Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17071560-0cdb-4ba4-997c-3dcf125404ed.cer
File:                     17071560-0cdb-4ba4-997c-3dcf125404ed.cer (raw, json)
Hash identifier:          9WUYmQGTGkohmOrgEC9E++74KJkyZJkJBOBuj2l9vPs=
Subject key identifier:   B7:17:E1:B4:AC:8C:59:82:17:AE:80:CA:56:5A:EE:E8:C2:DB:DF:AD
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584643D5F197B586C710D8FCBDC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17071560-0cdb-4ba4-997c-3dcf125404ed/17071560-0cdb-4ba4-997c-3dcf125404ed.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17071560-0cdb-4ba4-997c-3dcf125404ed/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 19 Jun 2024 17:43:15 +0000
Certificate not after:    Tue 22 Sep 2026 17:43:15 +0000
Subordinate resources:    AS: 62583

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:43:d5:f1:97:b5:86:c7:10:d8:fc:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 19 17:43:15 2024 GMT
            Not After : Sep 22 17:43:15 2026 GMT
        Subject: CN=17071560-0cdb-4ba4-997c-3dcf125404ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5d:12:ac:f5:1a:ae:7e:a5:41:a9:1e:23:fe:
                    cc:80:a3:25:8a:61:cf:86:46:08:2d:46:ce:10:34:
                    c0:9f:44:69:99:4f:ee:47:d7:ec:5e:63:60:85:78:
                    a8:9e:d2:ae:1d:d6:ad:8c:01:36:94:c5:2c:2a:89:
                    12:32:e7:13:e1:7c:b5:3e:ac:c8:8d:a0:7f:d5:cb:
                    55:03:a9:41:c8:bf:8e:83:7a:3a:bb:12:20:70:b6:
                    df:69:28:08:cc:96:72:4e:d3:e9:e8:91:08:56:79:
                    5b:60:9e:b9:82:cc:f7:ce:e1:6e:24:f9:29:14:af:
                    55:73:b0:6b:76:72:6c:df:4e:49:87:a1:60:96:dd:
                    9f:b6:4b:70:6e:ad:89:f5:d5:64:f5:7c:6e:87:a9:
                    79:fe:b5:35:dc:b4:5f:aa:e1:6f:48:99:f9:81:bd:
                    ab:4b:b4:40:37:29:86:6f:00:4e:e9:98:88:b0:7e:
                    d6:33:88:48:ce:d9:c0:27:fa:c9:cf:c0:cb:a0:89:
                    fa:99:65:f6:f4:c2:13:7f:2a:d0:ce:59:2d:c8:bc:
                    9a:90:c4:4e:5a:2e:bd:f8:d7:8d:8b:ac:71:3e:86:
                    21:de:9c:a4:b1:4c:de:15:91:24:cd:2c:1b:4e:c6:
                    a6:aa:43:06:9b:ae:76:1a:cc:ee:3e:ea:a7:8e:b8:
                    de:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:17:E1:B4:AC:8C:59:82:17:AE:80:CA:56:5A:EE:E8:C2:DB:DF:AD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17071560-0cdb-4ba4-997c-3dcf125404ed/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17071560-0cdb-4ba4-997c-3dcf125404ed/17071560-0cdb-4ba4-997c-3dcf125404ed.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62583

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:2f:4c:98:5a:9e:a1:9a:a0:3d:41:8c:1f:73:00:d0:f0:a3:
         85:62:f3:32:20:a8:55:22:fc:16:6c:37:cf:2a:c5:e0:06:49:
         79:70:a8:ab:4b:a8:e4:69:fd:cd:0c:8c:74:c7:43:e3:16:be:
         78:5d:19:08:03:7b:7e:a3:28:82:01:07:0f:47:13:93:03:fc:
         b9:66:f9:21:1c:02:c6:ec:a1:99:b4:83:bf:25:dc:4b:ed:2b:
         04:4c:f3:1d:87:c8:f3:65:4d:a3:c7:44:2b:f2:c8:0a:8f:48:
         f0:bf:cb:40:f5:16:c0:01:16:2c:db:f3:b9:cc:ae:b3:69:d5:
         d9:4f:3b:f3:59:f2:11:39:9c:f3:29:5e:9c:6f:1c:5c:59:65:
         27:d6:a6:42:46:1f:1b:63:97:17:25:31:69:01:4a:ec:2b:78:
         d1:8e:e7:34:42:21:75:a0:4f:30:b6:85:8f:c1:fd:61:a3:52:
         7d:9f:2f:1c:ce:a8:76:3f:bf:e5:12:5d:11:2e:05:65:71:ae:
         eb:78:16:92:be:b1:c2:c7:17:c7:d1:a6:a3:10:6d:2f:8e:a1:
         05:59:c2:58:67:33:69:90:01:45:53:85:47:19:81:06:c3:03:
         d2:db:b2:c1:51:7c:fc:d6:9d:56:38:61:d8:68:c1:b8:26:8c:
         9f:37:ed:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----