Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e155757-10d0-43bd-a845-2e99ec33ed6d.cer
File:                     4e155757-10d0-43bd-a845-2e99ec33ed6d.cer (raw, json)
Hash identifier:          FEdS2DyAApnJbS4v3/Kx+u6hb4gPak3uXr6RvDgJboo=
Subject key identifier:   E2:D0:46:F5:2B:C6:69:FB:C0:1F:64:DF:06:80:20:C0:1C:96:2B:0A
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846688ADE78BC969A20D3D5E900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e155757-10d0-43bd-a845-2e99ec33ed6d/4e155757-10d0-43bd-a845-2e99ec33ed6d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e155757-10d0-43bd-a845-2e99ec33ed6d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 02 Jul 2024 21:16:53 +0000
Certificate not after:    Mon 05 Oct 2026 21:16:53 +0000
Subordinate resources:    IP: 2620:26:2000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:68:8a:de:78:bc:96:9a:20:d3:d5:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul  2 21:16:53 2024 GMT
            Not After : Oct  5 21:16:53 2026 GMT
        Subject: CN=4e155757-10d0-43bd-a845-2e99ec33ed6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:8b:13:53:f2:a5:d2:33:45:f2:ca:a4:87:
                    d2:17:66:aa:29:9e:65:e3:cb:5a:19:85:53:94:f6:
                    a1:f5:af:e9:ef:53:61:ee:ed:e5:d1:ba:8c:2e:c0:
                    2c:10:45:c4:e2:ca:f0:84:91:00:79:21:16:3e:50:
                    4c:fe:48:a8:4e:76:7a:e4:fb:1a:a9:fe:14:7e:4d:
                    57:65:0b:82:b5:1f:0b:03:34:41:7a:d4:9d:7e:2a:
                    e0:f6:10:ee:53:2e:fd:16:64:1a:4c:ef:cf:c8:17:
                    1e:bd:23:31:39:15:54:31:65:7b:93:17:a8:de:8a:
                    67:2d:d0:9e:93:73:00:d9:09:e3:45:cd:d7:ce:a5:
                    d3:cb:3e:3a:a2:b6:1a:96:36:59:88:2a:7c:75:39:
                    f6:f8:dd:b3:a8:fd:e5:f5:63:7c:62:91:0b:d3:ab:
                    7c:10:9f:f2:86:c4:58:d5:50:4f:26:14:c9:7a:db:
                    cc:ac:17:2e:eb:8b:fc:70:fc:29:2a:8d:ab:46:bb:
                    b4:80:3c:e5:23:42:71:79:dd:78:8a:19:30:cc:9e:
                    5e:e9:17:0b:4c:87:35:4c:e0:7e:a3:a4:4a:ef:e2:
                    f0:fb:3a:ef:18:b3:a8:65:cc:6a:d3:12:11:03:09:
                    a6:c6:23:59:f7:15:49:78:a9:94:65:e8:47:bd:7e:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D0:46:F5:2B:C6:69:FB:C0:1F:64:DF:06:80:20:C0:1C:96:2B:0A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e155757-10d0-43bd-a845-2e99ec33ed6d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e155757-10d0-43bd-a845-2e99ec33ed6d/4e155757-10d0-43bd-a845-2e99ec33ed6d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:26:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:8c:e4:40:2f:15:03:ab:4d:61:54:3a:83:61:f2:d7:a5:a4:
         21:36:40:ad:cb:e7:d4:e1:a7:0e:f3:03:4d:d3:0d:5c:37:90:
         e6:c7:ac:a1:d8:49:41:bf:ac:6b:23:d2:39:ce:74:db:f5:b4:
         4b:7f:01:94:f6:08:90:3b:ec:f1:09:23:97:06:1f:85:f5:f3:
         00:21:9e:96:e1:b2:87:98:4a:89:48:d4:7c:c3:f3:45:1c:11:
         d3:eb:92:c0:bf:70:ab:f5:35:dc:f6:cc:b7:08:df:ea:41:9c:
         fb:aa:02:1f:ec:c6:9b:16:20:33:82:55:78:fe:93:d5:64:bc:
         82:d5:35:55:ce:ed:a1:c6:c5:91:48:7e:7f:4e:2d:94:dc:92:
         17:26:67:c5:b7:e4:7d:8b:45:89:ba:14:84:41:49:ec:47:ff:
         d4:c4:3c:34:e2:c1:f1:f7:a3:c1:5b:16:ce:a1:fa:b7:d0:58:
         1d:ef:dc:72:40:1f:bf:8e:be:99:0f:e9:11:b2:16:37:08:7e:
         49:be:7e:79:19:ea:bc:4d:b6:d0:aa:8c:f4:de:11:e7:b8:0f:
         8a:42:5a:1b:5b:d0:07:6c:82:b0:67:a0:01:ea:26:9f:9f:c1:
         8d:dd:c1:1a:c9:91:0f:7d:79:52:31:eb:6e:84:d9:df:92:cb:
         bb:79:9b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----