Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314.cer
File:                     1a059caa-dd4f-4480-a089-c3da1959a314.cer (raw, json)
Hash identifier:          Plf2L8S1AOWAmLoM/2GzPKunChdCSpoui6tdJQm9l3A=
Subject key identifier:   F4:5A:93:65:33:74:A3:67:AB:AA:8E:F7:17:B4:4D:40:ED:E2:B7:42
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845E55930774A94386B5ED50200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 16 May 2024 21:25:54 +0000
Certificate not after:    Wed 19 Aug 2026 21:25:54 +0000
Subordinate resources:    AS: 397072
                          IP: 23.173.160.0/24
                          IP: 2602:fe09::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e5:59:30:77:4a:94:38:6b:5e:d5:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 16 21:25:54 2024 GMT
            Not After : Aug 19 21:25:54 2026 GMT
        Subject: CN=1a059caa-dd4f-4480-a089-c3da1959a314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a7:45:eb:5b:c7:14:69:66:ed:33:f8:e8:92:
                    a4:21:4d:18:db:a1:9b:95:c7:9c:83:b4:f7:73:de:
                    e7:ac:98:6f:50:cb:5b:cd:a4:d9:fa:ef:36:51:a0:
                    7a:ab:8c:dd:a0:4f:b3:ef:03:69:cc:74:e5:d1:1a:
                    ce:ff:2b:72:af:e0:c3:9a:69:10:b2:f8:cd:4c:c8:
                    f3:9c:80:6e:01:1a:f7:89:e3:18:48:2e:2b:49:d2:
                    7b:10:fb:be:c4:35:ab:e9:df:5a:35:a1:c3:76:2f:
                    90:19:3a:f6:79:5f:b7:40:f8:d0:6c:6d:eb:8f:74:
                    2d:51:fd:cb:75:cf:cf:8e:41:b8:d9:4b:2c:ac:fa:
                    0e:b2:80:b8:64:81:0c:a3:cf:a9:72:da:53:c1:a5:
                    93:5c:b8:9a:0a:b5:7b:a1:af:2a:f2:20:f6:94:97:
                    34:74:8b:9a:72:55:94:32:37:81:a6:e9:68:f1:d6:
                    5c:35:07:d6:f0:eb:c9:cc:14:35:63:3b:dd:ac:2f:
                    66:f3:01:f3:d2:14:48:9c:28:1d:4a:0e:4a:71:d6:
                    0e:dc:29:56:61:b9:78:ef:ee:f0:4c:92:06:20:15:
                    ef:35:28:0c:6f:94:16:04:bd:f7:36:f7:0e:33:92:
                    39:80:3d:90:55:44:7a:61:c1:c9:de:73:b7:d7:8e:
                    9f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5A:93:65:33:74:A3:67:AB:AA:8E:F7:17:B4:4D:40:ED:E2:B7:42
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.160.0/24
                IPv6:
                  2602:fe09::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397072

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f0:b7:0e:4a:40:b4:6f:29:86:92:0a:ea:43:db:3e:be:46:
         3a:ec:68:e6:43:fd:79:e0:87:6e:87:2d:f6:fa:e3:63:3c:c2:
         23:52:6a:58:5d:58:16:b2:09:0d:8d:a4:61:73:4d:6d:d8:ae:
         1b:79:09:80:2a:ab:64:48:71:50:19:b5:30:56:ce:7b:49:7c:
         bd:e5:9e:ad:44:44:8d:f5:a7:d6:c0:89:14:51:e2:44:3e:6e:
         1d:0e:82:b8:6c:11:b7:00:16:7a:ca:9d:7d:5f:30:90:f0:8c:
         f5:b7:17:88:8e:5f:df:3c:c3:08:68:53:19:1f:d5:39:a1:a1:
         c2:25:1c:84:c7:f9:2c:d0:7e:54:c4:39:36:63:2b:1e:df:e9:
         c9:d5:29:b3:67:a9:e3:31:53:20:53:af:1e:1e:a0:ce:b2:f6:
         be:7a:0b:d2:63:41:07:75:40:1b:28:b0:82:87:d4:54:61:da:
         79:ff:aa:9c:9a:16:28:32:5d:52:9c:97:ff:b5:fa:aa:c6:1e:
         e4:0d:0f:6c:5a:e6:3c:32:cd:cf:17:4e:64:e9:1c:37:b3:95:
         b2:b1:0a:69:ad:d4:e0:c0:b5:fa:30:13:7b:ef:db:e7:9e:89:
         9e:59:0a:80:50:7c:1c:5b:7f:cc:ea:0e:47:f2:f3:31:0a:d8:
         9e:3e:c8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----