Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer
File:                     4164770e-1f48-4239-921d-775b5152fa2e.cer (raw, json)
Hash identifier:          PPhwi/+fhkUXLC6XKih44NVzC6nYs36wa5k41VobikA=
Subject key identifier:   83:CB:8B:EB:85:4D:F2:17:9E:37:1A:F6:F7:DF:52:05:04:76:B5:6A
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858463B7C577B0E687C7194664A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 16 Jun 2024 17:56:14 +0000
Certificate not after:    Sat 19 Sep 2026 17:56:14 +0000
Subordinate resources:    IP: 23.131.120.0/24
                          IP: 2606:acc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:3b:7c:57:7b:0e:68:7c:71:94:66:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 16 17:56:14 2024 GMT
            Not After : Sep 19 17:56:14 2026 GMT
        Subject: CN=4164770e-1f48-4239-921d-775b5152fa2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:86:c4:44:11:bd:03:81:f8:aa:94:30:a0:8f:
                    f7:6c:41:36:4f:f7:7f:cd:99:d8:09:62:41:ba:05:
                    81:1a:c7:fa:31:25:23:bf:6a:ec:96:3b:69:02:c8:
                    a0:39:59:a8:4b:f6:46:3c:42:f9:f1:8f:98:f9:e2:
                    d7:e7:64:34:66:ed:d8:69:46:38:5a:3c:c6:a3:27:
                    0b:a8:fc:e9:c2:44:f2:e2:4f:8d:0a:32:5a:c2:36:
                    3e:c0:30:00:aa:e3:ef:56:ba:69:20:33:07:36:ac:
                    15:8f:34:ea:6d:f5:82:62:1e:71:16:1f:a3:f8:59:
                    00:c3:96:f4:23:46:e9:e9:48:62:85:37:0b:93:30:
                    62:32:47:e5:76:c6:6b:83:5d:8b:33:08:62:6f:e7:
                    a3:0f:48:c7:bb:cd:93:15:9c:1b:40:d3:2d:04:84:
                    ab:5d:9e:d7:e2:1d:7b:b1:e1:8d:67:9a:05:0b:a9:
                    aa:e2:b6:43:0d:dd:3a:83:96:10:09:81:c3:9b:67:
                    55:50:fc:c6:fb:c3:42:39:b4:13:a1:8e:d9:5d:1e:
                    d9:56:75:31:98:b6:c9:81:d3:eb:7c:4a:8a:41:d1:
                    02:cc:b6:76:53:01:6c:a1:6e:c2:61:f1:79:b3:75:
                    53:6b:76:0c:ed:cd:0c:e2:77:1e:32:18:1e:a5:28:
                    3d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CB:8B:EB:85:4D:F2:17:9E:37:1A:F6:F7:DF:52:05:04:76:B5:6A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.120.0/24
                IPv6:
                  2606:acc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:17:c6:43:96:be:f4:1a:b5:10:2e:d2:d5:02:53:36:9a:ea:
         38:7c:75:4d:15:25:b3:be:fe:8c:69:6d:79:eb:e1:eb:fe:b7:
         73:e0:ba:6c:92:ea:e7:19:f0:20:5b:43:5d:0f:18:1e:3d:c8:
         53:ba:0c:d0:33:9b:4f:71:1e:e6:72:52:db:eb:47:68:3b:4e:
         f1:92:86:05:47:e6:c8:ad:8c:9f:74:27:f7:b1:43:11:7a:67:
         d1:bd:e5:79:56:83:8f:76:86:1e:23:23:be:d0:95:47:22:02:
         01:9f:45:31:59:28:b7:f1:aa:fb:3a:4e:ef:a8:d2:d2:f9:fc:
         bf:d0:82:48:37:5a:d0:2a:92:88:3c:c9:6b:09:ef:48:34:85:
         fa:29:a9:fe:54:f1:7a:0e:e2:80:5d:4b:52:84:b5:7b:3f:f8:
         26:dc:74:94:11:1f:44:0b:dc:03:47:f3:bf:a2:ce:7f:38:11:
         8e:b7:1c:ba:37:2c:23:ad:a6:2e:6b:95:45:60:9d:de:06:84:
         25:fd:84:c6:ce:b0:43:a1:7f:79:4f:51:01:65:64:af:f8:48:
         ba:d0:66:28:c4:7e:c3:d6:02:1d:11:50:0e:d3:47:80:57:53:
         5a:89:5a:d1:e6:04:5d:ce:28:d5:fe:b4:f7:d6:ff:59:2e:5e:
         f4:6b:cf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----