Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/028bf513-a919-4bc3-858d-b726a8bdfe82.cer
File:                     028bf513-a919-4bc3-858d-b726a8bdfe82.cer (raw, json)
Hash identifier:          nuI6Zpy5+J+3hqVf/JQwduWrn3c7Rgt8SSYmESnGsZE=
Subject key identifier:   65:C2:F5:6F:31:7D:F9:A7:F2:8C:46:39:88:D6:8B:59:F7:FD:6C:4C
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584694EDBA928B245164943437A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/028bf513-a919-4bc3-858d-b726a8bdfe82/028bf513-a919-4bc3-858d-b726a8bdfe82.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/028bf513-a919-4bc3-858d-b726a8bdfe82/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 Jul 2024 18:51:39 +0000
Certificate not after:    Wed 21 Oct 2026 18:51:39 +0000
Subordinate resources:    IP: 134.197.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:94:ed:ba:92:8b:24:51:64:94:34:37:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 18 18:51:39 2024 GMT
            Not After : Oct 21 18:51:39 2026 GMT
        Subject: CN=028bf513-a919-4bc3-858d-b726a8bdfe82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3d:d1:cf:d8:fc:c9:20:c0:31:64:a7:12:64:
                    76:20:af:98:78:53:c5:22:ec:d9:62:2a:99:7b:72:
                    d7:a9:3c:c3:d7:18:4e:5e:61:01:3e:77:d6:40:5e:
                    7e:27:9f:2d:1c:e2:1b:49:fb:9b:b3:d3:66:55:12:
                    14:f0:72:30:fd:10:36:74:f7:0e:ae:ec:16:1c:47:
                    16:69:9e:3f:35:13:5b:0b:ba:60:34:a1:3f:e0:c4:
                    e5:57:da:cc:ec:6d:a7:56:c9:8b:fc:bc:44:42:bc:
                    b7:0b:de:d4:0f:3e:73:3e:01:47:07:dc:5a:c6:ac:
                    b5:f5:df:eb:08:5b:ba:50:f7:ee:9e:a0:38:1e:f9:
                    13:14:28:b8:cd:aa:26:99:de:d3:75:19:20:52:43:
                    77:4d:83:25:d0:ff:8a:ac:58:b4:45:a3:bd:27:07:
                    5f:e5:72:df:d3:fc:67:f1:4c:07:4c:97:28:57:43:
                    03:94:3c:1c:30:21:7e:03:56:7f:6f:cb:87:e2:08:
                    f7:5d:f0:a0:a1:26:70:41:49:91:23:8d:7b:4d:a8:
                    d1:40:d3:58:f5:73:14:96:24:3f:eb:68:64:39:e2:
                    06:46:ce:fd:53:88:f2:18:9f:b0:ab:47:4f:f7:16:
                    28:e9:fa:2e:49:9c:21:61:d6:c0:68:57:48:f9:c7:
                    c1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C2:F5:6F:31:7D:F9:A7:F2:8C:46:39:88:D6:8B:59:F7:FD:6C:4C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/028bf513-a919-4bc3-858d-b726a8bdfe82/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/028bf513-a919-4bc3-858d-b726a8bdfe82/028bf513-a919-4bc3-858d-b726a8bdfe82.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.197.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:9a:d3:c4:d5:a5:42:98:13:05:8f:d5:69:aa:c5:0b:23:db:
         10:ed:2c:b4:f6:71:2b:df:b5:1c:1f:1b:f2:0d:2c:14:c9:84:
         82:33:e6:4b:14:a3:9e:59:64:31:05:af:df:fe:1b:4f:33:bb:
         87:3b:ba:93:0c:3c:de:f5:95:5d:dd:72:d7:bc:43:92:b3:6b:
         32:80:b0:aa:f9:23:ad:c1:b2:d5:a5:75:f5:8b:a5:ca:ed:71:
         f9:26:ec:4d:8b:86:4f:ec:47:5e:3c:fd:85:40:54:64:6e:39:
         2f:0f:08:8e:ff:53:c0:55:b9:fb:4a:ca:fd:05:6f:79:3b:c3:
         ce:87:78:e9:98:3a:b1:e6:35:5f:cf:57:82:7f:cd:43:eb:b0:
         64:2d:b2:50:5e:b2:28:99:98:0a:4d:b4:2a:4d:47:11:f7:06:
         e3:36:b9:2f:6b:44:ff:1c:83:bf:8f:29:4d:7a:c3:43:11:5d:
         52:4d:2d:70:62:29:6f:9f:d2:15:1a:cc:50:ac:8e:02:78:4f:
         19:65:2e:6a:88:80:61:cf:5a:f8:36:08:91:09:86:93:8d:f7:
         c5:01:ce:06:f7:74:52:7f:e1:8b:6e:72:b8:65:5c:ed:4b:7b:
         92:c8:b6:51:1f:a5:e4:3d:05:ef:87:87:cd:3c:d3:9e:0a:c2:
         5e:bc:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----