Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer
File:                     48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer (raw, json)
Hash identifier:          /KbB8lboDtWOmd+f8LDXnlzJYBwDKBwL+H8UbBMp1iw=
Subject key identifier:   FC:3E:84:F6:1F:FF:8C:1B:D3:72:B5:CD:B2:71:F6:63:79:2D:B6:4A
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858467E8C474B287AEE7F68582740
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 10 Jul 2024 18:27:30 +0000
Certificate not after:    Tue 13 Oct 2026 18:27:30 +0000
Subordinate resources:    IP: 159.212.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7e:8c:47:4b:28:7a:ee:7f:68:58:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 10 18:27:30 2024 GMT
            Not After : Oct 13 18:27:30 2026 GMT
        Subject: CN=48abc7ed-0cf4-4735-b58f-d6e86fda0d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7d:bd:c3:56:da:c8:20:10:91:f6:71:b3:b4:
                    3e:49:73:50:a7:a4:00:f5:a0:68:14:ea:80:f1:24:
                    00:6d:d3:b8:13:a9:f0:41:b1:4e:e5:e1:5b:db:cb:
                    54:5c:55:80:ad:31:c7:1f:05:63:ab:36:f2:9c:4f:
                    45:c8:9b:79:74:87:a0:8b:13:e7:40:21:a7:d2:a1:
                    1c:6f:ef:0e:b7:95:67:76:09:b7:e6:21:a8:a2:af:
                    ad:d2:d9:ce:70:3c:2a:f6:ce:dd:d7:e1:d1:07:36:
                    89:ed:4d:89:4f:de:c0:21:2d:29:7a:99:d6:63:1c:
                    b1:1f:78:e8:97:66:ff:2c:c0:4a:83:95:34:ff:77:
                    28:57:a2:bc:99:6c:d4:b7:cb:47:70:0c:d3:9e:9d:
                    a9:4f:1e:b4:e1:20:a2:f0:6a:f5:22:c1:be:98:12:
                    7f:0f:31:31:e7:8c:ae:2c:84:4c:d3:eb:68:6e:0a:
                    19:7e:0c:9c:4f:6f:84:36:66:52:27:d7:7c:14:a3:
                    23:09:ca:d9:9a:23:88:df:ed:b0:75:30:72:bd:6f:
                    a8:0c:2f:c9:51:31:07:e6:0b:ff:80:ce:14:e1:ea:
                    f7:39:8d:e3:bb:11:72:d5:a7:de:70:2b:be:70:4b:
                    82:31:43:1c:4a:49:96:e7:f0:08:b6:26:84:a4:7b:
                    e7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3E:84:F6:1F:FF:8C:1B:D3:72:B5:CD:B2:71:F6:63:79:2D:B6:4A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:7a:84:d1:25:62:dd:60:83:92:63:14:14:cc:2c:56:9c:7d:
         23:ca:dc:6d:3c:56:9d:bb:78:62:f2:f6:3c:f0:8f:1d:7e:17:
         aa:40:d3:3d:60:9d:65:c2:5a:5d:bb:5e:20:b8:31:ce:53:3e:
         26:fd:f1:eb:04:57:14:0c:ec:5d:24:f3:95:7e:75:41:b3:29:
         98:34:6f:61:34:86:bd:22:17:c0:50:27:f5:c0:93:eb:65:9c:
         1a:2f:7b:e5:d6:dc:54:45:22:0a:0a:03:0f:fb:cb:ab:b1:e8:
         bf:21:85:59:5a:aa:1e:ed:11:28:69:46:1e:81:2c:e0:41:fd:
         13:52:09:e1:c7:d2:c2:e1:b1:4d:c6:f1:92:87:c9:cf:f3:37:
         57:ed:f7:04:68:1d:26:7a:0c:b7:64:86:63:2f:89:c8:fc:41:
         68:92:66:9a:f5:52:02:65:1e:62:33:f2:da:c3:6c:b5:75:f3:
         75:1c:96:b8:ff:2b:0c:c1:04:39:c5:92:f2:7a:67:02:99:85:
         5b:df:e2:33:d7:db:2d:cc:d2:82:04:97:d0:41:ca:29:e6:60:
         c7:4e:4d:ac:d3:ca:3c:ba:c3:d2:61:00:0e:34:14:dc:bb:63:
         bb:e2:5d:95:1d:69:3a:e6:0d:35:65:b8:e9:89:a0:33:86:51:
         dd:79:ad:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----