Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
File:                     7df054b7-0dbd-410a-8a6a-10af5728e84a.cer (raw, json)
Hash identifier:          M/gcZm6F5Si5cXaoJ6ulUFvoIMBryW7naroxkIe+Sjs=
Subject key identifier:   E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845B7AE6EAC714E31E92668A780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 30 Apr 2024 12:50:28 +0000
Certificate not after:    Mon 03 Aug 2026 12:50:28 +0000
Subordinate resources:    IP: 167.253.120.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:ae:6e:ac:71:4e:31:e9:26:68:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Apr 30 12:50:28 2024 GMT
            Not After : Aug  3 12:50:28 2026 GMT
        Subject: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:6f:81:72:65:07:ea:e1:8c:cd:1f:3e:22:
                    40:8e:c0:d9:75:a4:b8:3d:55:fc:dd:a4:a3:23:9d:
                    e9:35:10:5c:78:a3:0e:98:cd:22:70:ef:32:b9:73:
                    f9:0e:92:bd:4f:b6:5a:09:6a:84:c8:b2:3c:66:72:
                    a7:81:fc:92:fb:eb:4b:0b:0f:1f:3d:4d:65:57:f1:
                    69:d3:52:4b:8b:b9:b1:7f:e9:39:b7:31:41:9f:a6:
                    55:fb:69:99:0e:52:2a:30:63:cd:56:76:4c:51:2f:
                    64:d6:79:ad:ee:63:bb:91:83:ba:57:4b:b6:07:c6:
                    bd:3e:21:bb:6f:23:0d:fb:25:a5:1b:d3:51:63:e4:
                    70:fe:17:60:6a:09:36:5c:9c:6a:65:84:50:ea:ed:
                    88:bb:a4:08:0f:79:c2:27:0f:bc:57:97:2e:ad:7f:
                    53:f0:42:15:00:34:e2:36:a0:74:5f:ac:80:59:4a:
                    6f:39:e8:22:88:7c:80:39:63:73:11:2c:19:b4:58:
                    ad:4b:7f:f2:79:64:5b:c9:35:2e:da:5a:b8:ee:f2:
                    3c:77:59:94:62:5a:2f:38:b0:b9:07:3b:05:fc:15:
                    67:0d:0e:b5:b9:63:cc:5a:0c:eb:82:c5:b8:bb:93:
                    61:19:1d:35:11:e6:7f:d9:c5:6c:48:a5:3a:95:c1:
                    8d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:97:b0:c1:b5:b9:3a:e7:ec:8a:90:4a:ec:8c:0e:11:ae:3e:
         f4:f9:8e:90:0d:04:75:3e:d2:aa:b2:28:d0:9a:6f:02:c7:13:
         08:07:70:7f:8c:49:62:49:2a:fa:c6:36:35:9d:14:c2:85:39:
         72:07:1b:7e:f6:7c:71:f1:82:bc:a7:97:20:8c:a6:f7:18:40:
         12:9c:21:46:79:92:fb:4e:d8:5a:fa:20:ee:e2:63:75:0a:8d:
         a8:1e:8d:64:49:6a:fc:98:27:eb:da:d8:03:1c:bc:e6:74:ab:
         47:0b:04:63:db:cc:d2:08:c2:63:fa:95:8d:63:2c:da:a9:53:
         5b:c1:e9:8d:18:56:e1:8d:0c:a6:3e:2e:51:fa:7c:de:eb:10:
         f0:c6:5a:12:c6:cf:8e:69:93:32:15:f4:e7:98:7c:f5:62:7c:
         a6:24:f6:1f:f0:d1:79:e2:11:87:8c:6a:24:be:e5:b5:57:a3:
         e9:bd:0d:ff:cc:b5:d3:b0:a2:55:71:0f:cb:a5:fb:22:a3:ab:
         ff:6c:64:9f:72:5d:3d:fe:6b:ca:c1:10:37:7a:2d:f9:71:44:
         d4:c7:61:83:89:dd:fd:ed:30:6f:fc:7a:ff:bf:5c:17:aa:2b:
         89:ff:9a:5a:10:17:e4:69:e1:d9:a4:97:5b:90:f8:00:4b:d5:
         79:6b:5d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----