Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
File:                     0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer (raw, json)
Hash identifier:          1G5hJq96a+7AFD4epRcNOiRxgJO8wtg3qa2zfYfq7t4=
Subject key identifier:   78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846522B41CD4EF5384025CA5180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 24 Jun 2024 20:56:27 +0000
Certificate not after:    Sun 27 Sep 2026 20:56:27 +0000
Subordinate resources:    AS: 8002
                          IP: 206.252.192.0/19
                          IP: 207.251.64.0/18
                          IP: 2001:458::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:52:2b:41:cd:4e:f5:38:40:25:ca:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 24 20:56:27 2024 GMT
            Not After : Sep 27 20:56:27 2026 GMT
        Subject: CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:37:5a:a8:ee:1e:d7:2e:22:a5:8d:e8:05:9f:
                    c7:03:be:b7:9d:8d:3d:d0:9e:75:29:9a:bc:22:c5:
                    2a:6c:46:6d:64:4a:d7:e3:fc:60:cf:f2:60:b7:e2:
                    36:eb:c7:22:68:cc:ed:4e:95:0a:af:1c:0a:b2:be:
                    7f:37:b4:81:d9:54:9e:82:be:2f:23:11:fe:c8:4f:
                    65:91:97:07:7f:26:73:59:17:7f:ab:e7:39:b4:8c:
                    9e:fd:0e:82:09:97:58:0d:58:90:db:93:5f:4e:41:
                    c0:2c:28:81:b9:3e:e3:5d:11:67:cf:d9:18:1a:24:
                    51:ac:59:12:3c:ca:d7:74:86:e7:ad:63:64:71:0a:
                    4e:8c:d7:31:b5:79:1a:f0:2a:c9:fb:aa:0d:6c:c7:
                    8c:0b:0c:5b:2d:51:a6:62:3d:62:24:61:53:f4:a0:
                    a0:4c:e0:73:04:33:ff:30:6d:b7:59:5c:b2:65:11:
                    1b:ad:6b:2e:52:ae:f3:c3:75:43:eb:79:9d:bb:88:
                    70:c2:9f:f6:ec:5e:79:b1:58:7f:ec:cd:94:c0:00:
                    bb:c6:92:a3:5f:f7:05:a6:e3:6d:0e:89:15:64:b6:
                    30:d0:e3:79:c1:e2:6f:e0:d1:67:e6:92:27:d7:64:
                    0d:0b:bc:86:d7:93:50:27:a3:2f:4c:ad:49:d9:0f:
                    ad:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.252.192.0/19
                  207.251.64.0/18
                IPv6:
                  2001:458::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8002

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:23:3e:92:36:76:51:6f:1e:87:a4:d9:5e:bd:67:f5:24:53:
         77:f3:ed:55:1b:ab:d2:15:47:51:b8:78:4d:f9:cd:e2:e4:d7:
         ae:6e:df:76:9c:d8:de:98:c8:7c:be:02:70:1c:60:2e:40:c4:
         2a:ef:fe:9a:9d:b2:6a:2d:99:6f:68:37:42:d6:a1:26:fa:ab:
         af:4b:4f:43:0a:98:31:a0:26:ce:bb:60:97:38:57:9c:8e:f7:
         28:fb:fe:6e:de:e2:05:a8:0d:07:28:c5:0a:d1:cb:ed:a1:ab:
         fd:5e:5c:57:df:01:42:92:7d:1a:f0:78:62:d3:a5:e7:2e:e3:
         9f:43:f2:42:0f:8d:36:1e:19:02:98:f3:af:25:01:06:00:fc:
         29:84:e1:fb:3b:e4:7d:55:02:b5:86:89:56:47:27:12:af:ea:
         4a:92:f1:01:94:83:88:b0:57:55:aa:61:16:c9:38:69:b8:16:
         39:28:3b:90:97:68:40:b0:97:73:ac:88:df:9f:8f:a4:e7:7d:
         1c:e2:9d:62:d9:cf:39:5e:74:f0:82:71:3f:0f:73:01:dc:94:
         0b:8e:52:65:3b:bf:dd:92:6e:a0:4a:11:61:7f:45:f7:55:46:
         ce:8f:b9:b4:22:27:a6:e0:7e:73:28:ac:62:8a:11:99:c7:35:
         30:c3:96:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----