2a:34:e9:
                    ed:78:c1:51:25:66:4a:13:fc:b0:bc:a1:fb:ea:9f:
                    a5:c1:1f:65:f7:5f:92:ca:4b:70:14:71:b3:86:86:
                    50:23:6d:81:df:69:e4:fd:83:39:fe:99:c4:f4:58:
                    e0:27:b3:c4:3e:91:3c:09:39:7b:0b:bf:0c:56:1a:
                    30:44:94:45:e4:ac:72:ec:3f:4a:9b:5c:00:39:19:
                    3d:22:50:71:48:fc:cb:57:ee:bc:8f:95:ce:cf:37:
                    80:d8:4d:45:3a:ff:c7:02:b3:28:f3:bb:b8:de:74:
                    98:d3:6b:23:f1:c6:0b:0d:25:59:86:57:8c:69:18:
                    7b:59:43:e5:ee:73:bb:44:07:28:bc:0f:b4:bf:a3:
                    a1:28:b7:46:1c:1d:60:6c:b0:a1:3f:f5:8e:bf:ba:
                    5a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:53:2A:4C:65:87:A4:1E:5F:DF:D0:CD:E7:9D:4C:23:25:39:A9:02
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0c81d5-620d-4b16-bd9c-4f5a7e809683/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0c81d5-620d-4b16-bd9c-4f5a7e809683/de0c81d5-620d-4b16-bd9c-4f5a7e809683.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.183.110.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33753

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:56:3f:1e:a0:e9:a1:1a:36:93:66:89:b2:bf:78:cd:49:9e:
         be:76:6b:61:b3:e2:2e:cc:2c:76:d8:41:73:77:96:e5:5b:c3:
         47:1d:0c:9f:9d:7d:b7:34:9b:e1:ca:9c:88:c1:c5:8f:7c:de:
         26:8f:3d:9d:e3:c2:ee:94:e6:b2:e0:45:51:83:1b:e3:8f:5c:
         9e:ac:2d:bf:d1:67:04:fa:f4:2f:d0:17:39:34:2f:ed:c1:d6:
         11:39:fc:e0:ee:5d:99:35:83:a3:26:a4:81:44:38:f5:f1:3c:
         29:9d:ec:20:76:46:5f:4c:d4:90:0c:08:6f:88:9c:68:43:4d:
         3b:07:03:af:f2:8d:2f:8d:aa:9b:ad:da:f8:dc:85:f7:18:e1:
         1c:08:4e:13:37:1a:8a:1e:57:b7:7d:26:24:48:92:1a:97:11:
         ae:42:e1:4f:b0:35:c5:c4:80:b9:48:f5:62:44:0e:b2:f2:55:
         d9:d8:24:44:09:2a:83:c0:90:63:86:fa:43:59:1c:f1:47:06:
         55:87:46:88:5b:89:7f:92:65:be:1b:0b:bc:22:49:36:68:9a:
         16:95:51:af:5c:0f:0c:e2:9a:07:d0:d0:ff:25:13:86:be:47:
         e9:af:c7:d0:d3:a1:fe:97:f4:7d:4b:78:99:02:9a:1f:77:5a:
         1e:9b:2b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----