Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
File:                     f5d93400-0a6f-4938-9925-856c6ace39df.cer (raw, json)
Hash identifier:          6mB1Rkj/8/vFk/yYW9C/QOeEhaR+91tFPxJpi1Yu4N0=
Subject key identifier:   AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847A19EFE46813BC7329F4F1A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 23 Oct 2024 00:45:26 +0000
Certificate not after:    Tue 26 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 14439
                          AS: 54334
                          IP: 198.133.237.0/24
                          IP: 216.114.75.0/24
                          IP: 2602:fa02::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a1:9e:fe:46:81:3b:c7:32:9f:4f:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 23 00:45:26 2024 GMT
            Not After : Jan 26 01:45:26 2027 GMT
        Subject: CN=f5d93400-0a6f-4938-9925-856c6ace39df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d1:1e:7c:8b:7a:55:5c:5d:2f:6e:35:a7:6f:
                    8f:fd:23:43:bb:de:8a:8e:4e:ae:51:ef:d9:5f:99:
                    74:13:e8:89:8c:ee:d3:c1:6c:48:4c:fc:af:45:d9:
                    80:fe:1f:6b:d9:0b:c9:22:8a:53:d8:86:7a:19:fb:
                    e5:9b:15:31:b9:56:1c:a7:2c:20:aa:69:43:bd:64:
                    f2:fa:5a:bd:8b:05:07:aa:b6:ae:37:4f:9e:08:27:
                    07:78:6e:71:52:91:58:b7:ae:06:2b:75:7c:a3:05:
                    2d:a7:e4:f4:cd:e6:68:37:2e:66:1b:aa:1c:e1:0c:
                    61:c6:ff:e2:c0:df:f1:ab:12:12:21:42:1e:16:90:
                    0e:f5:02:bb:b6:52:22:f9:d2:cb:f9:f6:7c:df:dd:
                    44:3e:b3:d3:91:be:c0:4e:9b:1b:5c:f8:78:88:e5:
                    38:9b:70:a6:dc:53:ea:89:ce:7d:12:ea:3b:71:38:
                    34:cc:fc:e5:ce:8b:02:78:d0:8f:08:b0:8f:a0:b4:
                    e5:d6:89:2a:85:4f:08:1d:ac:01:c6:ea:62:42:d9:
                    72:23:6c:bb:9f:7b:4e:2d:32:56:64:75:de:9f:a5:
                    d3:85:3c:a1:c2:cf:fe:08:4f:e6:89:01:7c:59:da:
                    39:ff:d9:b1:8d:3e:e1:16:61:b5:51:b2:d4:b3:c3:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.237.0/24
                  216.114.75.0/24
                IPv6:
                  2602:fa02::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14439
                  54334

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f4:e8:a3:14:c7:84:9f:4b:16:3a:9d:d5:0a:94:c8:9d:0a:
         8d:32:b3:83:29:95:48:91:46:25:2d:45:1e:e1:ba:0b:4d:4f:
         0a:82:24:06:f3:02:db:44:b3:b9:a2:05:6f:ac:36:da:c8:f5:
         97:6a:f5:54:8d:22:4b:fb:20:c3:c6:f1:cc:1d:2d:94:87:24:
         4b:6e:90:ea:15:e1:2f:58:2b:5c:49:4d:b4:64:5a:00:77:f9:
         07:d8:e4:b9:6a:64:64:44:48:89:29:a3:f0:00:ba:06:32:6a:
         f6:71:97:62:fd:c5:63:ef:c5:c4:82:3a:71:c0:8f:93:9b:60:
         90:69:f5:18:eb:c9:46:e2:7e:56:d0:05:74:15:21:a7:ad:9d:
         65:1d:46:d2:1b:24:12:00:ca:5e:90:e2:5a:6e:21:9f:7a:e4:
         f4:77:bd:85:0f:35:14:6a:a6:61:78:c6:db:7a:c2:92:2b:93:
         56:9a:08:5a:df:91:be:11:a4:d4:65:f5:10:7e:b8:18:b2:f3:
         81:64:93:ab:2c:9f:42:b4:1c:d2:f8:d4:b8:dc:b4:46:ec:25:
         0e:af:d9:5c:51:05:41:30:29:bd:0d:a7:0b:7a:d6:98:63:4c:
         94:8c:08:03:2d:22:c0:2a:09:9c:48:c3:43:0a:99:56:75:29:
         1b:ef:fe:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----