Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer
File:                     3b24522b-8239-4bb9-9845-1e01e28aa452.cer (raw, json)
Hash identifier:          ePhynsXfcHcHtKkeOtMIfEbAkHbnIHA/AO8lH4wk2Fw=
Subject key identifier:   A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584609706733142DEB1F3BC03AA8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 29 May 2024 19:41:46 +0000
Certificate not after:    Tue 01 Sep 2026 19:41:46 +0000
Subordinate resources:    AS: 32854
                          IP: 169.197.172.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:09:70:67:33:14:2d:eb:1f:3b:c0:3a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 29 19:41:46 2024 GMT
            Not After : Sep  1 19:41:46 2026 GMT
        Subject: CN=3b24522b-8239-4bb9-9845-1e01e28aa452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e8:b0:71:59:f8:e8:bc:d0:1e:8f:10:24:93:
                    12:e4:dc:13:65:9f:d4:7e:d5:6d:73:08:71:25:bb:
                    c3:1a:d7:e2:0f:da:55:84:aa:44:80:2c:de:e3:b8:
                    0e:0b:06:74:2c:79:7b:52:78:06:89:e7:cf:b7:b3:
                    97:7d:53:ba:d8:7b:a2:f1:70:a0:eb:3d:06:b5:41:
                    f3:37:01:cb:0b:aa:da:8d:4a:b1:12:87:79:b4:97:
                    cb:14:d0:e2:e9:b2:74:25:9e:c6:43:14:2e:5d:83:
                    0d:b8:43:a1:9a:0e:15:85:99:a1:0e:0c:ed:fa:a9:
                    c6:83:cd:da:ab:ae:9d:5d:93:f9:7d:f6:d6:e9:f4:
                    d5:aa:50:6b:46:44:1d:db:09:c4:03:74:61:5b:d6:
                    69:7a:1a:1e:d7:99:c5:5a:51:3c:c4:5c:69:55:b4:
                    34:28:cc:b0:0f:7a:96:19:22:19:22:01:30:63:50:
                    11:de:d5:2d:44:67:c9:13:62:d2:ea:4f:47:55:5d:
                    ff:27:7f:c3:61:00:79:98:b6:15:1d:c4:e2:74:17:
                    e0:55:5e:e3:5e:9b:44:5a:a3:37:89:7a:74:a5:ce:
                    1b:75:a8:b6:f3:96:2a:d5:b1:7b:f4:40:65:dd:a6:
                    45:77:1d:09:7a:90:bf:bf:4a:b3:b8:16:44:ea:21:
                    22:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.172.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32854

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ab:ce:78:d9:50:04:55:b6:d5:5f:bb:27:9c:b6:5a:f4:c0:
         a1:ab:59:61:dc:59:2a:bd:c4:f4:99:1a:9f:26:f3:b1:12:bb:
         8d:5f:9f:38:2a:2a:40:62:93:fe:6d:74:cc:9c:f4:70:04:90:
         f0:13:b9:b4:0b:97:fe:3f:01:7d:ef:3a:b5:57:69:95:fe:6e:
         6f:1e:16:dd:a1:38:fd:7c:62:eb:f4:33:78:52:42:74:eb:c7:
         47:ae:bb:6a:6e:f8:c8:0d:a4:62:c8:a1:18:f1:e0:e6:cb:76:
         c9:09:fb:db:36:d2:9c:4b:70:56:d9:c1:f2:b3:a1:45:0a:22:
         1b:b5:a6:62:0b:a1:75:8e:7a:d4:2c:51:e8:5f:db:e1:ee:46:
         99:33:be:a1:7e:20:d0:90:97:e0:51:a9:1f:fc:cf:32:cc:41:
         5f:fc:95:99:15:e9:1c:40:7a:63:78:14:ed:5c:57:94:94:56:
         33:8b:83:08:79:6a:b9:ee:70:11:31:86:02:e4:bd:83:20:08:
         ed:5a:3e:cf:0f:28:a7:ac:27:2b:8c:3d:ba:5d:9d:7b:70:0c:
         27:08:f8:5d:0b:2b:a7:bc:3e:08:b4:8e:58:e4:49:04:75:03:
         af:16:ce:dc:67:98:e4:4c:19:4e:2f:b0:15:cf:4a:15:ce:b0:
         26:a7:d8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----