Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.cer
File:                     054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.cer (raw, json)
Hash identifier:          6ktE7tAa8UbDAnz2vKhtjYbv01iYaKjPyN7gojEugm0=
Subject key identifier:   76:90:60:51:89:83:11:47:15:70:BA:67:C4:27:D6:0C:4F:D0:81:FF
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845DCE54E23F069F66917A5CA00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 13 May 2024 20:45:56 +0000
Certificate not after:    Sun 16 Aug 2026 20:45:56 +0000
Subordinate resources:    AS: 399051
                          IP: 190.211.149.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dc:e5:4e:23:f0:69:f6:69:17:a5:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 13 20:45:56 2024 GMT
            Not After : Aug 16 20:45:56 2026 GMT
        Subject: CN=054cd560-1f7c-4ac0-bbeb-7cceeefb5e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:19:33:1e:8c:87:ef:c2:ee:1f:71:a3:78:e7:
                    8e:51:62:79:e4:9a:0e:10:be:fb:a1:35:78:db:a7:
                    3a:75:20:ca:f1:bb:2a:6c:6d:b2:81:e0:e6:ad:e4:
                    87:23:1e:3a:24:57:0c:48:d5:99:f1:9e:89:96:0c:
                    84:6f:83:9f:fd:33:18:72:ee:24:61:a6:1b:3c:5e:
                    0e:9f:74:56:d2:0c:f7:c9:34:93:3c:f3:c9:31:32:
                    d6:db:f6:48:4b:d8:5a:6d:f4:f5:4f:15:cc:c1:d4:
                    bb:1b:85:69:0c:fb:8d:e1:55:ff:38:d0:6f:fa:78:
                    b2:ba:be:70:94:31:c9:bc:3f:38:7b:ba:1a:b8:d8:
                    a1:fe:73:76:bc:6b:e8:9d:1a:dc:85:ea:d1:bc:17:
                    55:be:79:64:63:d6:bb:4c:3d:d0:e1:9d:5d:df:ee:
                    a2:c2:92:c6:c7:27:07:64:fa:f4:9d:7d:4c:34:f8:
                    8d:37:26:45:a1:3d:fd:ec:6a:ff:90:c5:33:05:5d:
                    ec:a9:0a:0d:71:bb:ac:a4:04:fe:75:41:74:2f:42:
                    12:2e:d2:00:42:1c:c0:3a:b8:4b:d9:0f:00:39:37:
                    1a:f0:ef:ac:47:9e:56:ad:a3:3b:42:ab:bd:02:ab:
                    b5:46:8b:0f:22:4b:da:6a:d6:ef:99:c1:05:ac:a1:
                    e1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:90:60:51:89:83:11:47:15:70:BA:67:C4:27:D6:0C:4F:D0:81:FF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.149.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399051

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:67:08:50:62:04:f6:2a:0f:90:59:26:cd:9e:34:51:92:b7:
         e3:c9:95:79:6b:4b:3b:93:79:db:63:e4:44:23:8b:97:df:69:
         bb:12:70:1c:37:a8:c7:f5:01:23:26:8a:da:d8:55:6e:77:fe:
         51:76:4e:b7:bb:0b:e1:66:36:55:6c:fa:f4:9c:c0:66:ca:45:
         ae:18:21:d1:18:04:6a:88:56:79:4c:e1:6e:d9:d0:22:74:e8:
         00:8f:4c:a6:2e:6e:01:04:10:a5:d6:34:0b:71:98:06:6c:16:
         2c:bb:0b:3a:ea:d6:47:b8:14:96:b9:de:0e:df:71:d2:ee:43:
         5f:f5:eb:0d:d1:1f:9a:e0:31:8a:42:d1:ea:ce:2e:b7:11:22:
         c3:30:60:17:c5:cf:13:5b:35:98:b1:d2:4d:82:7f:c5:c7:68:
         2a:da:fa:c4:f4:24:c9:9b:3d:c5:49:6b:4d:83:60:9c:ba:49:
         d5:30:e1:c7:58:8b:3f:ee:09:f3:03:f7:aa:83:90:90:d7:e5:
         e6:97:44:de:15:57:82:33:69:69:9b:71:c1:0a:73:3c:ca:c2:
         49:d2:78:80:dd:6d:dd:e7:c2:06:7b:0e:00:2d:73:29:5a:26:
         40:8f:f5:63:cd:5d:f5:75:2c:49:8e:fc:81:98:0f:fa:c0:60:
         c2:69:59:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----