Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55cd10d0-11de-4ef5-82b5-f314d130fdba.cer
File:                     55cd10d0-11de-4ef5-82b5-f314d130fdba.cer (raw, json)
Hash identifier:          CTIiA7IRBoP+r06diYKC9EtABh781hqwdBhTEOpqo5o=
Subject key identifier:   F3:86:72:87:EA:71:2A:64:7A:19:46:AA:B1:2E:FA:F8:E3:DA:BE:BD
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858467E0284C6B1493783AD339B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55cd10d0-11de-4ef5-82b5-f314d130fdba/55cd10d0-11de-4ef5-82b5-f314d130fdba.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55cd10d0-11de-4ef5-82b5-f314d130fdba/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 10 Jul 2024 13:49:56 +0000
Certificate not after:    Tue 13 Oct 2026 13:49:56 +0000
Subordinate resources:    AS: 14658
                          IP: 206.208.56.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7e:02:84:c6:b1:49:37:83:ad:33:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 10 13:49:56 2024 GMT
            Not After : Oct 13 13:49:56 2026 GMT
        Subject: CN=55cd10d0-11de-4ef5-82b5-f314d130fdba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:cf:29:c0:95:0f:5a:12:59:e9:87:8a:86:
                    29:d5:cc:61:18:d1:e0:a9:b2:fa:fe:13:4f:2a:38:
                    67:c8:b8:9c:0f:cd:78:9d:10:b8:52:81:97:22:68:
                    fe:24:9c:c5:99:f8:ee:51:17:d2:d1:9a:1c:c1:31:
                    97:9d:25:12:1c:9b:5e:01:6d:fd:bd:09:31:41:02:
                    66:dc:10:1d:f9:ba:ee:c0:bc:43:b3:52:7b:69:aa:
                    c4:b6:4b:a4:f8:97:08:b0:fe:08:fb:af:91:5e:06:
                    1c:ae:ec:a8:36:d7:46:f1:89:f2:bc:90:7f:43:43:
                    98:15:cc:10:ff:51:15:48:6e:c0:97:ec:9e:85:6f:
                    01:32:4b:db:6b:30:da:aa:bc:ad:3b:86:7e:fd:33:
                    b1:f6:30:32:6c:77:e6:fc:33:bf:a2:9b:b1:5c:b9:
                    8f:95:2f:35:53:02:2c:ff:19:af:fa:33:1a:24:c9:
                    79:99:09:28:c5:e1:26:d9:9d:72:44:95:17:d6:2c:
                    34:eb:c3:57:35:0a:79:0a:7f:98:bd:e3:50:61:94:
                    ed:65:cf:c5:39:61:cd:fa:19:b5:04:dc:86:9f:5a:
                    98:38:d4:1a:4a:ca:c1:4b:2c:ea:be:65:c0:9f:2b:
                    e4:0c:59:2a:f5:f5:7d:6e:bc:c7:f4:7f:55:65:9d:
                    cb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:86:72:87:EA:71:2A:64:7A:19:46:AA:B1:2E:FA:F8:E3:DA:BE:BD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55cd10d0-11de-4ef5-82b5-f314d130fdba/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55cd10d0-11de-4ef5-82b5-f314d130fdba/55cd10d0-11de-4ef5-82b5-f314d130fdba.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.208.56.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14658

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0f:8e:6b:37:0b:7e:1d:e4:5c:0e:b6:b0:0c:f6:c6:af:29:
         55:19:1e:e5:b1:ad:aa:b9:3d:b9:6d:a0:0c:79:7c:65:24:6f:
         41:ea:d2:8a:64:86:81:9d:1e:48:c1:c3:ee:e9:09:7e:f7:9c:
         31:ae:cf:70:0c:31:10:0f:3d:83:ff:58:25:e7:d1:6c:10:28:
         d2:80:04:10:1d:d8:5d:89:73:d4:3d:f5:39:5d:c6:de:22:32:
         be:c2:4f:63:f0:de:14:3c:82:a4:95:b5:25:78:ae:3c:58:b5:
         e1:01:b4:92:21:b3:af:6f:75:fd:fe:be:c7:c9:39:c6:48:29:
         4b:53:ae:65:c5:ff:92:54:a1:a4:50:ae:d2:04:88:d8:18:b1:
         03:66:a2:aa:7f:19:db:72:2a:85:c7:a1:48:ab:9d:21:05:d4:
         3d:5b:a0:53:10:86:a5:e5:e8:98:85:16:20:26:28:b1:7e:8f:
         ad:e6:26:ef:8b:ce:8b:6b:7b:9d:82:5a:f2:37:e5:fa:59:9f:
         0f:b2:38:f9:6e:f9:52:ad:50:e4:e2:dc:e3:e8:4d:a1:05:12:
         a4:9d:34:01:f0:08:7f:7e:f3:dc:cd:0c:af:54:34:54:08:f8:
         6b:13:4b:64:bf:a2:5d:46:6b:4b:e5:6a:57:33:76:99:6b:48:
         ab:71:9e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----