Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6.cer
File:                     560494a5-3dff-416d-b8a7-cf5cad5f05f6.cer (raw, json)
Hash identifier:          mOvsHWjY1yQFM6bbQ4yzqiKzbRqgVHJF6wax0loHjk8=
Subject key identifier:   56:98:2D:5F:6F:FD:A8:FB:6C:BE:31:3F:18:06:D8:43:1B:C7:A8:B5
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858463E2887E25E39CEEE90E9AA80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/560494a5-3dff-416d-b8a7-cf5cad5f05f6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 17 Jun 2024 16:54:48 +0000
Certificate not after:    Sun 20 Sep 2026 16:54:48 +0000
Subordinate resources:    AS: 53309
                          IP: 74.116.252.0/22
                          IP: 2620:73::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:3e:28:87:e2:5e:39:ce:ee:90:e9:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 17 16:54:48 2024 GMT
            Not After : Sep 20 16:54:48 2026 GMT
        Subject: CN=560494a5-3dff-416d-b8a7-cf5cad5f05f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fc:37:24:29:ee:c3:c2:a0:ba:36:6b:5d:e3:
                    b8:b9:0a:91:8a:cb:35:39:b5:2e:81:d2:ac:13:0a:
                    30:67:d1:e9:c8:e9:27:e0:33:d3:0c:75:da:03:9c:
                    b0:00:a2:f8:5d:52:0e:aa:a8:6d:36:50:a9:01:25:
                    b0:38:32:30:9d:de:82:72:b2:b3:b9:45:dc:cd:d1:
                    a3:4b:76:6a:11:8b:1d:2b:43:eb:a1:3d:4a:27:2e:
                    5f:91:37:be:23:7a:39:17:83:46:da:fc:77:0d:f0:
                    34:2c:e3:a6:6e:0d:56:12:71:f1:92:12:64:6c:ab:
                    af:6b:ea:e5:21:e8:69:20:94:80:2f:06:a0:b5:4e:
                    93:86:0d:0d:47:97:b3:e1:26:ec:81:ce:d4:82:7f:
                    9a:6f:a1:9d:e9:5e:96:fe:92:0c:a6:c1:35:29:fd:
                    27:a0:82:7e:51:fb:19:cb:3d:86:e2:3c:65:93:b9:
                    46:a2:31:87:87:25:ef:2f:c4:8d:f7:be:69:f4:2d:
                    24:74:a9:de:c9:ac:75:43:ea:08:a8:a8:89:aa:6e:
                    da:68:af:b4:02:9c:9a:ee:22:8b:9b:2b:0f:91:83:
                    c5:fd:72:b9:27:54:7d:91:cf:fa:31:81:b8:c0:90:
                    a4:74:ad:82:37:72:6e:9a:a3:5a:52:99:0c:2d:df:
                    92:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:98:2D:5F:6F:FD:A8:FB:6C:BE:31:3F:18:06:D8:43:1B:C7:A8:B5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/560494a5-3dff-416d-b8a7-cf5cad5f05f6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.252.0/22
                IPv6:
                  2620:73::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53309

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:48:6e:7d:f4:85:e3:0b:21:79:9f:b5:c3:90:a3:83:83:06:
         41:39:81:62:16:40:54:6e:b7:c9:0c:38:ed:77:89:a7:e3:c9:
         8f:82:8b:98:9f:91:be:83:5f:99:e7:7a:1a:90:a3:a5:6c:d5:
         e4:d4:7d:83:a1:ed:79:34:94:57:fe:f0:e3:6d:8a:f0:22:23:
         ff:af:48:3e:f4:61:2d:2f:b4:22:34:c2:68:f0:79:6c:ec:de:
         c3:41:7f:4c:a6:d2:e1:8b:fb:9d:46:15:41:32:75:11:e2:cb:
         68:7e:28:e2:ce:01:69:ad:14:ca:ec:9d:48:60:62:c8:a1:93:
         3c:59:c2:07:b9:2f:5a:34:a0:43:db:5b:1f:3e:5e:fc:54:d9:
         05:11:12:6f:aa:88:65:19:16:61:a1:33:99:40:06:47:9e:1b:
         d3:86:49:5a:18:e1:ac:f5:64:9b:5f:3a:61:5d:a4:c9:af:80:
         db:24:a5:6d:3a:4a:60:1b:70:a0:84:f2:4a:23:5f:13:6a:c5:
         05:e0:81:63:dd:5b:8b:69:bc:39:2b:01:b9:02:d1:ea:81:a9:
         c0:38:e5:77:80:e9:62:8a:e2:e2:03:54:c6:27:2b:ba:1f:b8:
         ec:05:85:84:19:37:8f:8b:49:fc:a3:33:5b:d8:bc:fb:d4:3a:
         92:4b:5c:cb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----