Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/04073251-f9d1-4342-a3c6-a92be337f6b4.cer
File:                     04073251-f9d1-4342-a3c6-a92be337f6b4.cer (raw, json)
Hash identifier:          nYaOaUB3VCCCgaxGMnJlZG7WzG0qOuyhS7XO/+wHXh8=
Subject key identifier:   F3:6B:41:93:F0:8C:3D:52:1F:DB:40:AF:13:62:95:6C:38:99:EA:6C
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846A86DD90BDD557021C7F25080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/04073251-f9d1-4342-a3c6-a92be337f6b4/04073251-f9d1-4342-a3c6-a92be337f6b4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/04073251-f9d1-4342-a3c6-a92be337f6b4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 25 Jul 2024 18:30:09 +0000
Certificate not after:    Wed 28 Oct 2026 18:30:09 +0000
Subordinate resources:    AS: 16813
                          IP: 216.73.240.0/20
                          IP: 2620:0:2840::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a8:6d:d9:0b:dd:55:70:21:c7:f2:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 25 18:30:09 2024 GMT
            Not After : Oct 28 18:30:09 2026 GMT
        Subject: CN=04073251-f9d1-4342-a3c6-a92be337f6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:44:13:f7:b2:c7:1a:a9:e4:cf:ba:d0:fe:
                    ad:84:7f:fd:3d:ae:b7:9f:cb:94:be:5c:47:dc:ab:
                    69:74:03:c9:06:fd:2a:93:9a:57:39:e7:84:2a:e7:
                    4f:87:90:54:e2:e5:70:78:0e:ef:c6:e9:f0:72:28:
                    ab:43:e0:16:bd:b4:37:eb:c2:b8:52:e4:02:e6:fa:
                    20:7f:ae:13:0e:80:b9:36:1a:18:e9:1a:b7:e8:06:
                    5b:a7:a1:6c:e3:a7:1b:54:2a:e1:08:02:a3:ed:2d:
                    b3:d6:a3:a4:66:67:87:58:e5:6f:d0:52:ce:6f:d8:
                    f1:4e:df:96:45:4d:2d:f0:35:d6:97:db:59:9b:d8:
                    06:00:c1:94:9b:08:04:85:43:60:7f:44:70:2c:39:
                    98:af:b2:6b:05:fa:be:b3:3a:fa:5d:8e:33:7c:69:
                    0d:a4:56:53:0a:84:54:21:74:35:6d:74:16:5e:38:
                    ea:f2:28:dc:56:48:7c:5b:63:ca:c2:b6:71:d5:41:
                    f5:e6:8f:87:d9:2b:88:80:23:3a:11:0f:2e:fd:8c:
                    6a:5d:c5:20:ac:da:09:06:dc:65:74:0c:33:45:b1:
                    58:61:0a:9b:8a:65:a9:36:f4:e0:a5:59:d8:3c:d5:
                    6e:4e:a6:96:5e:a8:49:93:23:3b:1f:4c:dd:a7:63:
                    0e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6B:41:93:F0:8C:3D:52:1F:DB:40:AF:13:62:95:6C:38:99:EA:6C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/04073251-f9d1-4342-a3c6-a92be337f6b4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/04073251-f9d1-4342-a3c6-a92be337f6b4/04073251-f9d1-4342-a3c6-a92be337f6b4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.240.0/20
                IPv6:
                  2620:0:2840::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16813

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d2:a1:d1:dd:6b:47:77:12:ea:9a:ee:70:31:67:ae:e5:1b:
         b2:50:80:8c:3b:f5:33:9a:f8:d2:07:3c:05:67:93:5d:f2:fe:
         92:2c:40:2b:4a:e7:36:73:42:b8:96:c0:f4:ab:b9:bb:d9:27:
         3e:fc:db:95:8e:cb:a7:a5:74:56:93:54:fd:58:11:33:e6:a3:
         22:b5:29:12:a3:80:a3:66:38:6e:1c:9a:40:c0:59:11:cb:ed:
         f1:8b:d1:71:25:cd:6c:af:6b:3c:53:73:2a:28:2f:5c:35:6d:
         b5:15:2f:e1:c1:50:c4:f9:31:a7:6c:02:65:32:54:3e:3f:e0:
         3d:57:92:e4:8a:42:a6:ab:be:03:32:9d:88:dc:71:a2:f4:58:
         3d:67:1b:26:f8:70:5b:3f:75:e8:ba:d6:32:38:a9:7e:31:07:
         95:d5:d3:29:0c:1e:7c:c7:00:f5:ca:c5:2e:2f:e3:79:ca:f7:
         2b:79:75:e0:5d:f8:d4:8a:11:a7:5d:22:06:de:56:8b:8a:47:
         de:b0:9c:e2:97:aa:3b:2c:1d:23:99:70:a2:d9:60:38:2f:e1:
         8f:f2:3b:26:fb:92:61:20:b4:66:d0:e7:5f:e8:8b:d2:30:c8:
         b3:59:98:17:da:d7:63:d5:42:76:99:40:42:cc:3d:78:f7:c1:
         27:24:81:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----