Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
File:                     19039935-462a-4b14-8e96-78798283eeff.cer (raw, json)
Hash identifier:          VgCiVO530yrdrUL72ybIPZPtU8VIcuX+ak8xSwcJWP4=
Subject key identifier:   30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845CF186679453CB4206F7CAB00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 08 May 2024 22:07:34 +0000
Certificate not after:    Tue 11 Aug 2026 22:07:34 +0000
Subordinate resources:    IP: 167.253.36.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:18:66:79:45:3c:b4:20:6f:7c:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May  8 22:07:34 2024 GMT
            Not After : Aug 11 22:07:34 2026 GMT
        Subject: CN=19039935-462a-4b14-8e96-78798283eeff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:86:12:02:46:88:bf:de:a6:16:f8:83:fa:
                    30:07:4b:6b:37:73:54:8b:2f:9c:96:b5:e4:dc:54:
                    af:9d:90:75:27:2f:ac:23:0b:77:35:59:db:09:cd:
                    0a:7e:4d:bd:c8:33:c1:e3:1e:36:79:fd:d3:0d:49:
                    04:cf:29:1c:f3:a0:d8:11:46:d5:5f:31:09:18:1e:
                    83:da:4b:5c:83:91:5a:15:38:fa:b6:55:8b:8e:9a:
                    ab:d2:40:9b:2a:de:cf:8d:1e:67:e9:98:af:75:17:
                    93:64:4b:ee:e3:3d:a6:b8:b1:82:24:12:3c:ff:1b:
                    e9:ac:a3:ce:c4:a0:70:9a:4b:f6:6a:23:0c:7f:b2:
                    d8:9f:eb:a4:2b:f8:c4:25:e7:41:52:e1:48:55:dd:
                    6a:29:4d:49:fc:76:b1:2e:91:b2:16:c2:c6:08:90:
                    ce:70:0b:d8:49:ae:1a:a8:ac:2c:62:c4:f8:84:d9:
                    09:dc:58:18:3c:b9:4c:f6:af:44:91:52:8d:99:ad:
                    00:b0:8e:84:54:48:cc:40:20:4c:1a:52:90:ce:80:
                    c3:0a:bc:c7:36:82:93:72:b5:0a:ad:d9:81:9b:96:
                    b7:4d:0b:57:13:60:89:55:7e:6a:63:8d:79:a1:e6:
                    ef:c4:52:17:9f:1d:ca:97:cb:00:4e:81:45:b6:88:
                    cc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e0:2a:8a:3d:2b:2a:18:7d:23:de:69:be:bb:20:56:96:62:
         23:ba:b1:af:89:fe:94:06:a3:d8:6a:3f:bc:13:c4:4a:bd:85:
         e2:73:b8:d5:13:7c:29:31:24:66:47:51:50:32:e4:a6:7a:0b:
         19:dd:d1:3d:14:1c:75:83:e0:9f:78:8a:6f:b9:47:06:fa:65:
         9b:ef:6f:c7:0b:90:4d:55:81:05:ce:96:d5:d0:1e:35:77:ba:
         78:46:53:6a:c4:5e:92:e2:bf:ad:fa:14:79:ee:2b:2f:61:11:
         1f:9f:8a:6b:2f:8c:ec:17:46:76:b9:88:f4:6c:42:bb:b8:02:
         71:ef:12:93:7c:5a:ae:2d:c4:20:93:f4:cf:91:2f:f7:21:ea:
         b5:32:d7:ad:51:a0:89:60:78:b1:0e:f1:e2:12:3a:83:c0:47:
         d5:8c:5b:1f:41:a4:43:cd:6c:d8:7f:99:02:72:8d:e4:e5:b8:
         0e:e2:11:a2:3c:a9:22:16:8a:18:49:73:98:ca:0f:0a:ca:0e:
         f2:e1:73:e1:c9:c6:68:1c:c8:65:d1:c7:2b:4f:df:3d:67:3c:
         98:48:0a:46:cd:24:89:e9:9b:e3:59:3d:26:5a:6a:0c:95:99:
         19:c3:f6:23:ab:bf:dd:ec:1a:fe:d2:f9:bd:67:a7:6a:ff:50:
         12:8c:5e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----