Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer
File:                     15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer (raw, json)
Hash identifier:          Ki8+e5cDHsMyebeD449mSJG0hGEt59P8AISgWqTaBrY=
Subject key identifier:   26:4F:4E:7E:79:A7:DC:07:8E:0B:25:4D:0F:3A:C5:03:5F:C6:C2:C3
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846816A661CCEFEA093C67141C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 11 Jul 2024 19:06:40 +0000
Certificate not after:    Wed 14 Oct 2026 19:06:40 +0000
Subordinate resources:    AS: 11346
                          AS: 26773
                          AS: 53485
                          AS: 62697
                          AS: 400119
                          AS: 400722
                          AS: 400761
                          IP: 144.77.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:81:6a:66:1c:ce:fe:a0:93:c6:71:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 11 19:06:40 2024 GMT
            Not After : Oct 14 19:06:40 2026 GMT
        Subject: CN=15a5c850-b5f7-4cfd-b31f-19d51bf3cc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3b:c8:ba:18:69:d1:b8:82:26:f0:ca:20:95:
                    30:49:7b:0b:dc:c7:c1:d9:73:31:bd:61:e3:c4:a0:
                    b2:ae:58:17:f4:00:4d:28:49:49:c7:1f:36:a7:ec:
                    e8:d8:df:29:c0:47:76:4d:b2:52:9a:82:c8:39:55:
                    4a:67:3e:bd:01:74:07:71:f7:a9:5f:6a:72:2c:a8:
                    be:a9:78:67:97:80:bd:67:d9:d9:9a:0f:85:2b:f1:
                    1f:49:41:3f:56:52:24:54:af:72:6d:ee:24:ed:be:
                    25:9a:d4:02:59:79:19:c7:fd:1d:7e:14:2b:23:2a:
                    b9:01:b3:09:e6:9f:9f:f4:ee:ff:89:46:0d:31:45:
                    48:54:3f:55:db:7b:ba:13:34:7b:b2:6b:02:f0:94:
                    f5:e8:39:7c:a6:8b:1a:07:44:fc:dc:3a:9c:ff:23:
                    3f:db:d4:a9:cd:18:77:ff:7a:ad:fa:53:2d:09:c4:
                    77:29:e4:c7:f0:6d:86:03:0a:dc:92:72:8e:ae:fd:
                    ba:fa:98:84:f3:d4:d5:f9:c4:ff:74:bc:e1:fa:96:
                    57:23:14:e7:03:33:59:3b:29:7a:ec:06:c8:d5:eb:
                    c0:3c:0d:df:cd:6d:5c:9a:be:19:60:12:c9:0c:ee:
                    78:a3:06:d2:d0:fa:d9:2e:03:4c:6b:b5:5b:82:b0:
                    30:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4F:4E:7E:79:A7:DC:07:8E:0B:25:4D:0F:3A:C5:03:5F:C6:C2:C3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.77.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11346
                  26773
                  53485
                  62697
                  400119
                  400722
                  400761

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:7c:73:14:1c:ce:1f:e2:f6:28:ca:9e:73:9e:b8:f6:2a:6d:
         5e:59:2c:e3:5d:77:52:21:3a:03:32:3d:cb:d6:17:be:f5:a5:
         92:59:20:59:dc:59:c3:86:5b:de:62:45:a5:76:0b:43:23:f3:
         4e:77:40:47:7f:77:ff:2f:ad:c5:74:a3:a1:2a:dc:44:f7:23:
         4e:0a:49:60:dc:aa:f9:0b:13:71:15:ca:48:8d:38:3e:34:13:
         5f:0d:8f:1d:ed:2c:e6:77:d3:66:01:cd:af:c6:15:66:f2:af:
         7a:ea:e9:45:b2:dd:bd:ea:87:af:38:7f:a2:8f:e0:b4:fb:56:
         6a:95:a4:74:2c:a3:91:19:f9:2c:12:be:1d:c0:11:94:0c:8d:
         4a:be:b4:fd:e2:86:7d:a8:77:00:37:f6:f4:64:55:31:31:59:
         2b:92:ac:c1:78:72:80:79:d2:56:4f:9b:b2:f1:d4:c6:7f:ee:
         6a:b2:af:a6:5d:80:47:95:c5:32:06:93:61:73:00:77:81:e0:
         3d:a9:f9:8d:d8:75:56:a4:63:1b:3a:89:fa:80:3f:e0:fd:c9:
         0e:c2:4a:73:6f:55:a1:79:87:b3:e9:86:23:70:97:c9:15:e6:
         c3:76:0e:52:63:69:94:52:47:c7:c9:be:ab:ea:28:db:5b:e8:
         d2:86:23:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----