Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
File:                     efe14a74-8339-4fa1-885a-2ed37947399a.cer (raw, json)
Hash identifier:          VbjpD/f809NxNE157h0hGwrtyBr+aueuGQSMAJOLo4o=
Subject key identifier:   C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584792443CCC637A333A3F958E10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 17 Oct 2024 12:45:27 +0000
Certificate not after:    Wed 20 Jan 2027 13:45:27 +0000
Subordinate resources:    AS: 14956
                          IP: 2602:fa59::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:44:3c:cc:63:7a:33:3a:3f:95:8e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 17 12:45:27 2024 GMT
            Not After : Jan 20 13:45:27 2027 GMT
        Subject: CN=efe14a74-8339-4fa1-885a-2ed37947399a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:05:95:95:89:a0:1c:0d:0c:9a:bc:f6:c4:c7:
                    5f:79:f0:05:66:f6:72:bf:a2:f4:a4:9f:a7:68:ff:
                    35:61:eb:2a:7f:09:e0:6d:82:6e:71:dc:b0:91:20:
                    23:59:c6:e9:c5:d8:5f:21:48:d0:96:f7:a6:d4:42:
                    a0:c7:09:93:51:6d:b5:c3:b8:89:93:89:fe:17:15:
                    70:86:4e:a6:ac:2e:90:51:75:24:49:17:ed:14:c1:
                    ae:48:9b:82:14:ae:ca:6e:b9:74:cc:76:9a:1b:40:
                    a3:cf:be:fe:16:db:fe:b2:8b:e5:a0:07:2e:de:2a:
                    de:c0:52:57:7b:68:e1:60:df:07:33:51:77:75:6d:
                    bb:83:d9:8a:13:19:85:ad:67:c8:d4:24:af:f7:a7:
                    f9:c7:3c:58:69:21:03:d2:9c:de:bd:8a:24:60:f6:
                    61:be:7d:b8:31:0f:11:4c:55:f7:8d:2f:88:1e:b9:
                    52:a3:bf:84:80:f4:f1:29:86:15:31:3c:c0:45:7d:
                    f1:57:9a:06:7f:52:22:5c:07:b3:b6:9b:e8:ab:75:
                    00:5d:d2:1a:4c:9a:b8:17:f9:c0:4a:3c:50:32:f6:
                    2d:1a:e8:7b:15:b9:f3:61:8f:5d:2d:42:86:f7:5f:
                    5d:be:07:c8:f3:75:1c:af:81:25:d4:1d:d7:3f:cd:
                    a0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa59::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14956

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:01:f3:97:5f:d4:8a:38:85:99:2c:bd:f1:52:be:2d:b7:72:
         5e:d5:a6:35:b4:ab:8a:b3:02:5c:0e:b3:ee:ab:d3:37:4b:76:
         e8:fb:85:97:24:ac:f0:be:8f:bd:29:11:c0:25:7f:16:20:37:
         bf:3d:af:f6:81:46:b9:79:30:eb:70:5d:9b:a6:2c:1a:c6:89:
         f3:fe:48:ca:51:7f:61:55:08:4f:a8:dd:1e:92:a4:15:25:38:
         12:9d:cb:f5:84:6f:47:7c:3a:a9:0e:2b:23:08:e1:49:77:bc:
         09:d1:6f:44:2e:90:da:65:2a:3d:a3:04:d6:16:5f:d5:b7:ed:
         86:c2:ca:bb:e5:82:cc:07:22:cd:79:31:08:6f:5c:49:c4:51:
         94:20:db:f8:d5:37:10:21:29:e9:74:0e:dc:ae:fb:e4:c0:de:
         77:08:b9:c4:9d:78:2a:9c:47:e8:c0:32:ca:fd:16:cf:4c:6b:
         b0:75:60:d8:2e:fd:2a:4b:35:6c:6f:3f:13:0a:12:34:ce:59:
         43:89:b6:61:7b:dd:ca:07:08:f1:d0:dd:4b:a2:df:67:4e:8a:
         5c:f1:83:29:3e:f3:45:83:da:9f:31:28:6b:a5:0d:c9:26:bb:
         0a:f1:c3:8b:6c:2d:4d:be:c9:b6:e4:55:97:38:bb:b6:41:29:
         96:04:09:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----