Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer
File:                     53047e29-2570-4585-9e69-b23797196c26.cer (raw, json)
Hash identifier:          Cm0LuudFSZeIUpr6CT50lrHgN0DmSoW6goFABXSHQoc=
Subject key identifier:   C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845D3DC8D92187E864C4950CA80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 10 May 2024 15:06:01 +0000
Certificate not after:    Thu 13 Aug 2026 15:06:01 +0000
Subordinate resources:    IP: 158.116.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:dc:8d:92:18:7e:86:4c:49:50:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 10 15:06:01 2024 GMT
            Not After : Aug 13 15:06:01 2026 GMT
        Subject: CN=53047e29-2570-4585-9e69-b23797196c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3a:a5:77:a5:ca:28:40:aa:a7:be:ec:07:19:
                    bd:b0:d1:a9:81:c4:61:77:69:ef:7a:be:c6:a0:18:
                    28:d5:2e:33:13:8a:c6:03:52:cc:9f:8a:a5:31:6d:
                    9f:c2:6e:e9:72:b5:90:c3:64:01:8a:33:e2:a3:64:
                    0c:0c:88:3c:b8:3c:3b:ed:f9:a8:69:a7:24:87:0e:
                    56:f5:6c:b6:ef:aa:d5:e8:9d:6a:42:cd:25:23:1b:
                    19:42:1b:a9:64:46:d5:54:51:46:9f:f3:39:df:22:
                    ea:f4:b9:d2:b9:06:54:ae:30:67:51:0e:75:a6:b7:
                    f7:f7:3e:5b:0f:1d:9a:66:fd:60:85:48:95:15:23:
                    ae:f5:ec:89:61:7c:61:7f:3e:eb:28:71:2b:a7:a5:
                    17:42:f4:ce:b4:ec:d8:d7:ec:3a:1d:07:96:20:2f:
                    98:ed:e7:0a:41:2d:18:08:f8:65:ad:a4:0c:45:e8:
                    f3:13:24:09:9d:f3:6a:fa:c4:1e:cb:4a:04:4a:cc:
                    c2:a1:4c:8a:e3:60:bd:84:3d:39:dc:fa:81:9c:27:
                    bd:9d:51:30:9b:2f:b0:6e:36:27:bd:ec:ec:4e:74:
                    53:e3:0b:fc:81:91:da:2f:ed:fe:e0:af:78:8a:a8:
                    fa:c7:7d:8f:4a:28:7f:e8:b0:94:96:42:c0:bd:bb:
                    7d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.116.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:c7:d3:95:ce:ee:1f:f8:99:76:99:72:5d:5c:ed:8a:47:71:
         be:3b:28:17:98:4e:7f:a7:65:4b:a0:b2:05:26:09:71:41:bc:
         c8:a1:ee:5e:09:21:d6:76:cb:ac:95:e4:a6:9b:97:5f:58:54:
         b3:24:42:46:46:aa:1b:47:0a:8e:e7:c7:d0:3b:3b:a1:05:88:
         82:81:07:0a:fc:54:6a:f7:bd:ff:b8:22:c8:45:f4:3f:2f:60:
         0c:cb:28:a1:33:46:bc:c0:6c:f8:22:a8:ec:9b:9f:6e:0d:43:
         d2:87:c5:8a:35:0d:77:b3:fe:50:be:a6:44:0b:46:f0:00:f1:
         52:7d:6d:de:5b:07:9f:79:bf:a5:0b:63:f8:b9:de:46:82:5a:
         19:9c:32:7e:56:8e:1d:d4:ce:cf:c5:c7:02:5f:35:83:c7:d2:
         fc:15:31:32:6a:4b:6e:52:19:c9:42:ec:cf:a9:a6:95:2b:88:
         c1:61:91:d3:01:11:75:82:01:c3:4a:f2:d2:43:8d:61:41:04:
         7e:6c:39:c9:c2:1d:51:bb:a7:6f:c6:b7:89:ab:c3:cd:c2:3f:
         c6:ee:4e:a9:ef:33:09:a7:db:84:9f:17:0d:9e:db:bf:31:99:
         be:10:70:0a:51:a1:35:6a:ae:27:ba:a4:7e:bd:d8:59:bd:d9:
         b5:83:1f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----