Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/46f330d4-426e-436b-b37b-66ee4166eabb.cer
File:                     46f330d4-426e-436b-b37b-66ee4166eabb.cer (raw, json)
Hash identifier:          9ocEktr4aeea59bKWxWKzqWqh25ObCgVKMgvdcfS1pM=
Subject key identifier:   5F:E6:AF:04:DF:29:46:7C:14:4A:8F:DE:0C:38:C5:EC:01:D3:1C:5F
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858469A615222F857E6DF66A6C5CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/46f330d4-426e-436b-b37b-66ee4166eabb/46f330d4-426e-436b-b37b-66ee4166eabb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/46f330d4-426e-436b-b37b-66ee4166eabb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 20 Jul 2024 17:43:35 +0000
Certificate not after:    Fri 23 Oct 2026 17:43:35 +0000
Subordinate resources:    AS: 54106

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:9a:61:52:22:f8:57:e6:df:66:a6:c5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 20 17:43:35 2024 GMT
            Not After : Oct 23 17:43:35 2026 GMT
        Subject: CN=46f330d4-426e-436b-b37b-66ee4166eabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2b:2b:e0:62:a6:3d:9f:c2:f3:f3:e9:c6:b1:
                    16:b3:28:ac:3a:bd:2d:85:fa:d9:13:f9:01:ff:c1:
                    45:e9:1c:2d:69:36:d7:e4:f5:ff:fd:42:84:fb:e1:
                    ab:30:1f:39:bc:e9:33:04:23:53:84:a2:43:68:16:
                    82:4c:9e:e6:b3:a1:7e:e8:28:02:bc:f5:f8:b3:76:
                    1e:e2:fa:98:53:2a:24:11:52:8a:ce:58:72:a4:5b:
                    d3:20:a8:01:95:39:52:a8:d9:6e:65:7d:f0:fe:b7:
                    34:c6:cf:f1:b8:9b:f2:7b:8b:f9:ba:7d:2d:33:35:
                    d1:e2:51:c2:ba:d3:25:cd:83:85:d2:9f:3b:d0:d7:
                    7b:9b:e9:f7:f4:d6:ce:66:b6:12:a4:c1:e5:3e:2b:
                    57:5c:b4:a4:ed:c7:97:dc:39:41:b7:38:43:1e:be:
                    6b:53:65:7a:8a:9d:90:a8:ea:5e:45:e2:1c:b0:d6:
                    a6:72:3e:0d:c2:2f:78:01:02:18:81:1e:31:31:c9:
                    77:6b:26:fd:5c:32:11:65:3b:e7:12:ed:ed:60:e7:
                    45:35:ce:99:0e:b8:d4:49:5c:86:5a:ae:27:c3:31:
                    bb:a4:6e:05:7f:30:f4:43:12:4a:37:58:d8:16:d5:
                    7c:ab:79:9e:2f:87:d3:e0:e1:db:dc:dd:a1:80:b2:
                    a6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E6:AF:04:DF:29:46:7C:14:4A:8F:DE:0C:38:C5:EC:01:D3:1C:5F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/46f330d4-426e-436b-b37b-66ee4166eabb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/46f330d4-426e-436b-b37b-66ee4166eabb/46f330d4-426e-436b-b37b-66ee4166eabb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54106

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:13:bc:a1:6d:3b:5a:b5:a0:37:e7:25:5e:10:b0:b8:29:1d:
         a2:c3:51:56:d3:e5:db:7a:47:5b:f7:7f:0e:17:ea:94:7f:5a:
         46:23:26:d1:25:ea:fd:f9:1f:30:4f:02:97:77:77:21:9f:7f:
         16:91:6d:08:8c:45:42:c9:3d:57:d8:28:3a:26:be:f1:2e:a1:
         25:3a:3a:aa:e5:3c:2f:9a:a3:dc:b7:07:42:5b:b8:9d:77:b4:
         6a:c9:db:28:52:13:50:67:2b:30:55:c0:9d:0f:af:bb:a4:75:
         4f:9e:e2:60:a4:54:37:14:e6:66:48:30:4a:73:e2:6e:a0:c5:
         a3:ba:70:23:ff:ee:89:4d:ae:b9:a8:1b:b6:ca:c0:3a:20:f9:
         31:d0:ba:a0:aa:e7:66:1d:35:64:ae:95:70:65:5d:13:54:15:
         d7:38:d4:26:7c:a3:4d:71:4f:04:d5:0a:0b:77:f4:ca:bf:f8:
         e2:c4:65:ef:a1:5e:5b:d5:44:92:1f:f8:8a:a2:c3:98:97:6b:
         3f:ae:ef:6d:6a:84:7d:42:d5:ed:79:09:e0:57:58:b5:0c:b8:
         e4:d2:03:d3:36:c1:b5:22:ee:71:99:1d:b2:56:3c:c5:33:79:
         06:e4:97:f9:1a:e6:0b:95:b7:b3:d7:61:d5:88:5d:da:6b:de:
         35:fa:73:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----