Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer
File:                     3789343d-8560-48b0-9530-d2a1129fefe7.cer (raw, json)
Hash identifier:          WC60xx7TlylpDmTgyCU1vFVIzcb6f1eK8heeqQZhPWw=
Subject key identifier:   42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846842A734F5AD96313F7A0D880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 12 Jul 2024 18:45:15 +0000
Certificate not after:    Sat 10 Oct 2026 22:39:49 +0000
Subordinate resources:    AS: 401228
                          IP: 23.183.216.0/24
                          IP: 2602:f87c::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:84:2a:73:4f:5a:d9:63:13:f7:a0:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 12 18:45:15 2024 GMT
            Not After : Oct 10 22:39:49 2026 GMT
        Subject: CN=3789343d-8560-48b0-9530-d2a1129fefe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:41:de:4d:25:cf:11:b7:4f:a0:9d:a4:54:
                    df:85:78:d8:15:e3:08:66:60:37:5d:48:87:ee:7b:
                    12:0c:d2:58:19:78:8d:c2:66:68:ff:01:59:c1:0e:
                    35:f7:a5:c3:d7:7d:2c:cf:1c:ad:7f:de:b2:10:9b:
                    ff:b7:33:e8:ed:ed:6e:1c:c6:85:b0:00:c2:1e:3a:
                    df:c9:80:8d:f8:c8:72:b6:bd:cd:df:14:da:ba:2a:
                    bf:57:c6:3f:1e:20:b3:11:3c:b9:31:fe:8e:48:a8:
                    27:4f:aa:ec:5a:79:6b:7b:0f:bb:53:33:b5:3d:1a:
                    1c:37:33:f9:fc:5d:53:1a:f0:99:4e:01:a8:4c:b0:
                    54:e5:f2:38:f5:fc:39:c1:b2:b3:5a:f2:14:24:14:
                    d3:97:d4:e7:e4:ec:df:e5:ff:24:9c:77:83:26:62:
                    dd:6e:3c:30:bf:fa:22:8d:72:6d:4c:e8:5e:9b:f3:
                    c3:85:2c:9c:a0:9d:3e:0e:72:4a:40:e5:e3:99:1c:
                    ec:0b:83:1e:a8:82:a5:74:a7:68:4c:9b:3d:01:b7:
                    67:b4:2f:5b:20:92:d2:e1:97:7d:12:df:e8:8f:88:
                    8e:3b:9e:80:14:2b:a6:bf:71:64:b9:b0:98:bb:50:
                    43:d5:a6:77:9e:a6:3f:84:3f:bf:d3:21:c4:98:9a:
                    89:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.216.0/24
                IPv6:
                  2602:f87c::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401228

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:f2:4a:8f:ce:e1:0c:ac:f9:22:bc:b5:28:2f:1e:24:0f:ab:
         0d:3c:76:e7:90:00:58:93:02:37:36:71:52:36:bb:5f:2b:c2:
         3f:ff:eb:11:6c:28:bb:9f:0c:68:06:0b:93:d6:b4:0c:f8:3a:
         98:07:5d:cf:48:58:9c:0f:e2:50:2c:1f:66:52:e1:38:70:12:
         bc:fa:94:14:21:59:ac:bb:36:09:5e:f7:45:26:f3:10:32:ff:
         eb:d5:a7:5d:75:00:ed:ae:44:a3:0b:89:53:d5:78:a9:43:db:
         5b:da:77:97:d8:0b:c8:17:7f:9f:e5:d8:c3:16:aa:36:4a:06:
         e8:83:f1:27:30:d7:98:f8:60:46:94:de:78:41:a1:3b:55:86:
         87:40:89:14:da:5e:95:8f:d5:b9:92:6f:e7:fa:e3:ea:e7:6d:
         08:e6:5f:8b:3c:a4:f3:35:55:1d:a8:d9:57:8c:43:a8:31:63:
         7e:ab:ac:b5:f1:a2:9c:f0:e4:e2:76:63:f8:5d:46:d8:39:74:
         bb:4a:b5:fe:2d:e8:9c:f9:bd:3f:48:5f:d0:ca:1f:e1:df:76:
         8b:86:d4:68:de:74:13:c3:05:04:f5:64:77:ce:14:2c:6a:e2:
         5e:c5:0d:80:30:4e:5f:da:59:0b:78:6d:38:79:c5:29:46:bb:
         2a:fd:82:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----