Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
File:                     20345bca-b793-4f14-a066-8653ac933903.cer (raw, json)
Hash identifier:          P5uNZfeexa9vJVUPsznSpPVDc2OrUaI2jlAIfFFGfhg=
Subject key identifier:   10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846516E311E9B91D3447728C060
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 24 Jun 2024 14:35:31 +0000
Certificate not after:    Sun 27 Sep 2026 14:35:31 +0000
Subordinate resources:    AS: 33144
                          IP: 206.41.48.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:51:6e:31:1e:9b:91:d3:44:77:28:c0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 24 14:35:31 2024 GMT
            Not After : Sep 27 14:35:31 2026 GMT
        Subject: CN=20345bca-b793-4f14-a066-8653ac933903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1d:91:49:9f:5e:cf:5b:7e:1b:22:d7:18:d3:
                    0f:cc:f1:3c:b8:e9:68:f8:72:d9:df:2b:e9:8b:c0:
                    f0:8f:71:6d:e3:5c:08:30:3b:b1:90:19:62:87:90:
                    6d:7f:07:e7:b8:7b:5d:44:0d:53:fa:3d:26:95:5b:
                    82:6a:4f:b4:32:88:6d:e9:a2:b8:47:a3:86:be:e4:
                    c2:03:4d:fd:03:1b:26:9e:f0:02:dc:32:20:e9:78:
                    04:9b:f5:50:7d:79:bb:8a:f0:d7:da:78:b9:be:72:
                    be:23:7d:d7:87:fe:59:25:49:56:6b:c5:91:b1:b6:
                    2a:d7:05:db:6c:52:73:3d:7a:78:18:08:ed:60:6b:
                    36:4c:7c:32:a2:ce:39:3d:4a:17:ca:47:1a:52:ee:
                    fe:b8:6a:0b:3d:01:7d:8b:9b:97:99:f4:1a:05:7e:
                    0c:47:80:1c:34:75:e7:77:c2:8e:9d:68:ab:8c:43:
                    79:52:0e:6c:2d:37:fa:1f:e7:70:61:ce:c9:4f:cd:
                    7a:2a:e8:3b:b4:d6:c3:2a:05:4f:6c:6e:6c:40:3b:
                    11:86:e0:06:b3:1c:86:01:57:c6:2f:ce:9d:f4:9b:
                    5f:57:f9:dc:f9:c7:38:77:9a:db:00:a5:b6:dd:ea:
                    65:b4:48:9f:0a:7f:8e:3c:05:c4:e8:25:52:ee:6e:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.48.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33144

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c1:84:de:c0:17:98:d1:6c:ac:0e:51:20:e8:f5:40:d7:ac:
         b9:a1:d6:e8:a0:c9:c5:e2:b9:d8:fd:63:40:d6:f2:4c:4b:f2:
         c6:ca:79:81:64:37:8a:ad:a3:c0:e3:d9:71:0c:29:16:11:f8:
         48:7c:7b:da:df:51:89:d6:6c:16:e4:15:22:af:bc:c6:4a:4c:
         9f:26:35:8f:4d:eb:1f:c4:c3:e3:4a:f9:9e:12:2f:33:f2:0b:
         af:d7:f6:65:2f:aa:ce:7f:90:c5:f7:43:10:01:8f:81:04:e8:
         54:90:d7:77:0d:99:47:4d:e7:27:5b:60:37:10:5c:24:d4:62:
         da:8d:da:34:0c:b7:36:14:76:f1:f9:31:e7:11:85:0d:4e:7e:
         f0:ac:10:5c:f2:f7:20:4e:1a:e6:9b:3d:11:d2:28:13:a0:c7:
         16:19:00:c1:cd:4a:67:d4:59:f9:98:fe:51:59:65:27:b8:d6:
         55:83:21:7d:22:f4:a0:c7:f5:9a:a8:50:6a:bb:3b:6b:ca:fe:
         bb:f8:f4:1f:0c:c7:5a:30:4b:50:ec:6e:1d:06:e3:87:16:ba:
         0e:e9:94:ef:0e:54:10:3a:61:08:56:b5:1b:5d:26:f1:8a:42:
         74:aa:bd:07:b2:a8:ae:c5:e2:dd:24:03:65:86:7b:c5:d3:29:
         33:d8:81:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----