Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d.cer
File:                     7dc3020d-633c-4147-90a4-2daf4afdc33d.cer (raw, json)
Hash identifier:          xzmGQB4i5RnCJ9qaj73DAU1loaq/Z5pVtlaMoXhXVlw=
Subject key identifier:   1C:4F:8C:B2:CF:AB:FC:C4:D2:08:9B:7C:AF:0C:87:3F:0E:89:83:2B
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845A6E37B36AD4605ECD22EAC00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/7dc3020d-633c-4147-90a4-2daf4afdc33d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 24 Apr 2024 12:28:36 +0000
Certificate not after:    Tue 28 Jul 2026 12:28:36 +0000
Subordinate resources:    AS: 401024
                          IP: 2602:f910::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:e3:7b:36:ad:46:05:ec:d2:2e:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Apr 24 12:28:36 2024 GMT
            Not After : Jul 28 12:28:36 2026 GMT
        Subject: CN=7dc3020d-633c-4147-90a4-2daf4afdc33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8c:59:a2:42:72:e0:6c:4c:c3:dd:f4:ee:3a:
                    aa:9a:bf:b9:aa:78:ee:97:fc:91:f9:27:d6:4b:59:
                    08:01:a3:22:2e:65:b0:49:c6:00:cf:b5:99:84:01:
                    d4:df:29:eb:f1:f2:2c:01:54:77:c3:9c:b5:43:0b:
                    18:8d:64:c4:41:83:49:85:73:00:d6:65:2c:9f:4c:
                    7d:05:b6:f0:32:28:af:a7:75:fe:92:a6:af:d8:d1:
                    50:ef:07:11:9f:13:6a:b2:81:c0:a6:90:d7:38:e5:
                    1d:f0:49:15:55:9a:ea:f4:91:e9:ce:d7:90:fe:cf:
                    75:54:d3:44:64:3c:32:90:ab:63:3e:c1:4f:18:76:
                    6f:24:86:80:3d:3d:99:89:ee:38:1c:7e:3b:bf:83:
                    1c:9d:57:fa:c5:b1:a0:4f:76:30:fc:f5:5b:cd:17:
                    e5:46:46:13:d2:7f:31:88:8e:64:a0:11:f0:43:09:
                    49:b9:e2:25:60:c9:70:bd:25:e2:50:fb:30:0d:0e:
                    4d:28:73:a6:65:2b:87:f9:a0:02:66:10:00:32:6d:
                    c6:4e:69:53:e8:da:a9:26:a3:06:fc:87:b9:77:9e:
                    3e:d7:0e:f3:29:fe:bc:cf:17:90:45:54:77:6f:16:
                    0a:01:80:bf:17:8b:ce:12:e4:ae:5f:c9:66:f0:56:
                    24:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4F:8C:B2:CF:AB:FC:C4:D2:08:9B:7C:AF:0C:87:3F:0E:89:83:2B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/7dc3020d-633c-4147-90a4-2daf4afdc33d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f910::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401024

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:bf:b3:00:f6:65:07:6c:c7:b1:86:05:5c:1f:07:a7:97:4c:
         8e:5d:21:44:dd:9a:2b:5f:a0:24:71:84:7f:72:d6:d4:78:b3:
         2e:a9:6b:95:c0:81:bc:2b:e4:27:d9:93:49:53:ba:39:50:bb:
         68:96:a5:33:36:fc:db:8e:a0:42:6d:24:7e:f8:57:a2:ad:bc:
         07:18:3f:0d:b3:ee:ff:ba:18:47:40:c3:7d:db:b4:c8:7d:52:
         d9:f4:fc:fc:c0:55:25:da:52:be:6f:44:1a:84:40:58:79:bd:
         4a:49:98:17:21:00:f5:18:73:a2:7a:fc:b8:e8:1b:0d:df:bc:
         b0:2f:04:44:2d:28:fe:2d:51:65:02:c2:c0:09:7f:c4:a7:23:
         45:a1:cf:83:ba:0d:f9:10:3d:50:c0:69:fb:49:92:ae:c4:4b:
         3e:d1:e7:de:7a:b5:ac:14:21:cc:cf:b6:dc:73:b8:c3:d7:67:
         af:6d:d5:86:92:3c:be:c0:03:e5:73:6b:48:a8:1d:a5:c5:53:
         d0:ea:fc:33:54:be:d7:b4:37:8b:ce:5a:b3:90:12:eb:f4:8e:
         6c:b1:da:39:fd:f7:24:28:c3:cc:93:02:37:ec:07:5e:bf:e9:
         ff:99:00:e5:b2:8e:49:03:51:a6:1b:4a:0f:6e:38:09:c5:ff:
         91:e2:2c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----