Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7f9b6ee4-2a84-4862-b045-c7beeb3d563f.cer
File:                     7f9b6ee4-2a84-4862-b045-c7beeb3d563f.cer (raw, json)
Hash identifier:          5f68thwY9SQDIEbdhngg21sDpssqRLK+ma8vjcbCH2s=
Subject key identifier:   11:A9:03:3D:CC:98:AC:94:09:6D:94:51:86:5A:0E:06:A4:FA:0F:23
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584643B118A2B21C7346F6EE23C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7f9b6ee4-2a84-4862-b045-c7beeb3d563f/7f9b6ee4-2a84-4862-b045-c7beeb3d563f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7f9b6ee4-2a84-4862-b045-c7beeb3d563f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 19 Jun 2024 16:29:00 +0000
Certificate not after:    Tue 22 Sep 2026 16:29:00 +0000
Subordinate resources:    AS: 23118

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:43:b1:18:a2:b2:1c:73:46:f6:ee:23:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 19 16:29:00 2024 GMT
            Not After : Sep 22 16:29:00 2026 GMT
        Subject: CN=7f9b6ee4-2a84-4862-b045-c7beeb3d563f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:63:19:3c:b1:d1:a8:79:c5:9e:80:41:00:ad:
                    51:21:dc:20:ea:f5:d7:1f:10:31:60:4f:fa:a4:22:
                    f6:0e:2a:82:af:e0:26:9b:5c:e6:ac:1e:63:aa:c0:
                    aa:a8:1c:cc:18:e0:b4:1d:f7:33:0c:c4:5b:3b:e1:
                    5a:9d:92:9d:11:c4:0f:bc:ff:42:b6:bf:f8:18:b6:
                    20:37:6d:8e:2e:f5:c7:41:71:28:3b:1c:e9:1e:26:
                    a5:86:02:ea:78:fa:53:49:69:42:26:e8:60:e0:37:
                    43:42:df:8a:be:19:8d:e8:e9:92:2a:eb:16:1f:51:
                    12:07:fc:c1:da:2c:3a:8d:9f:ef:85:79:e0:93:ed:
                    88:fc:7d:ea:a1:32:f9:97:ee:de:6b:6f:49:64:1b:
                    42:a5:d9:57:a4:12:95:d8:9d:27:c8:9e:0a:ce:53:
                    fe:ea:4f:da:09:1e:24:15:24:32:0f:f5:06:03:2d:
                    01:a0:fa:e3:79:ca:5f:b9:a8:fa:e9:68:99:37:88:
                    fe:e6:1c:e8:86:28:00:58:ee:43:7c:61:3b:2a:e4:
                    06:6d:b2:f9:c3:2e:fd:c8:ec:08:76:42:21:2d:a6:
                    05:22:f7:63:07:e6:e9:ab:0f:73:14:2b:f6:b3:96:
                    51:35:35:15:d5:d1:c2:e2:81:75:ac:94:ff:61:08:
                    c2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A9:03:3D:CC:98:AC:94:09:6D:94:51:86:5A:0E:06:A4:FA:0F:23
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7f9b6ee4-2a84-4862-b045-c7beeb3d563f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7f9b6ee4-2a84-4862-b045-c7beeb3d563f/7f9b6ee4-2a84-4862-b045-c7beeb3d563f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23118

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:5d:e9:57:5a:b1:fb:f7:e6:6b:a0:7d:f3:03:96:c2:a6:80:
         97:53:39:dd:66:c1:d9:12:4f:4c:be:ad:39:2e:7d:bf:c1:dd:
         f5:0d:45:91:8c:60:ff:85:3b:47:9c:6c:d8:68:21:c8:95:03:
         98:5d:81:ef:24:70:00:a1:60:26:26:78:f3:74:c8:ff:1b:c5:
         93:7a:26:0c:ab:5e:79:14:87:60:b2:c7:3f:97:51:62:dd:34:
         9f:72:16:8d:0b:ce:50:0b:33:dd:4b:83:27:3d:73:cc:97:fc:
         57:64:2f:b1:30:14:86:c7:7e:c8:82:c8:bf:4f:a7:e1:b5:54:
         15:54:fa:e0:af:a7:a9:d6:ff:98:06:15:92:49:ea:72:a2:35:
         6e:1c:95:ca:99:65:e2:a1:b0:b6:f5:f6:be:4b:1a:94:fa:a7:
         3e:dc:fe:e2:bc:14:ad:dc:6a:d6:bc:fa:0a:9d:49:f2:54:90:
         30:1c:60:29:83:29:d7:df:4d:c5:6c:86:a3:0a:83:08:04:eb:
         c9:09:ec:3a:2e:b2:0c:2e:e0:73:c3:9b:4d:6c:39:9a:8a:c5:
         24:2c:0d:f1:f2:e1:30:e3:86:ec:57:95:28:ff:1a:a4:e5:ab:
         77:bc:2a:f9:51:c1:05:c5:a7:99:1e:31:88:41:8a:a4:08:d0:
         0c:40:54:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----