Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fe71f35f-fe6a-4632-a179-52db92bbfd3d.cer
File:                     fe71f35f-fe6a-4632-a179-52db92bbfd3d.cer (raw, json)
Hash identifier:          4HC+BbxSxOsN7VH0swaDWVFr3+U7coGw5EIue8oMrsI=
Subject key identifier:   AA:26:EC:82:C5:1F:9B:ED:29:D3:36:7A:A1:E8:60:E8:29:80:01:2D
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584790DEE3BA6A6B55BC86167E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fe71f35f-fe6a-4632-a179-52db92bbfd3d/fe71f35f-fe6a-4632-a179-52db92bbfd3d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fe71f35f-fe6a-4632-a179-52db92bbfd3d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 17 Oct 2024 00:45:26 +0000
Certificate not after:    Wed 20 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 395441

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:90:de:e3:ba:6a:6b:55:bc:86:16:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 17 00:45:26 2024 GMT
            Not After : Jan 20 01:45:26 2027 GMT
        Subject: CN=fe71f35f-fe6a-4632-a179-52db92bbfd3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:77:32:f8:7f:d1:8f:63:85:93:99:c6:ed:7f:
                    2b:e3:c5:74:6b:a1:87:d7:1a:1c:43:aa:01:7f:fc:
                    99:07:a4:53:80:12:37:34:cb:5c:44:7f:d5:a6:7f:
                    79:dc:b4:d0:50:40:16:94:02:e1:7e:a4:92:ef:81:
                    d5:d0:09:6e:1d:47:4a:bb:64:c6:6f:47:3f:02:25:
                    94:16:1f:69:be:de:06:20:bd:30:76:bc:28:22:66:
                    73:5e:64:12:2b:b6:c2:1f:2d:f0:52:9c:13:80:d9:
                    17:89:88:3b:a9:00:bd:bb:94:5f:b8:39:a3:37:b3:
                    ad:1d:92:65:93:4c:c9:e1:cc:48:7a:14:eb:e2:c3:
                    37:93:4c:eb:95:83:bd:19:cc:e1:65:e8:0f:96:28:
                    a7:d8:dd:2f:a6:09:66:86:e3:c0:6c:95:77:45:e8:
                    c2:bc:5d:1c:e1:6b:ab:c3:0c:ec:70:24:1b:90:5a:
                    25:48:63:e9:48:70:f0:50:00:41:aa:ca:05:e6:39:
                    25:1b:31:a8:9e:ab:36:85:7e:55:dc:68:00:61:64:
                    4d:11:aa:2c:c7:db:0c:8f:02:cd:38:b5:df:bb:f2:
                    98:2f:38:7a:c9:22:5d:95:75:13:39:a5:59:b5:d3:
                    98:79:61:3f:dd:7f:8c:fe:c3:57:f0:47:b1:bc:d0:
                    5e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:26:EC:82:C5:1F:9B:ED:29:D3:36:7A:A1:E8:60:E8:29:80:01:2D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fe71f35f-fe6a-4632-a179-52db92bbfd3d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fe71f35f-fe6a-4632-a179-52db92bbfd3d/fe71f35f-fe6a-4632-a179-52db92bbfd3d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395441

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:04:c7:b6:a6:6f:8d:ca:3c:87:59:82:ac:e7:25:b3:a3:6c:
         fa:db:25:97:91:4c:19:c6:24:84:89:8f:16:33:3b:05:1a:93:
         0b:9f:73:86:05:e8:10:ea:18:b1:40:cd:96:43:33:fb:30:b8:
         31:a2:38:97:bf:39:58:4e:2a:4c:0d:23:c0:9e:27:56:53:94:
         42:d0:bd:c0:6b:9d:5d:84:93:40:40:1a:2e:45:89:0b:d6:2f:
         29:31:f0:05:55:15:80:b2:46:d2:2c:f6:ef:7f:97:80:f7:af:
         55:c9:b7:42:4b:3b:05:c7:fd:36:85:a0:bb:e0:9f:7e:82:ea:
         f6:41:fc:f2:fd:a3:73:4b:15:9d:45:33:f2:03:53:d0:46:8c:
         a5:68:69:d7:f1:c9:c1:b7:d4:cf:63:cb:c3:65:bb:61:06:af:
         e9:b6:8e:1a:3b:e4:ef:54:b0:14:a7:4e:94:00:7e:db:1d:6b:
         85:0a:3a:0b:82:53:72:1b:4e:ae:8b:02:9e:f1:5d:9b:f7:9b:
         24:c9:6e:a2:13:2c:47:f2:68:77:2d:ff:ec:73:52:0a:c9:d9:
         05:56:94:6b:49:bf:27:97:db:b4:5f:40:3c:be:60:85:bc:b8:
         c8:b7:4e:ec:6a:00:9f:da:36:e4:a8:5f:87:31:e0:d5:b4:55:
         40:b2:20:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----