Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7263fa27-2b86-4731-a082-c7608afa2f75.cer
File:                     7263fa27-2b86-4731-a082-c7608afa2f75.cer (raw, json)
Hash identifier:          NfoLJRuC98iVm0Y8T6Lr3OXuOqm2/1ixpcILFUlEQeA=
Subject key identifier:   D7:DC:D9:E1:B4:21:CA:42:96:CA:68:FD:ED:19:1F:7E:5A:38:0B:6C
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846A2CC9DFBE52AA90178EF0280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7263fa27-2b86-4731-a082-c7608afa2f75/7263fa27-2b86-4731-a082-c7608afa2f75.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7263fa27-2b86-4731-a082-c7608afa2f75/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 23 Jul 2024 18:06:15 +0000
Certificate not after:    Wed 09 Sep 2026 05:57:16 +0000
Subordinate resources:    AS: 46829
                          IP: 23.184.88.0/24
                          IP: 2602:f8c0::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a2:cc:9d:fb:e5:2a:a9:01:78:ef:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 23 18:06:15 2024 GMT
            Not After : Sep  9 05:57:16 2026 GMT
        Subject: CN=7263fa27-2b86-4731-a082-c7608afa2f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:b2:af:bc:0f:6e:59:7e:99:fa:e2:88:8e:
                    e9:73:58:f6:63:15:c8:c9:eb:f9:6f:c1:c2:19:dd:
                    66:35:f0:3c:d5:80:13:01:99:7f:df:79:bc:43:7f:
                    1f:05:5f:08:29:73:59:0e:1e:da:ee:8b:0c:3c:03:
                    51:be:7c:30:87:9b:04:4d:bf:c7:ce:4d:c2:aa:a4:
                    db:81:20:9d:cb:22:ae:71:c4:15:72:7f:44:4c:8f:
                    16:86:c5:b5:01:83:13:f8:f9:61:73:ac:b3:06:8f:
                    0c:d4:d1:a3:80:4e:f0:8a:c1:2f:e8:8a:2d:22:31:
                    ab:6b:aa:34:6f:9d:e3:77:ed:80:7f:a3:d0:fa:41:
                    81:06:a3:1b:f8:2b:31:d7:f9:15:2e:86:6e:61:73:
                    2c:fb:c4:58:08:d9:ab:7e:17:e7:15:aa:9f:67:3d:
                    22:64:67:23:e9:fc:53:ee:9e:fa:8b:40:ec:5d:31:
                    3b:d3:55:a8:91:4b:65:af:9f:21:b7:92:05:f8:71:
                    c5:33:b5:5e:b3:07:df:c9:2e:a5:01:63:42:be:94:
                    46:db:f1:3e:55:ff:9e:91:a4:8a:d6:54:0d:e5:6d:
                    a4:08:56:3f:5c:27:9e:88:09:61:6f:92:26:6b:36:
                    de:fd:4d:2b:03:e6:b0:40:60:a9:36:73:1f:52:c0:
                    a1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DC:D9:E1:B4:21:CA:42:96:CA:68:FD:ED:19:1F:7E:5A:38:0B:6C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7263fa27-2b86-4731-a082-c7608afa2f75/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7263fa27-2b86-4731-a082-c7608afa2f75/7263fa27-2b86-4731-a082-c7608afa2f75.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.88.0/24
                IPv6:
                  2602:f8c0::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46829

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:e3:f1:e2:78:93:dd:39:74:11:85:e1:a2:cd:78:b5:16:dd:
         30:c4:1a:25:79:02:b1:fb:e9:5a:88:b3:7f:6c:e4:48:bf:db:
         8f:60:9c:d4:aa:c6:56:60:1f:86:14:43:a4:71:58:50:12:7c:
         f1:fd:b0:fd:80:e2:bd:1a:7e:93:b5:51:dc:e4:49:2c:5f:8e:
         32:8e:a3:5b:c3:fb:32:1a:90:74:8f:22:11:e7:14:81:ea:14:
         bd:4a:96:4b:88:10:92:46:3c:6d:d3:fe:a1:fc:e1:9d:fd:fb:
         3f:c5:58:de:ca:aa:9f:9f:5d:4e:7b:0a:42:dc:2c:76:9b:9a:
         2e:22:35:23:a8:c1:68:0b:55:f4:77:7b:f1:b7:8b:87:37:cf:
         5b:5d:21:e7:2c:1b:e8:b4:9d:fb:ed:77:7f:9b:77:e6:72:20:
         9d:45:4d:dc:1f:d7:f6:9d:94:f2:7a:f0:96:b1:e0:31:be:29:
         5a:39:3a:ba:6f:31:32:95:c3:33:c4:af:89:97:d3:8d:b1:18:
         9e:6c:01:0f:05:6c:5e:c8:00:de:53:a7:8a:ea:f2:ea:a8:6a:
         c0:49:7a:e6:72:77:30:36:17:0c:4c:f4:58:6f:cb:c2:5f:3e:
         20:38:cc:19:27:71:a8:be:bf:f5:83:a1:6d:dd:c0:51:a8:32:
         b0:4e:6a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----