Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.cer
File:                     0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.cer (raw, json)
Hash identifier:          nNeWYhZRPVeE3rAR4V2qXQuqZT9oa0PjQnfL3wkygwQ=
Subject key identifier:   B5:0A:FA:9B:E7:4D:70:4E:3D:01:B6:25:E3:AA:46:7D:89:1E:99:F6
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584717DC475DB50385E3E1CFDC80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 03 Sep 2024 16:27:23 +0000
Certificate not after:    Thu 22 Oct 2026 17:27:08 +0000
Subordinate resources:    AS: 40124
                          IP: 23.184.56.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:dc:47:5d:b5:03:85:e3:e1:cf:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Sep  3 16:27:23 2024 GMT
            Not After : Oct 22 17:27:08 2026 GMT
        Subject: CN=0e0d8660-09bf-4666-9cd9-2a53bd12fdfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:1a:86:27:96:0a:35:b0:ce:dd:5d:72:d8:
                    ac:6a:6d:79:9d:2d:c9:d6:fe:a7:5f:3f:d3:d4:cc:
                    d0:4e:e2:e0:df:af:f6:dd:67:ba:55:13:1b:f4:bb:
                    7b:5f:5b:83:49:fa:2d:97:27:ae:91:8e:dc:e1:4a:
                    fb:0f:67:a9:ed:cc:24:2c:0a:6b:40:1a:53:4c:7c:
                    97:2e:ac:3b:a9:87:80:a2:ec:7a:fb:88:0d:0d:ef:
                    a3:04:6c:4d:e3:4c:bc:a3:90:1e:0d:0a:34:16:d3:
                    94:98:bd:ac:9b:79:f1:71:2e:c0:c6:ed:ab:d1:65:
                    94:d5:63:fc:8a:75:3b:24:fd:3d:95:90:c8:e3:2b:
                    62:80:99:6c:f7:6a:b8:60:0f:fd:fb:a7:56:a5:04:
                    c9:f3:8a:cf:02:d1:bd:c4:42:32:48:9f:8b:ca:ba:
                    68:35:3e:9b:b8:59:f1:2f:8c:e0:11:70:ff:87:f0:
                    9f:a6:4a:ad:4a:ae:05:44:97:7c:c3:8d:fb:74:86:
                    b0:34:32:60:c7:98:bb:8d:2b:96:57:f2:c7:9c:a1:
                    74:01:5f:b0:c5:75:14:b2:84:f8:c8:a1:5e:26:f0:
                    3e:f5:0d:91:49:a1:49:14:2e:90:ff:a6:d2:e6:d9:
                    19:c6:3c:f3:5a:83:55:72:37:30:9d:ad:f7:13:0e:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0A:FA:9B:E7:4D:70:4E:3D:01:B6:25:E3:AA:46:7D:89:1E:99:F6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.56.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40124

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:4c:cb:f6:f2:7c:dd:9d:a3:51:2d:08:07:51:6f:c5:36:11:
         e2:37:2b:e6:6e:34:c5:e7:f9:21:d0:3c:6a:b9:69:ba:68:7d:
         e7:29:4f:b1:10:67:40:10:cb:b9:e9:7e:41:82:d9:1b:d7:b3:
         17:0b:4d:b2:ad:ca:19:38:ef:e6:c5:a8:57:d2:0c:48:28:1e:
         3d:c8:f2:ec:ed:a7:9e:aa:d7:55:41:48:8d:b7:3d:d2:8a:e0:
         3d:43:66:5b:2c:73:c3:fa:d1:fb:9e:4f:7b:cc:bc:d4:6c:4b:
         a6:9e:e8:ba:54:cc:0b:43:f6:8b:aa:40:22:2b:98:20:53:e9:
         47:38:04:24:37:ad:54:74:db:ab:77:9c:a6:8d:a2:06:45:ca:
         11:d6:9d:93:db:06:88:2c:a1:fa:08:3c:11:54:95:b1:39:ee:
         4d:64:c8:a2:41:b5:ff:a7:3c:b6:8b:a6:2f:6a:db:3a:3b:1e:
         ba:f7:3f:59:fb:b7:21:d4:af:5c:ee:10:95:4a:64:95:0c:4e:
         75:bd:cc:94:37:b3:83:e8:f9:38:be:44:ac:94:eb:47:0c:84:
         df:74:81:ad:2f:c5:6b:16:d4:d4:85:84:dc:41:d3:23:f8:18:
         d7:7e:ba:6b:f7:da:e1:81:f7:6f:e0:5a:71:6d:14:84:da:cd:
         69:28:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----