Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3e5ff493-b301-4734-ab28-32a6babb1055.cer
File:                     3e5ff493-b301-4734-ab28-32a6babb1055.cer (raw, json)
Hash identifier:          X5zJskjQTVYZjouQM0bMrioGmJ3ahpmEVeDIyxiqgdU=
Subject key identifier:   EE:52:3F:1F:1B:0D:2F:C9:18:34:52:54:88:6C:DA:06:CE:76:7F:AA
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845E7A7B2D2D96E45A0A2B6C000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3e5ff493-b301-4734-ab28-32a6babb1055/3e5ff493-b301-4734-ab28-32a6babb1055.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3e5ff493-b301-4734-ab28-32a6babb1055/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 17 May 2024 17:15:42 +0000
Certificate not after:    Thu 20 Aug 2026 17:15:42 +0000
Subordinate resources:    AS: 400815
                          IP: 66.85.90.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:a7:b2:d2:d9:6e:45:a0:a2:b6:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 17 17:15:42 2024 GMT
            Not After : Aug 20 17:15:42 2026 GMT
        Subject: CN=3e5ff493-b301-4734-ab28-32a6babb1055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:77:6d:b8:7e:bf:77:ae:db:51:fa:e8:62:
                    54:8e:11:82:e5:ba:d2:47:2e:6f:03:0b:83:a0:04:
                    50:98:99:90:d3:07:8b:50:ba:16:15:f0:39:aa:7b:
                    b2:a6:28:63:01:55:44:0b:d4:55:84:dd:28:14:53:
                    14:68:c5:6c:ea:63:9f:7d:d1:cb:19:8a:5a:f8:2c:
                    2f:ae:e5:52:e2:86:11:c2:de:7d:e5:a3:2b:ca:4c:
                    8e:4c:37:63:9c:4c:0d:59:f6:73:72:df:d1:2f:12:
                    01:e2:b8:44:7d:be:9f:9d:fd:ba:00:56:f0:84:94:
                    a3:e5:08:20:bf:f6:3c:d3:84:d0:ff:26:2a:18:91:
                    a2:75:a4:16:37:65:4e:a8:99:77:67:44:bd:3e:da:
                    3d:0b:dd:3d:a1:59:b4:bd:63:6a:b1:26:a7:a5:10:
                    98:9a:23:a5:5f:d1:49:ae:2c:f9:72:82:bf:cc:73:
                    dd:01:7d:3c:70:26:62:65:dd:f2:23:ee:5a:14:63:
                    04:12:c6:26:5c:37:13:7b:92:83:06:3b:26:95:a1:
                    dd:02:46:3c:89:64:c8:bd:08:58:f2:e8:a7:4f:27:
                    a3:f8:87:34:05:d2:b7:5b:2c:b9:ee:fe:8f:b4:d0:
                    79:08:c7:5c:47:fc:c6:f3:72:9c:ea:b8:fd:ed:07:
                    6c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:52:3F:1F:1B:0D:2F:C9:18:34:52:54:88:6C:DA:06:CE:76:7F:AA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3e5ff493-b301-4734-ab28-32a6babb1055/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3e5ff493-b301-4734-ab28-32a6babb1055/3e5ff493-b301-4734-ab28-32a6babb1055.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.90.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400815

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:4b:48:d3:5b:28:1f:29:c7:7b:28:40:f1:90:a4:c0:9b:5b:
         7a:ff:d7:99:75:07:08:98:2a:43:74:a2:7b:5a:ca:30:bc:50:
         00:1e:ad:3c:a0:41:e8:ea:b2:36:ac:b3:e5:e3:1c:e0:94:57:
         b1:7e:d2:8e:55:58:e8:df:de:b1:58:20:af:9d:47:24:ac:ee:
         f1:05:3f:8b:75:62:56:41:e2:e5:5f:0a:d4:fd:0f:36:7a:1c:
         09:13:5b:cd:1c:7b:86:09:3a:f3:21:ca:22:7d:60:5a:00:0e:
         50:67:aa:cf:b2:8b:b8:67:6d:7f:c2:da:03:3b:34:3c:ce:c2:
         f5:a4:24:65:8d:9f:79:4b:a7:f9:96:4a:d2:b3:5f:df:be:b8:
         22:c4:f7:1f:50:c5:7c:07:0a:42:4e:2f:f0:26:9c:30:27:1f:
         55:75:26:fc:b0:51:be:43:89:d9:d5:23:5f:d1:b5:fc:af:c8:
         95:8e:86:18:41:80:8a:27:81:51:7d:0b:d9:83:e1:7a:02:f6:
         48:fe:43:71:b0:de:70:26:a2:d9:9e:4f:a8:5b:70:65:4a:3e:
         4f:0c:d2:c6:f1:e0:44:83:7c:d3:d4:96:00:3a:26:21:9b:56:
         fd:a1:d1:e6:47:81:e2:5e:ba:9c:e6:c5:a9:36:e6:92:e6:4e:
         32:36:08:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----