Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123.cer
File:                     eac71b30-0394-4c6c-ba2c-e133113ae123.cer (raw, json)
Hash identifier:          9stKMmiSTLV3kOiT5TmF1ThDFdwZHvC2C1lzQDuPpwA=
Subject key identifier:   17:86:A0:47:40:A5:F7:EC:D9:8C:50:52:51:0A:95:C4:AE:A5:A9:05
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858472993948EC6315D6EA6E6D000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123/eac71b30-0394-4c6c-ba2c-e133113ae123.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 10 Sep 2024 00:45:27 +0000
Certificate not after:    Mon 14 Dec 2026 01:45:27 +0000
Subordinate resources:    AS: 40173
                          IP: 206.168.118.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:93:94:8e:c6:31:5d:6e:a6:e6:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 10 00:45:27 2024 GMT
            Not After : Dec 14 01:45:27 2026 GMT
        Subject: CN=eac71b30-0394-4c6c-ba2c-e133113ae123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b1:7e:4b:dc:85:64:f7:af:0e:a0:0a:42:47:
                    d6:d7:7f:c3:4d:66:b0:24:d2:2a:3f:df:14:c8:20:
                    e5:ac:e1:da:14:f4:b0:72:96:1f:d2:02:f8:cb:3a:
                    57:d1:37:ee:e5:db:fe:81:43:39:d3:64:9d:14:55:
                    34:29:25:e3:ab:a9:98:50:06:9c:69:a7:46:8b:29:
                    73:1b:c5:1b:80:5d:06:ab:c7:b2:e7:53:24:f4:21:
                    d2:9f:8a:18:fd:d0:ee:3e:47:27:94:3e:ae:49:45:
                    d9:33:a7:39:c4:1f:c2:6c:53:2e:e3:75:f9:4e:e7:
                    cf:a6:65:20:6a:fa:62:4e:c4:98:a4:7f:92:79:42:
                    7b:8f:c4:85:1e:62:6a:59:46:e0:55:dd:cc:f8:6b:
                    22:05:d1:0a:db:4f:dd:ce:40:ea:4d:83:04:1f:8f:
                    87:5d:aa:b7:94:1e:db:29:b8:d9:30:93:03:d5:c7:
                    2e:90:b1:8c:cf:0c:63:2d:f4:73:30:34:20:97:c4:
                    8c:d9:d8:1a:02:87:da:e3:47:6a:20:a4:af:27:be:
                    4e:66:a3:df:99:2f:a7:fb:60:10:da:95:02:1d:f3:
                    f5:ff:2f:3a:ad:e1:0c:10:f5:73:e6:0f:dc:4a:f0:
                    77:10:4b:bb:ad:31:bf:1d:2c:00:ac:f9:6a:31:ee:
                    48:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:86:A0:47:40:A5:F7:EC:D9:8C:50:52:51:0A:95:C4:AE:A5:A9:05
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123/eac71b30-0394-4c6c-ba2c-e133113ae123.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.118.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40173

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b0:c7:e3:60:ba:8d:2e:07:b4:67:64:fd:b7:0e:ad:28:a5:
         08:88:0f:b5:61:28:85:ba:88:b6:fc:98:a1:fd:79:df:b2:3f:
         80:18:d8:80:34:95:29:92:94:9e:ce:b6:fa:9b:8e:4c:19:4a:
         3b:fa:6f:a3:b7:57:8c:50:48:20:af:f1:4c:3d:69:88:8c:61:
         bb:a5:f1:d8:50:26:a7:7f:da:d7:1a:8b:54:32:cf:e1:40:68:
         65:4d:6a:6b:6a:5f:5d:4a:ef:e8:00:77:c2:31:c0:ed:0d:fc:
         dd:50:83:43:66:22:b7:3e:4c:54:8e:82:b1:10:22:97:07:b9:
         90:0b:25:28:76:8b:17:b4:a1:b4:e3:ed:ff:53:d5:01:62:4b:
         be:3f:ba:e0:0f:ec:1f:73:5e:7b:9a:e4:d8:f0:25:96:65:37:
         e0:89:df:e9:60:fb:cf:30:da:03:76:31:09:aa:6d:23:49:68:
         20:d3:80:63:04:2e:48:e3:87:bc:b6:06:dc:ec:76:72:73:d5:
         40:5e:ed:e3:14:bd:71:e6:2c:a0:5c:a5:09:0a:0b:19:dd:fa:
         f4:f4:00:30:b7:9a:00:38:cb:91:9d:97:ce:a8:ae:2f:07:c7:
         1c:83:e9:6c:63:01:62:52:f0:49:a3:c6:de:1d:60:73:3b:68:
         2e:d2:57:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----