Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer
File:                     6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer (raw, json)
Hash identifier:          cuG2/AfDQircGeSaSebIyad0taTPgadyFXKCigtMoxk=
Subject key identifier:   63:5E:74:0C:23:77:26:88:CB:B0:C3:FA:E2:01:3C:AD:7C:BA:E7:14
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845E18CDD90ECBF9CDC75D869C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 15 May 2024 12:46:47 +0000
Certificate not after:    Tue 18 Aug 2026 12:46:47 +0000
Subordinate resources:    AS: 400562
                          IP: 204.152.22.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:8c:dd:90:ec:bf:9c:dc:75:d8:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 15 12:46:47 2024 GMT
            Not After : Aug 18 12:46:47 2026 GMT
        Subject: CN=6dce3b9c-be94-46ec-85aa-d93ddfdd08e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e9:dd:71:a7:2e:37:1b:f4:3a:00:c8:66:72:
                    c3:07:79:2f:9b:e9:f8:0b:9e:d3:fa:30:58:c7:57:
                    28:8b:bd:d6:b8:1d:28:a2:6c:aa:0c:9a:ab:d4:9e:
                    8e:b5:75:52:9d:27:b6:2b:07:56:b8:b7:cd:48:86:
                    b7:5e:e8:a3:70:37:81:16:05:2d:0b:96:77:c8:c5:
                    70:fe:95:b5:cf:bd:34:62:80:97:ec:65:1e:72:7c:
                    67:05:e8:22:33:5c:7f:d7:d0:8a:f6:5b:d7:97:e6:
                    8e:04:6b:59:b2:da:e5:8a:c2:54:e8:4f:c6:a1:94:
                    02:2a:7f:23:b9:31:18:a2:f9:22:76:c1:8a:76:cd:
                    2c:01:23:cc:f3:4e:92:2a:79:c4:7b:21:37:ff:0b:
                    7e:1d:f5:5b:41:b3:f2:5a:c9:01:f5:0b:fa:d2:04:
                    a7:38:e3:65:64:0c:c1:e0:ef:4d:6f:0f:0f:77:89:
                    18:38:9e:a4:62:09:42:dc:75:90:8b:35:20:b4:a7:
                    79:08:d6:1c:d0:48:5b:19:18:c7:53:b7:6b:cc:18:
                    65:42:e5:6f:45:02:8c:0c:96:9c:92:14:55:2e:7a:
                    17:12:07:69:83:8c:ea:b7:d7:17:9e:c7:df:3b:f2:
                    c4:54:24:2c:ba:cc:bc:d3:78:1f:21:b4:1a:e0:83:
                    be:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5E:74:0C:23:77:26:88:CB:B0:C3:FA:E2:01:3C:AD:7C:BA:E7:14
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.22.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400562

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:6d:3d:5c:a0:7b:9d:5e:6d:33:89:b9:c9:8d:7b:1d:62:64:
         19:17:59:63:ae:0a:e8:b5:2a:97:d1:42:36:ce:62:5d:b6:84:
         de:22:8e:14:2f:b0:e5:bf:09:44:df:85:95:1a:2b:4b:ba:29:
         17:5f:86:77:b8:bc:6a:e4:85:de:f1:b3:b7:2f:bf:94:4e:2b:
         8b:75:b2:cb:2a:ac:5d:78:f4:fe:35:47:6d:b9:92:97:5f:b5:
         b4:9f:a2:3d:0d:f6:b7:7f:24:1b:b7:50:e3:8d:63:fc:64:08:
         ac:e5:74:84:2e:4d:a0:4a:e7:a5:4e:f3:a2:44:f2:1d:ff:21:
         ef:76:39:18:8c:0f:28:77:a5:83:3f:d4:08:fc:0d:13:fc:3f:
         a4:10:d3:5b:71:a2:b9:4f:7c:6e:6f:d3:61:92:34:78:c8:92:
         c6:c0:68:b0:cb:dd:ac:b6:2e:b2:7e:51:b3:8b:d1:4e:bf:d5:
         84:7a:60:b8:1d:6e:09:73:f7:0c:46:20:b1:10:0e:d1:23:6a:
         7b:cc:06:d6:37:11:47:70:45:f8:cb:1a:d4:fa:76:32:19:1c:
         5f:e5:cd:7f:7f:19:40:04:5f:c8:37:7f:a8:f0:1e:00:f5:1a:
         57:da:00:0e:fe:4b:65:df:8f:c6:44:5a:be:ed:30:ec:0d:8c:
         2e:19:8c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----