Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229.cer
File:                     5012fdc3-55c8-4825-af14-cdf211570229.cer (raw, json)
Hash identifier:          1J+1JDdIi98O6TcBDJoO4BHo+wkV3P9Ia8BxHMnoESg=
Subject key identifier:   B2:D0:29:F6:A6:69:07:EB:B2:A5:AA:C3:8A:D6:15:BE:97:AF:01:31
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858462AC99E5F73C6BBA0B5C38B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/5012fdc3-55c8-4825-af14-cdf211570229.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 10 Jun 2024 18:23:12 +0000
Certificate not after:    Sun 13 Sep 2026 18:23:12 +0000
Subordinate resources:    AS: 32697
                          IP: 66.132.145.0/24
                          IP: 2607:84c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2a:c9:9e:5f:73:c6:bb:a0:b5:c3:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 10 18:23:12 2024 GMT
            Not After : Sep 13 18:23:12 2026 GMT
        Subject: CN=5012fdc3-55c8-4825-af14-cdf211570229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:20:6c:10:ed:e2:0c:eb:2a:1b:05:30:da:82:
                    bd:43:b9:92:59:81:3c:df:5a:4f:1d:09:e4:c4:7e:
                    79:6e:33:59:6b:1f:f8:81:6d:8f:8a:c4:9e:40:86:
                    8e:07:e0:26:50:38:2e:a6:82:4d:54:ac:47:cb:e0:
                    7b:6d:67:c5:37:0a:05:9e:80:8f:42:01:fe:42:38:
                    f2:cd:02:86:04:ef:ba:d6:3e:e3:83:cb:61:1f:35:
                    64:68:bf:19:cc:d6:8d:a2:49:a3:b6:cd:6b:5e:4b:
                    51:38:f3:a2:5d:c0:b2:c9:c9:2a:e1:c3:01:21:5c:
                    36:5d:7f:67:30:5d:f1:d8:56:f7:9f:3b:ba:23:c6:
                    d7:b5:88:22:47:43:fc:57:9b:95:8b:81:cf:4e:a0:
                    75:87:dd:db:f9:f6:17:04:26:8c:6b:a9:78:3c:ef:
                    5c:b4:43:1a:84:46:74:dc:2d:18:42:dc:34:c8:01:
                    0e:3c:16:5c:43:4c:64:bf:cb:74:42:b0:32:74:11:
                    41:5a:24:aa:51:ef:f7:92:52:b1:27:73:db:d5:98:
                    e6:f8:9e:75:88:7e:33:5d:31:2e:95:a4:28:5e:3c:
                    a1:c4:5c:f5:3e:5c:0c:71:f4:97:c0:5f:93:ad:4f:
                    6e:62:98:46:03:df:74:d3:1b:4b:dd:46:20:b6:d0:
                    82:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D0:29:F6:A6:69:07:EB:B2:A5:AA:C3:8A:D6:15:BE:97:AF:01:31
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/5012fdc3-55c8-4825-af14-cdf211570229.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.132.145.0/24
                IPv6:
                  2607:84c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32697

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:01:15:a7:a3:a3:50:44:6c:d4:4a:d7:72:87:b3:36:90:f1:
         aa:7c:46:83:7c:fb:bf:a4:57:98:fc:fc:9e:4a:43:9e:c0:f3:
         94:b8:73:fa:c8:a2:6a:3c:3f:df:d7:54:40:5a:99:8a:48:f8:
         f8:0b:51:56:8d:13:5b:1f:8a:4c:2b:aa:d6:3c:a0:3c:dd:e5:
         36:14:bf:67:a1:32:e9:0f:58:80:38:09:fe:fd:6d:cd:28:df:
         ba:ca:5c:26:74:a1:74:03:86:6c:79:8f:d4:ca:14:ea:b5:1b:
         d8:bd:10:d5:fb:58:99:16:e2:c7:74:4f:d5:e0:2a:52:a6:f6:
         48:7f:1a:b1:56:a8:62:12:e0:d4:c1:ed:a7:3f:72:27:d3:cd:
         d2:ae:6c:d8:79:90:d9:51:92:0e:c5:aa:e9:99:ae:30:3d:14:
         9e:ee:9a:75:1c:41:5b:15:85:6b:80:ce:df:a4:95:42:c4:05:
         8a:18:46:9d:0b:cf:a8:f9:45:ff:7a:6c:13:98:14:cf:47:01:
         7e:a7:04:02:05:31:87:08:04:75:94:22:96:61:ef:46:f9:15:
         78:f9:a8:ff:c0:2b:16:86:63:bf:7b:be:69:4a:92:1a:32:d9:
         61:c1:48:4a:1a:fb:47:98:e5:ca:aa:d8:f2:5f:4e:f5:9b:3f:
         ce:8e:9e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----