Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7ac366d-8d88-4629-8e0f-0a0062fc641c.cer
File:                     f7ac366d-8d88-4629-8e0f-0a0062fc641c.cer (raw, json)
Hash identifier:          oEkNGUhMqj/BeyTvU7Oad72t/etnOniTnB7bfcfpq0Y=
Subject key identifier:   59:4E:1F:F6:47:58:B7:2C:2D:C8:E9:2A:61:92:21:8C:F8:EF:E5:C1
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858479ED44EC822999B53E20EEC10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7ac366d-8d88-4629-8e0f-0a0062fc641c/f7ac366d-8d88-4629-8e0f-0a0062fc641c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7ac366d-8d88-4629-8e0f-0a0062fc641c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 22 Oct 2024 00:45:26 +0000
Certificate not after:    Mon 25 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 54538
                          AS: 396421
                          IP: 199.167.52.0/22
                          IP: 2620:52:c000::/48
                          IP: 2620:130:8000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9e:d4:4e:c8:22:99:9b:53:e2:0e:ec:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 22 00:45:26 2024 GMT
            Not After : Jan 25 01:45:26 2027 GMT
        Subject: CN=f7ac366d-8d88-4629-8e0f-0a0062fc641c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7f:b1:05:1f:23:76:56:76:76:83:19:4f:30:
                    76:4b:c9:bd:53:06:3a:d1:81:5c:50:ef:6e:1a:d8:
                    a5:9f:f6:54:6a:da:e9:11:59:c7:d2:7c:ce:c6:da:
                    0d:89:51:23:ed:07:8a:6a:15:a9:7e:a7:4f:1c:63:
                    84:d7:1e:bc:9e:2a:0a:90:f8:ad:58:19:7f:bc:9c:
                    92:32:14:e7:49:23:73:1b:55:5d:b8:4f:2c:b4:c4:
                    d4:12:23:6e:17:36:9f:39:2d:50:18:91:05:a8:ba:
                    c4:f5:fd:96:bc:55:16:1b:08:a0:b2:cc:6c:ee:de:
                    bf:8c:09:e0:99:39:d8:38:3d:71:eb:e8:55:4a:91:
                    0c:d2:f5:25:50:94:29:17:ea:c8:34:a3:ae:3b:35:
                    9d:fa:53:c4:7b:17:93:39:1c:85:cc:a9:fe:49:80:
                    36:5b:37:95:37:00:72:01:ff:f6:ec:ac:df:f8:d1:
                    c9:7f:af:65:01:c4:77:7c:85:0a:30:cb:de:e7:10:
                    68:88:29:f0:2c:07:8c:c6:d1:ed:09:35:b3:67:97:
                    3f:63:31:bb:80:83:07:9e:20:99:57:f4:03:df:fe:
                    36:b7:51:75:1f:5b:6d:8b:9a:ca:d0:2c:6b:ca:18:
                    8b:63:d5:94:16:09:09:ce:a6:8d:1e:fb:13:5b:07:
                    0a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4E:1F:F6:47:58:B7:2C:2D:C8:E9:2A:61:92:21:8C:F8:EF:E5:C1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7ac366d-8d88-4629-8e0f-0a0062fc641c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7ac366d-8d88-4629-8e0f-0a0062fc641c/f7ac366d-8d88-4629-8e0f-0a0062fc641c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.52.0/22
                IPv6:
                  2620:52:c000::/48
                  2620:130:8000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54538
                  396421

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:40:c5:2c:00:f7:5d:e0:a6:cf:f6:16:44:0a:90:12:4d:ed:
         e8:b1:7b:da:f1:b3:2f:d4:85:50:a3:7c:f7:a2:12:ac:75:95:
         d9:7b:25:5e:eb:bf:c3:8b:16:27:4a:79:52:74:da:95:35:95:
         d7:47:93:d4:76:12:c0:fb:f4:6e:4b:b0:e9:f7:65:99:bc:f3:
         59:e9:f0:b7:41:1c:23:44:c8:44:e9:aa:62:d6:eb:46:d0:1e:
         56:62:3a:93:a2:01:42:eb:7d:99:b5:16:77:1a:c7:8c:76:7f:
         0d:61:c4:72:e1:d7:01:d5:35:cc:7e:d1:05:5b:05:05:9a:12:
         65:95:86:d8:88:72:65:95:f6:8c:5e:e6:8b:21:cb:b1:af:f7:
         5d:00:d9:7d:4e:61:01:ff:11:0f:25:c8:fa:41:35:8b:71:c8:
         c3:1d:72:f2:87:a1:31:72:13:ef:62:79:53:57:05:33:c2:d6:
         50:f1:76:be:78:71:f6:5d:ea:56:18:20:c2:39:e9:88:84:44:
         f7:42:3b:6b:2d:28:cf:97:6c:7d:5e:be:df:92:c7:c6:ba:81:
         87:52:be:26:7e:67:f5:83:81:61:d5:1f:36:9d:11:1e:32:0a:
         57:bb:75:9b:2c:dd:14:32:fc:2f:2b:e2:88:a5:72:99:4e:a7:
         2f:aa:4d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----