Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b.cer
File:                     10f98d2b-74bc-4c35-b3c4-6890c248ed4b.cer (raw, json)
Hash identifier:          rUGJPb0ANdQoDoBJK4Z1oKSrtB+4sMI8N+pDDdjMyu4=
Subject key identifier:   0F:70:4F:1D:6B:A6:7F:86:97:8E:0D:57:46:A5:13:CF:B7:20:5F:86
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858466B3B6D507C0462C457F78A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b/10f98d2b-74bc-4c35-b3c4-6890c248ed4b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 03 Jul 2024 20:24:15 +0000
Certificate not after:    Mon 21 Sep 2026 07:06:34 +0000
Subordinate resources:    AS: 401131
                          IP: 23.183.120.0/24
                          IP: 2602:f8a8::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:6b:3b:6d:50:7c:04:62:c4:57:f7:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul  3 20:24:15 2024 GMT
            Not After : Sep 21 07:06:34 2026 GMT
        Subject: CN=10f98d2b-74bc-4c35-b3c4-6890c248ed4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:00:7f:c4:04:55:a5:38:2c:14:70:24:51:56:
                    ec:dd:29:ce:14:6c:db:95:b3:b7:83:aa:02:e6:f9:
                    5a:c4:1c:8e:ec:04:d3:64:43:76:3b:35:df:18:05:
                    3c:9e:fb:49:d3:ff:ae:d9:eb:65:29:d7:75:94:78:
                    01:d4:73:82:a1:e1:64:6f:ee:81:44:bb:43:e0:10:
                    2d:e3:f9:7d:3b:65:8e:17:9f:d2:20:c6:fd:f5:78:
                    44:a6:06:12:b9:06:df:04:f9:92:61:78:85:2c:bc:
                    70:7d:ac:96:91:1f:37:a9:a7:a2:3f:42:70:9c:2f:
                    3d:3a:67:8b:b1:98:3d:91:cf:5c:a8:3b:71:78:26:
                    35:ac:dd:6a:65:c0:49:97:a2:96:60:73:c5:3d:5b:
                    ef:9e:7c:22:c4:21:a9:99:2b:33:d5:17:db:6e:51:
                    73:44:8f:19:28:ad:56:7e:a7:3a:94:9f:fb:33:18:
                    5e:f4:8a:7e:15:8f:ed:4a:55:ca:aa:53:af:c6:e3:
                    f9:77:f1:a9:61:07:52:f5:88:31:68:42:e0:13:41:
                    27:b0:bd:87:88:da:12:aa:3f:e4:74:91:7c:bd:61:
                    f5:25:cd:81:5f:7c:63:1f:04:e2:17:9b:24:25:a6:
                    77:3f:08:eb:56:72:d6:ed:22:19:36:ff:87:74:32:
                    43:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:70:4F:1D:6B:A6:7F:86:97:8E:0D:57:46:A5:13:CF:B7:20:5F:86
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b/10f98d2b-74bc-4c35-b3c4-6890c248ed4b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.120.0/24
                IPv6:
                  2602:f8a8::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401131

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:fd:08:54:e9:b3:c5:47:37:d2:db:d8:70:44:01:4d:4c:40:
         90:6a:bb:e2:cc:fd:6f:2f:49:ca:66:2a:f0:10:ea:c7:f3:61:
         48:66:c3:7f:8c:59:8e:c7:a9:11:6e:19:76:0c:a7:2c:67:23:
         60:7f:13:7a:f2:ab:59:eb:7f:c5:1f:cf:b2:1e:ed:68:ab:7d:
         0f:2a:17:bd:f8:59:3f:db:94:61:5c:61:91:90:d2:da:b9:3d:
         4f:28:5d:c5:14:4c:31:b5:40:5b:64:b7:66:f8:76:03:f6:9d:
         43:e3:af:93:43:d8:78:c9:40:32:f1:f0:ee:3e:3b:27:e2:43:
         d7:1d:a2:c3:7d:4f:b0:2a:f2:fa:00:57:0f:f5:f2:3b:51:9c:
         6d:4f:35:85:6f:d3:e4:bc:b3:0d:91:62:9c:9a:fe:0e:5f:ca:
         a3:a3:8a:51:63:1c:0c:31:e4:9f:91:84:13:4e:97:95:87:31:
         d2:0b:a1:52:05:3e:65:f8:26:2e:f3:3f:c7:d1:fe:6b:21:3a:
         97:60:a9:f3:4e:35:97:8b:05:67:5c:a1:ac:ca:7c:a7:ec:36:
         8d:dc:8a:4e:92:c6:e4:25:cf:b9:31:1e:8c:32:37:89:5f:a6:
         fb:c0:d9:8d:18:b7:f9:f1:ca:22:6e:38:3c:3c:52:d9:94:d1:
         c7:89:99:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----