Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6.cer
File:                     554d5371-2bc4-4645-9f6e-22976d2fc4a6.cer (raw, json)
Hash identifier:          xOIh28K0J3STBCnM/0xIsAsG+ePZJuFN5A/A+2yskcc=
Subject key identifier:   53:EA:1C:18:6E:A7:41:FC:BA:D5:54:BC:07:72:A3:DD:82:19:3B:7D
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846BB4D8482137636AA062D1D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6/554d5371-2bc4-4645-9f6e-22976d2fc4a6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 01 Aug 2024 12:45:22 +0000
Certificate not after:    Wed 04 Nov 2026 13:45:22 +0000
Subordinate resources:    AS: 12132
                          IP: 199.231.220.0/22
                          IP: 2604:fc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:bb:4d:84:82:13:76:36:aa:06:2d:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Aug  1 12:45:22 2024 GMT
            Not After : Nov  4 13:45:22 2026 GMT
        Subject: CN=554d5371-2bc4-4645-9f6e-22976d2fc4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:76:04:00:3c:ca:c7:42:ca:02:ae:cb:8a:e3:
                    53:bf:b9:d7:9f:84:47:87:65:98:a2:75:99:6d:5c:
                    b3:06:5d:a7:5f:e7:60:fa:1c:b5:0b:b0:5d:ed:e3:
                    41:01:e8:8e:46:da:df:57:64:9c:14:e2:bc:e8:13:
                    2d:99:ff:52:e3:97:20:fd:07:08:a1:4f:f0:be:5e:
                    3c:16:89:eb:cd:00:5a:2c:65:e5:f9:3e:bf:9f:83:
                    3c:c8:ac:2e:02:82:8a:49:5b:1f:09:38:7d:b5:fc:
                    f3:40:d7:72:93:56:f0:43:cd:0b:70:fc:9a:d8:25:
                    65:cd:11:24:aa:cb:e0:f6:64:55:14:c8:90:6e:71:
                    55:ab:48:5d:09:88:d9:54:07:1e:c4:d0:55:f2:c1:
                    4d:d7:06:4c:be:42:89:9d:84:c9:87:51:65:1f:da:
                    8e:b8:06:8b:d6:b7:c6:cf:6e:74:a6:e8:9c:c3:57:
                    ec:cb:61:14:ad:83:4c:b7:db:28:62:7e:73:00:4c:
                    13:e1:11:d1:d1:75:88:9c:93:0f:7a:d4:38:08:54:
                    1c:05:a2:b4:4e:38:b2:13:4c:cd:80:77:bc:08:fa:
                    fc:35:cf:9b:8d:33:10:55:29:ed:cd:9e:a1:04:72:
                    18:30:d3:b2:a5:56:31:59:1b:e4:82:1c:50:21:77:
                    2d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EA:1C:18:6E:A7:41:FC:BA:D5:54:BC:07:72:A3:DD:82:19:3B:7D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6/554d5371-2bc4-4645-9f6e-22976d2fc4a6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.220.0/22
                IPv6:
                  2604:fc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12132

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a1:c4:11:88:38:b1:a7:de:44:c0:24:f5:8b:d6:12:e5:c6:
         e3:cb:91:72:b0:50:3f:e6:4a:b7:1e:84:a9:cb:03:3d:0b:1e:
         74:85:12:3a:52:ca:90:1a:64:3a:bd:4a:e9:f5:67:ec:c1:c9:
         15:55:99:b1:bc:58:60:8d:67:49:2e:be:d2:7f:1e:41:5e:e5:
         37:09:59:f5:36:ad:17:12:94:e6:ee:26:70:7b:c2:fd:74:03:
         bd:c7:1e:3a:c9:a7:44:8d:95:52:f6:f0:d8:43:ab:50:43:1c:
         b7:0c:64:0a:39:c9:ec:fb:ed:47:2b:d8:b7:18:c3:88:c0:72:
         b0:a6:a7:bf:3a:3b:d2:6f:6c:7e:1b:55:4a:82:e2:fe:12:76:
         12:a3:59:e5:18:b4:b6:cd:52:8e:47:a2:b1:19:2f:0c:fb:c9:
         e4:b2:77:de:39:ca:2c:a9:ef:a9:89:0a:a5:39:67:9b:26:57:
         5a:ce:59:ba:e0:84:f9:17:72:e5:7f:2d:c2:9b:4f:b5:0f:3f:
         99:0d:fb:c6:9a:e0:5e:d5:38:26:08:b0:18:29:ef:fd:75:e8:
         45:55:23:ea:d9:a8:3e:e1:14:05:59:f3:39:40:e4:8a:38:e3:
         32:27:45:7b:21:67:34:3c:7c:42:af:98:f9:55:58:20:83:61:
         a1:ff:3e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----