Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer
File:                     8637a780-1944-4d75-b623-0c10c96f56eb.cer (raw, json)
Hash identifier:          9lnufRqYuqhj8UHqzynZA6LZGOfKXyv1tU4M6lgA7rk=
Subject key identifier:   97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846785300DD6D77419E6DCAA710
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 08 Jul 2024 12:57:15 +0000
Certificate not after:    Wed 16 Sep 2026 21:25:14 +0000
Subordinate resources:    AS: 401133
                          IP: 168.100.15.0/24
                          IP: 2602:f8a3::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:78:53:00:dd:6d:77:41:9e:6d:ca:a7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul  8 12:57:15 2024 GMT
            Not After : Sep 16 21:25:14 2026 GMT
        Subject: CN=8637a780-1944-4d75-b623-0c10c96f56eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:07:c8:3a:da:08:f2:45:ea:a2:d9:21:96:e2:
                    e6:20:07:49:1b:c0:40:6a:f4:4a:90:1c:88:d3:96:
                    1d:11:8a:aa:07:c3:6f:8e:88:63:7a:84:d3:5f:a1:
                    22:64:11:5e:8e:9b:6e:57:46:de:05:52:6b:eb:c3:
                    37:ec:21:be:1f:a1:8c:be:28:62:eb:7e:ec:4a:b0:
                    9d:bc:50:8a:17:81:f3:d6:79:ff:a6:3e:e9:bd:00:
                    48:da:93:e9:0a:c7:49:d4:19:9f:13:15:db:f7:ff:
                    92:88:cf:0a:b0:bf:e8:b1:ae:06:2e:ab:80:67:e7:
                    39:b9:8b:a2:f2:0e:f0:52:60:bd:b6:26:05:86:c9:
                    5a:95:c8:40:ad:00:b9:8f:5d:15:41:82:75:d4:5c:
                    49:0a:a1:89:50:a3:3f:8e:b3:9e:87:b0:2a:c6:67:
                    94:03:5d:0e:1a:d0:96:3d:01:24:f7:56:f3:69:04:
                    29:63:a8:a8:aa:44:ef:6b:98:08:f8:79:8b:86:4f:
                    ee:40:21:87:98:b7:87:1d:58:1e:68:32:b3:b1:c9:
                    c3:d3:a2:d8:e3:2b:f8:36:ad:ed:73:3d:6d:1b:ce:
                    84:dc:be:42:7d:19:f2:1d:0d:aa:f1:14:35:54:66:
                    39:39:d2:0a:46:ee:8b:32:d9:25:03:30:22:aa:57:
                    ea:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.15.0/24
                IPv6:
                  2602:f8a3::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401133

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:52:78:38:c2:5c:a9:ed:eb:06:bb:8a:20:5e:7f:d5:69:99:
         1a:60:35:89:d0:9f:65:2f:3c:98:72:41:c1:fc:6f:12:b7:7a:
         a8:b8:dd:be:52:20:6f:39:4e:62:b4:7d:b6:17:02:ed:2e:63:
         2e:22:33:d8:8d:5b:f3:24:76:6e:ce:94:bf:4d:ad:1c:46:ef:
         4b:c1:1b:ce:2d:c9:be:55:81:bf:8c:18:a5:d1:cd:cd:ef:89:
         eb:56:7d:9e:e0:fc:6e:d9:41:37:41:9c:d1:b9:73:0f:56:3b:
         7f:e6:f3:59:4b:09:65:17:8f:0a:c4:9e:3c:70:38:45:24:03:
         c1:82:10:70:30:a2:d4:3e:09:47:6c:7e:8b:79:ae:db:f5:06:
         f4:93:32:2a:6c:01:03:44:66:95:c6:e5:ec:b8:17:91:be:62:
         80:e5:1a:c8:50:6d:62:e2:53:e4:ad:b2:ec:ab:58:23:66:f0:
         43:1c:0d:0a:06:5e:f7:ed:16:c6:31:8a:55:51:9c:a6:e9:36:
         95:0a:f6:c9:35:b3:6b:0c:80:21:18:5e:bd:df:ea:f5:3f:fa:
         b5:62:21:d0:80:b4:b5:bb:1f:6d:48:9c:19:f7:90:6d:18:b8:
         4c:38:d2:71:9f:2c:7e:e9:33:91:f2:d8:88:75:af:58:c9:31:
         6f:15:db:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----