Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1e87ad84-3a0d-4693-8aa0-d9dd32667fb2.cer
File:                     1e87ad84-3a0d-4693-8aa0-d9dd32667fb2.cer (raw, json)
Hash identifier:          DPqrDM7SE5BW91rJDQEULurIjUjuxrO4Hiaj5b4CEMU=
Subject key identifier:   DB:50:43:87:8F:25:2F:D2:2D:84:FD:CD:2F:99:A1:B4:3B:BF:F8:8B
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846CEDE38AF9A2DD76C77BDEA00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1e87ad84-3a0d-4693-8aa0-d9dd32667fb2/1e87ad84-3a0d-4693-8aa0-d9dd32667fb2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1e87ad84-3a0d-4693-8aa0-d9dd32667fb2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 08 Aug 2024 12:57:17 +0000
Certificate not after:    Tue 10 Nov 2026 18:05:16 +0000
Subordinate resources:    AS: 31983
                          IP: 130.15.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ce:de:38:af:9a:2d:d7:6c:77:bd:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Aug  8 12:57:17 2024 GMT
            Not After : Nov 10 18:05:16 2026 GMT
        Subject: CN=1e87ad84-3a0d-4693-8aa0-d9dd32667fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:25:9a:5d:e0:8a:8a:f4:cb:b0:25:45:ee:dd:
                    c1:e6:ad:98:9c:75:89:97:ed:b6:12:50:69:36:26:
                    bd:98:1c:ba:76:ec:be:0e:4d:dd:c8:23:e4:68:97:
                    ba:6e:95:b7:17:41:47:79:2b:28:46:74:f5:7d:29:
                    6f:6a:2a:4e:e7:22:89:f0:2d:a6:9c:ce:74:63:ec:
                    9e:80:5f:bf:fe:15:eb:2d:47:9c:4e:dc:58:b7:7a:
                    fd:76:dc:dc:fb:68:2a:5f:9a:6a:42:13:06:fa:01:
                    21:a2:6a:0d:f6:cc:f9:c9:19:f0:28:dd:99:94:93:
                    a7:de:cd:9b:68:52:f9:34:aa:b0:c0:c1:80:be:f3:
                    44:bb:92:1c:b4:95:d5:80:01:e6:45:7a:17:47:41:
                    61:5c:d2:b2:56:79:58:8b:2f:de:27:22:72:77:5b:
                    68:3c:32:70:4b:04:e8:5c:59:21:75:43:4c:05:14:
                    00:a2:ca:0f:5b:b9:7d:4e:7b:0c:0a:c8:9c:12:4f:
                    83:10:66:77:f4:1e:d5:30:f9:dc:03:a9:25:64:3c:
                    de:49:dc:7f:5e:de:b8:54:2b:7e:a4:9a:c1:b3:d6:
                    db:56:8e:df:84:7c:bf:72:a6:93:bc:b9:5c:e8:5f:
                    10:91:bb:34:a0:72:89:39:36:78:ed:89:dc:47:47:
                    c4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:50:43:87:8F:25:2F:D2:2D:84:FD:CD:2F:99:A1:B4:3B:BF:F8:8B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1e87ad84-3a0d-4693-8aa0-d9dd32667fb2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1e87ad84-3a0d-4693-8aa0-d9dd32667fb2/1e87ad84-3a0d-4693-8aa0-d9dd32667fb2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.15.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31983

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:fe:57:2e:b9:73:db:b6:2b:e3:77:da:8e:d8:fd:26:88:92:
         9e:c2:b3:f0:72:81:cb:b3:49:ae:99:2a:c6:b2:90:2b:de:7a:
         d3:11:6f:a6:c9:83:0d:bc:68:d3:a0:b8:5e:84:c0:0d:7f:48:
         91:99:97:d6:71:9c:e8:00:07:d1:c5:7e:3e:5d:a6:d0:f3:4f:
         70:75:20:e5:66:28:85:dd:d5:b5:59:b4:22:c3:c0:b7:4b:cb:
         79:d8:d4:bc:3a:66:55:dc:31:06:71:f9:44:e5:fc:cd:01:ea:
         5b:7f:1c:c2:f7:a7:59:ba:66:f6:e0:96:69:0f:3f:cc:79:72:
         7b:00:f8:2d:b1:ef:f6:dd:f4:56:7d:8b:b0:e1:e2:64:a2:46:
         64:d3:a2:cd:96:6b:fc:a9:42:cc:e0:ba:8e:db:14:7a:12:ab:
         d6:7f:dd:78:fc:70:5f:68:93:ad:cb:02:e7:37:d9:e2:4b:61:
         e7:41:0e:0c:3b:e5:3f:9b:87:39:93:18:f3:24:c1:27:37:a4:
         43:9f:e0:1c:26:fe:52:dd:cc:40:c2:09:d0:93:31:a8:02:58:
         9d:dd:bb:be:54:ec:ab:ce:fb:5d:0c:5e:a1:1b:bb:78:39:1a:
         de:77:a6:8e:ca:28:24:08:65:43:1f:a3:fd:cd:34:f0:de:2b:
         df:66:7b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----