Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738.cer
File:                     34a5694e-eed6-4612-aff2-ae9f369f1738.cer (raw, json)
Hash identifier:          unGBzT4sut+/4ScNvIBBzz/JkXLYdTnB04InPR47ymc=
Subject key identifier:   D4:1C:AC:64:CE:AE:9E:BB:F2:06:D7:33:0E:3E:0B:48:4D:BA:1D:72
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845E4B57F501C0E2318334A1040
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/34a5694e-eed6-4612-aff2-ae9f369f1738.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 16 May 2024 15:56:04 +0000
Certificate not after:    Wed 19 Aug 2026 15:56:04 +0000
Subordinate resources:    AS: 397861
                          IP: 67.158.59.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:b5:7f:50:1c:0e:23:18:33:4a:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 16 15:56:04 2024 GMT
            Not After : Aug 19 15:56:04 2026 GMT
        Subject: CN=34a5694e-eed6-4612-aff2-ae9f369f1738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2b:22:24:39:15:d7:0d:89:3e:23:4c:6d:16:
                    e3:da:0b:a5:f1:c8:a4:05:59:c2:30:28:51:e1:ef:
                    10:f8:78:b9:02:cd:82:1e:88:8a:ab:08:55:39:c5:
                    43:c2:10:22:33:a3:2c:b9:2d:ed:0f:d0:69:45:1d:
                    32:97:29:de:6d:12:ee:37:0e:bc:be:bd:11:f9:d6:
                    da:1c:9e:89:06:5c:90:c5:30:ef:01:94:9d:f9:e7:
                    e6:0d:ea:cc:65:fc:bc:98:50:68:51:d1:ae:f0:78:
                    32:c9:89:28:ae:b6:eb:d6:76:4e:1f:2f:3b:34:64:
                    10:51:63:e2:5e:52:aa:32:2b:d2:64:dc:6d:42:a6:
                    ac:b6:e9:d9:22:e5:97:1a:c7:cf:cd:1b:64:a3:5f:
                    e9:49:04:a7:ad:c3:44:06:63:6e:02:c3:0e:26:73:
                    83:9c:df:86:7f:b6:8a:c8:62:36:e7:9a:96:cb:55:
                    2d:20:ab:b4:45:2a:cb:7a:00:c4:8b:99:18:87:09:
                    f3:92:c8:b7:4d:d4:b1:59:8c:de:f5:fb:f0:de:29:
                    15:06:a2:e5:8f:22:cf:bf:93:b8:ad:33:a9:3e:b0:
                    25:84:94:e1:ca:45:99:40:47:da:49:43:3d:9d:b2:
                    2e:fc:2e:21:35:51:4d:6c:f2:7d:ca:18:c3:42:11:
                    bc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1C:AC:64:CE:AE:9E:BB:F2:06:D7:33:0E:3E:0B:48:4D:BA:1D:72
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/34a5694e-eed6-4612-aff2-ae9f369f1738.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.158.59.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397861

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:16:c0:bc:09:81:90:c5:17:77:e1:ad:4f:b1:9c:e9:c6:0e:
         3c:5c:c4:83:a6:34:0e:0d:4d:36:f5:0e:cc:cf:b5:99:4b:7b:
         76:b8:fc:f2:7f:ee:d6:c9:a4:61:e2:6d:f7:8b:86:ed:aa:de:
         d0:50:a7:aa:5a:70:e3:cc:e2:47:2e:c4:cc:56:df:e9:c9:d4:
         73:38:2d:19:98:73:38:38:99:c1:92:cd:9d:13:e6:38:76:87:
         c9:7f:3e:9f:9d:8e:fe:60:7b:ba:5a:f6:7d:cd:c7:4c:19:9b:
         ea:f3:da:65:e0:96:da:e2:55:05:a5:06:f8:6a:d1:d5:f7:17:
         ae:1d:a3:be:0b:c9:6b:ce:9a:1e:e3:3c:20:d6:21:0a:83:27:
         e3:dd:fe:63:99:c9:64:09:05:68:b4:d2:ed:d4:0a:14:b0:b5:
         cb:20:62:c7:9b:a3:9a:49:2c:11:7d:2d:4f:ed:2c:33:df:70:
         67:f1:57:f8:f1:23:d1:87:86:86:36:c6:ef:5c:bf:66:1d:9d:
         84:92:0c:e1:0a:65:c9:0b:31:b1:c5:5f:4e:17:30:b3:f3:9b:
         fd:36:0c:39:ef:42:6f:0f:e0:3e:e0:d7:0a:d7:48:74:dc:16:
         19:02:bb:94:10:d4:27:d2:d9:35:e2:73:92:74:95:a4:e3:ab:
         56:2c:26:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----