Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer
File:                     6a38b089-4bb1-4c65-837b-853a9a3398e1.cer (raw, json)
Hash identifier:          Wu1Ua3nZmeG9ufRS7EbFUreehl3fFkisDKO8IJvbJSQ=
Subject key identifier:   61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858467975A94F08008045EBB91400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 08 Jul 2024 22:42:54 +0000
Certificate not after:    Sun 11 Oct 2026 22:42:54 +0000
Subordinate resources:    IP: 64.49.0.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:79:75:a9:4f:08:00:80:45:eb:b9:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul  8 22:42:54 2024 GMT
            Not After : Oct 11 22:42:54 2026 GMT
        Subject: CN=6a38b089-4bb1-4c65-837b-853a9a3398e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5a:47:3e:ca:9e:9c:03:8f:be:a3:e2:02:24:
                    60:3e:ed:81:14:83:88:04:ee:7e:4b:2f:09:c3:2c:
                    ad:13:46:80:1d:61:04:f2:3a:ba:e4:a4:07:a3:8e:
                    c6:81:48:45:60:14:fc:31:67:60:94:b3:7f:e5:5a:
                    63:db:5a:72:05:b1:54:14:62:e7:a2:1e:b4:0c:4d:
                    79:c6:89:c4:a1:b5:3d:1b:3e:f1:65:b2:86:87:f9:
                    7c:c9:c0:d4:a1:be:68:3f:28:34:f0:85:aa:07:4f:
                    78:a9:12:fd:20:2c:96:1c:a2:63:e3:4f:1a:f1:77:
                    1d:f9:5b:ad:8c:44:4c:9d:70:1c:70:29:27:e7:50:
                    cc:23:01:c2:ea:e9:35:32:36:63:23:62:83:8e:fb:
                    c5:a6:c0:a2:34:db:a3:23:37:ce:7e:0a:d7:98:b5:
                    67:0b:01:45:8c:72:5a:c5:9d:08:e9:cf:d4:98:29:
                    ee:d6:92:26:04:ae:38:b1:65:f0:6c:d2:34:50:f9:
                    cc:cf:9f:a9:24:64:b5:e6:8b:92:0a:27:f6:6b:c5:
                    5a:52:94:39:87:3f:b5:ce:c5:bc:87:b7:b1:82:a0:
                    5b:ae:28:4f:1d:db:0b:aa:37:68:5a:35:27:b0:87:
                    18:a8:49:40:cf:04:6b:18:e0:54:ef:57:60:1c:f4:
                    a3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:38:ed:2f:03:71:b7:41:df:87:a7:6d:0a:30:27:3b:f2:1c:
         1a:ae:d2:b8:98:31:de:bf:92:37:90:af:db:22:16:a3:43:fc:
         88:1c:56:f0:73:99:72:42:83:7f:72:71:f5:10:3a:7d:c1:2b:
         d7:c4:35:26:d3:9e:cb:9e:06:a9:ab:2c:2c:1f:0e:52:e0:98:
         5c:44:8c:1f:c5:a9:76:93:4c:7d:68:c9:88:84:e1:60:86:47:
         75:f8:b3:83:8a:96:6d:24:76:07:a1:16:df:7e:cf:fb:22:3a:
         33:59:5b:b2:4f:9d:c1:e5:47:73:48:ce:79:a7:f0:82:8d:31:
         33:71:7d:bd:24:32:dd:84:ec:85:4a:61:a4:33:3e:9d:1a:c4:
         20:e1:97:c5:44:b4:27:37:f7:8a:36:55:5c:ad:90:87:0f:96:
         2e:fd:c4:21:b9:60:4e:f9:36:b8:a7:b3:a8:cb:21:82:d3:22:
         b5:28:7d:09:5d:e2:39:9b:8c:03:8a:3c:9c:e1:95:30:5f:54:
         00:ab:67:47:38:97:5d:2f:68:34:02:8d:07:9c:5b:73:22:ec:
         30:59:aa:1e:3c:48:e4:51:85:b1:ac:e9:92:ce:64:69:21:1e:
         d1:36:8d:44:bf:aa:dd:11:9c:de:bd:95:c4:77:54:72:26:46:
         34:02:7d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----