Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e34178a-a601-47ba-9896-03297e54462c.cer
File:                     0e34178a-a601-47ba-9896-03297e54462c.cer (raw, json)
Hash identifier:          JhiZwRaB6edKt1KnAiT/CEob5v87YClFrVDZu+9Kv/U=
Subject key identifier:   4B:7A:47:90:42:38:80:31:24:0E:FF:4B:B7:E6:36:11:FE:98:85:18
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845BEAB0AD4D6FCAA5443D2D580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e34178a-a601-47ba-9896-03297e54462c/0e34178a-a601-47ba-9896-03297e54462c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e34178a-a601-47ba-9896-03297e54462c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 03 May 2024 00:54:17 +0000
Certificate not after:    Thu 06 Aug 2026 00:54:17 +0000
Subordinate resources:    IP: 167.253.72.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:ab:0a:d4:d6:fc:aa:54:43:d2:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May  3 00:54:17 2024 GMT
            Not After : Aug  6 00:54:17 2026 GMT
        Subject: CN=0e34178a-a601-47ba-9896-03297e54462c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e1:ee:6f:48:10:11:1a:7d:f7:8c:a3:2a:84:
                    50:1a:1f:0d:e4:1d:0c:9c:d2:2e:b9:72:f4:4a:2c:
                    33:a2:dd:90:fe:be:ff:10:9e:55:55:80:7e:e4:9d:
                    00:6e:7a:b5:83:23:1e:8d:97:b8:3f:99:a9:b6:49:
                    8d:81:09:29:73:07:27:2d:1d:cc:08:92:37:10:b5:
                    26:bb:e7:0a:91:12:fc:b0:25:56:aa:16:1b:99:25:
                    b8:20:1e:3b:05:ac:7c:4b:8d:ad:42:98:10:d6:fe:
                    c2:01:71:a4:ea:21:ef:a8:1f:98:3b:0e:3e:48:1c:
                    14:45:0b:54:64:a9:e7:48:f4:37:ac:57:59:b4:4e:
                    c3:90:1a:a7:95:68:3f:46:57:df:6d:65:84:79:9d:
                    9f:08:9a:dd:40:ce:11:7d:a6:37:14:88:f7:fa:70:
                    73:0a:0f:d7:5a:63:3d:55:f6:30:96:58:9f:aa:8f:
                    1e:49:3d:75:16:70:7b:2b:15:90:65:b4:b0:75:6f:
                    b2:9a:99:12:5d:6e:78:4a:01:8a:65:41:ef:ee:23:
                    08:7a:56:11:6f:49:92:94:55:62:9f:db:50:b0:40:
                    88:89:92:a2:32:b5:49:ac:a6:fe:93:67:7f:c8:89:
                    da:8e:33:bc:d5:44:6b:6d:9d:80:b9:8d:ec:e2:73:
                    ef:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7A:47:90:42:38:80:31:24:0E:FF:4B:B7:E6:36:11:FE:98:85:18
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e34178a-a601-47ba-9896-03297e54462c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e34178a-a601-47ba-9896-03297e54462c/0e34178a-a601-47ba-9896-03297e54462c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:99:9e:26:95:3e:23:01:7b:d0:cf:07:ce:cb:23:13:61:f3:
         64:4d:05:c3:8c:ca:34:57:d1:29:85:21:8b:ed:54:c2:18:83:
         33:1e:b8:97:a1:9e:d0:d8:69:52:81:4f:e7:26:a1:5a:7a:47:
         69:fe:4d:fb:a5:35:4a:2c:de:40:26:68:9b:9a:e0:79:e2:fa:
         86:3d:18:cc:48:74:b0:68:40:6d:94:f6:69:d3:b5:0a:b0:13:
         b6:71:3e:ca:c9:ea:99:42:5b:1f:7f:4b:55:2f:01:66:db:02:
         20:42:c9:da:52:6d:f5:48:9c:a6:9e:7c:59:41:e9:b7:9c:ba:
         8e:3b:ab:7b:5a:aa:f8:27:39:1c:e0:ea:df:89:67:f4:25:0f:
         c6:69:b5:80:64:f9:66:de:f6:40:99:c5:c4:5b:23:52:91:4c:
         2c:05:10:61:ef:fb:48:ab:30:6b:4e:22:48:90:8f:fb:15:bc:
         99:a6:81:f0:a8:a6:d2:88:13:0f:9a:19:93:a8:8e:9b:91:84:
         63:17:1d:0e:c8:42:07:2e:0f:f1:0b:6e:43:e9:98:1e:b6:93:
         5b:81:d8:61:b3:56:2a:ad:30:1f:e1:54:5b:5f:8d:aa:37:64:
         87:dc:0a:cf:27:f3:5c:b6:cf:16:e4:f3:51:ac:2c:05:10:6e:
         66:04:14:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----