Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e.cer
File:                     e1fca709-9829-483c-a335-41bcfa34ee4e.cer (raw, json)
Hash identifier:          GHquNldzyZtVYy+O7MzNm4ToeP0Fr7kLJ1Ko+j4xrvs=
Subject key identifier:   6D:D1:1A:73:4B:14:07:01:55:9D:F0:29:6D:F6:5F:6E:BA:0F:27:BF
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847D3FD2379AD7FAC498CF1FAE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/e1fca709-9829-483c-a335-41bcfa34ee4e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 10 Nov 2024 01:45:33 +0000
Certificate not after:    Sat 13 Feb 2027 01:45:33 +0000
Subordinate resources:    IP: 204.108.176.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d3:fd:23:79:ad:7f:ac:49:8c:f1:fa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Nov 10 01:45:33 2024 GMT
            Not After : Feb 13 01:45:33 2027 GMT
        Subject: CN=e1fca709-9829-483c-a335-41bcfa34ee4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3f:73:3f:6f:aa:ad:d0:1f:12:d2:a3:2b:42:
                    22:33:9b:82:04:28:c7:ef:3f:96:bb:08:67:4c:59:
                    0a:89:e2:56:87:ec:e6:41:31:bd:75:88:5e:41:a9:
                    19:a6:54:d1:96:e3:a4:47:0f:24:7b:0a:a4:81:0e:
                    55:bb:2b:40:c8:2c:ce:e1:84:ca:bb:e7:e0:af:84:
                    e6:9d:8d:b4:78:7a:d1:84:3c:ec:6c:19:67:e4:a7:
                    60:c3:cb:39:6c:a9:a1:96:03:bf:4f:4e:22:f2:d8:
                    99:f3:eb:dd:c4:cd:7e:2c:3d:d9:76:bd:35:fe:4a:
                    f7:75:1d:bc:18:71:85:70:e5:37:c9:a4:a6:65:41:
                    30:34:7d:bd:e6:e5:b6:69:30:d5:d6:83:52:d9:5a:
                    24:6b:d5:1f:f1:0b:cb:4b:86:2c:89:56:b9:64:3d:
                    cd:a7:16:c0:22:3f:e6:8e:7e:d0:3d:fe:56:35:30:
                    c8:33:a6:84:12:ef:3e:99:ff:ef:93:2f:4c:0d:cb:
                    b1:42:eb:f8:d1:f5:26:92:97:75:de:7b:0c:f0:89:
                    71:5b:a9:4a:71:39:57:d7:d8:0f:9b:36:75:c2:f5:
                    78:98:8d:a5:cb:51:70:06:0b:29:1f:f8:a7:49:8a:
                    75:c7:7c:41:d2:a5:59:4c:fb:c9:f7:6c:32:e2:6c:
                    1a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D1:1A:73:4B:14:07:01:55:9D:F0:29:6D:F6:5F:6E:BA:0F:27:BF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/e1fca709-9829-483c-a335-41bcfa34ee4e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.108.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:24:01:2c:08:78:d0:a0:b3:26:eb:35:57:7d:4a:90:ac:21:
         ac:82:cb:2d:c6:9a:c3:5c:df:1c:69:39:c7:e3:6d:64:74:14:
         fe:68:cc:72:c7:14:ba:96:e1:6f:b2:1f:d8:f4:26:ae:35:54:
         cd:5a:ff:ae:02:d7:16:a6:7d:fc:53:15:57:d9:6c:0b:93:d9:
         af:d0:9a:9a:11:a7:e9:1c:ce:5f:cf:9f:33:03:21:f7:c6:e7:
         56:22:e9:c1:8a:21:12:35:1c:8d:44:3b:da:88:b0:24:fb:c9:
         99:82:fd:10:1d:3c:6c:3c:6a:25:34:4e:b3:8e:4f:50:5e:87:
         6d:0b:95:0f:68:47:61:16:ea:d3:dd:8f:c3:92:48:ca:07:67:
         e2:d0:8e:56:1e:1a:6c:d8:4f:79:e7:25:b6:d7:2c:6f:90:77:
         14:de:bd:55:2a:b0:64:ce:94:be:e7:50:c0:50:8c:53:3f:91:
         c5:e4:8b:a1:30:13:26:e1:1f:79:02:f3:15:a1:c9:2c:23:e6:
         33:97:0d:eb:c8:33:e9:a4:b2:14:86:85:0c:ed:6a:83:88:8e:
         df:81:69:8f:08:31:41:64:99:2a:bd:38:83:c7:b8:c3:b4:4e:
         47:95:7c:6c:8b:3a:db:e7:2b:07:86:2b:d6:49:7c:44:18:57:
         60:75:2b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----