Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer
File:                     31663e0d-961a-43ac-8a01-d43efc01bea0.cer (raw, json)
Hash identifier:          HEuJG591RXizDIdfIX2DgfjaqmorpInx0JbhikCHlio=
Subject key identifier:   7B:F3:59:98:1D:7C:59:F4:71:50:EF:F2:7C:BA:A7:98:14:DA:40:80
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858467E4583442D37E0970F19EC00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 10 Jul 2024 16:04:55 +0000
Certificate not after:    Tue 13 Oct 2026 16:04:55 +0000
Subordinate resources:    AS: 395555
                          IP: 170.10.64.0/22
                          IP: 170.10.72.0/24
                          IP: 170.10.84.0/22
                          IP: 209.206.64.0/19
                          IP: 2604:4c40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7e:45:83:44:2d:37:e0:97:0f:19:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 10 16:04:55 2024 GMT
            Not After : Oct 13 16:04:55 2026 GMT
        Subject: CN=31663e0d-961a-43ac-8a01-d43efc01bea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6b:43:a7:ab:0a:36:9c:1f:46:ac:f1:80:d5:
                    a4:fb:2e:d2:09:4a:9f:00:36:22:2b:da:23:ac:9e:
                    4a:e1:a0:e3:c1:32:3d:9e:86:cb:2b:fd:81:80:84:
                    47:11:d6:81:33:0a:d4:04:a2:6a:0d:2c:8b:dc:56:
                    58:24:96:9c:93:07:34:1c:4f:b0:3b:e5:ad:d2:d0:
                    4d:2d:19:8d:b7:c5:aa:43:07:59:a9:ff:66:cf:77:
                    de:47:79:6b:1f:f6:40:d1:27:b1:7e:c4:a7:72:c1:
                    91:fe:f3:47:c6:41:b4:a8:64:79:09:1d:58:95:22:
                    23:b5:c9:aa:b2:dd:85:30:b7:d1:85:ec:cd:d6:9c:
                    cd:8f:e8:d9:7b:32:97:fa:60:5b:56:2d:06:fb:4a:
                    00:30:bf:89:c9:ff:12:3c:f6:59:e2:96:42:7a:34:
                    f0:f4:ef:78:d9:3f:17:00:9b:70:23:0c:68:6d:a4:
                    d7:c5:0d:ca:3e:c5:63:99:8c:18:61:d2:fa:68:6c:
                    ef:2f:70:99:2d:de:20:57:0d:8a:b6:80:3a:f4:e0:
                    e7:69:52:6e:9d:65:c8:16:2a:db:ca:ea:3b:f0:be:
                    48:95:1c:66:8d:25:dd:40:dd:52:8e:c9:41:bd:70:
                    80:2a:af:3c:8f:e3:e4:ea:12:2b:ff:0a:7b:90:06:
                    17:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F3:59:98:1D:7C:59:F4:71:50:EF:F2:7C:BA:A7:98:14:DA:40:80
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.64.0/22
                  170.10.72.0/24
                  170.10.84.0/22
                  209.206.64.0/19
                IPv6:
                  2604:4c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395555

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:14:e6:c8:8e:58:74:ff:e9:bb:0d:5d:4e:f1:b1:08:e1:d1:
         79:c2:56:b1:48:eb:db:65:bc:0b:a9:80:3f:95:17:31:82:05:
         e3:a6:c1:6b:91:cf:6d:d2:ad:f3:7e:93:3b:dc:67:2b:5b:03:
         d9:52:51:7c:06:76:eb:d2:ae:9c:4c:d8:0f:45:dc:5f:d0:42:
         7e:2d:a8:bd:72:2c:dc:42:5a:44:88:de:fb:ac:d8:64:03:d0:
         8e:d0:96:f4:8a:cf:32:cb:c1:6a:7f:4f:a5:de:0f:5e:6d:92:
         e8:2b:21:54:d4:20:12:9e:97:5b:83:c4:3e:73:51:40:7d:f1:
         4c:a4:f1:6a:01:b4:16:b8:3c:0f:0f:ee:47:e0:bd:e4:e8:a5:
         20:4d:ae:82:99:26:67:0a:d2:c1:99:65:f6:f4:fa:63:97:78:
         2e:c6:61:42:29:6a:d0:64:04:0f:a6:fd:fe:82:22:09:bc:80:
         a6:a3:ed:b4:16:3e:bd:b2:c7:30:9f:84:7b:5c:69:19:ef:9e:
         f9:5b:66:b7:5a:67:a2:1b:d2:e3:dc:93:36:ea:52:b9:d1:d5:
         f4:c4:63:90:a6:f8:17:2c:b4:88:31:02:c7:94:97:32:99:7f:
         ee:48:f7:9f:3d:0d:83:67:0e:33:f6:7e:42:b1:46:fb:16:b1:
         93:6a:a5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----