Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8924c74c-a53f-4076-b41d-b99a1028e4ee.cer
File:                     8924c74c-a53f-4076-b41d-b99a1028e4ee.cer (raw, json)
Hash identifier:          DYwxL31fZ18RvUqky3RBZC+A4etFmNbjWWOvngGgKrM=
Subject key identifier:   1B:44:7C:81:56:4E:E6:BA:2E:65:43:6C:E3:D4:62:3E:37:75:5A:11
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845A50658A8F752853768EDB960
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8924c74c-a53f-4076-b41d-b99a1028e4ee/8924c74c-a53f-4076-b41d-b99a1028e4ee.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8924c74c-a53f-4076-b41d-b99a1028e4ee/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 23 Apr 2024 20:27:14 +0000
Certificate not after:    Mon 27 Jul 2026 15:49:06 +0000
Subordinate resources:    AS: 394822
                          IP: 23.176.136.0/24
                          IP: 2602:f928::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a5:06:58:a8:f7:52:85:37:68:ed:b9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Apr 23 20:27:14 2024 GMT
            Not After : Jul 27 15:49:06 2026 GMT
        Subject: CN=8924c74c-a53f-4076-b41d-b99a1028e4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c6:63:24:3d:6b:d0:27:02:26:bc:22:b4:44:
                    e2:8d:0d:d8:6a:85:ce:88:e5:fc:75:53:b5:87:42:
                    c6:e4:08:cb:59:ec:e4:f1:05:11:54:51:26:67:38:
                    a5:84:01:31:f6:3e:b4:dc:6d:c7:8b:12:76:9f:7b:
                    d1:6a:65:19:04:bb:f5:e6:82:f8:5b:81:fb:82:a3:
                    c2:30:be:cc:72:ee:8f:85:5d:9f:be:d9:ea:38:a0:
                    02:be:5e:23:50:b8:d1:e8:f1:6c:95:b0:04:d0:96:
                    d8:b6:f6:9d:77:dd:13:13:68:81:2d:c0:ee:a3:88:
                    10:dd:43:2d:c5:1a:6a:49:89:ee:41:59:d1:9a:26:
                    2e:02:b4:2c:ec:60:98:6a:c3:78:7c:26:80:22:3c:
                    01:8c:7e:af:96:05:65:ca:79:2b:03:3c:c3:bf:7c:
                    5d:e6:05:db:e0:60:4f:81:4e:29:5d:5f:a7:fb:b3:
                    91:7f:96:bc:22:1e:38:fc:9e:4d:3c:fb:09:d2:ca:
                    31:da:a9:10:b9:fe:41:66:16:93:84:5e:06:31:83:
                    de:72:bb:1f:dc:8a:5e:8e:e4:14:13:f8:45:34:60:
                    3e:cb:58:63:68:ae:e9:d7:7f:a8:7a:b0:a1:d5:17:
                    6a:a7:52:5e:5f:47:df:94:6c:7c:0b:ae:de:20:f8:
                    d4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:44:7C:81:56:4E:E6:BA:2E:65:43:6C:E3:D4:62:3E:37:75:5A:11
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8924c74c-a53f-4076-b41d-b99a1028e4ee/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8924c74c-a53f-4076-b41d-b99a1028e4ee/8924c74c-a53f-4076-b41d-b99a1028e4ee.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.136.0/24
                IPv6:
                  2602:f928::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394822

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:30:9e:e1:6f:d3:77:76:b8:f9:d4:38:8f:7d:6f:e3:3f:36:
         e8:77:ed:97:92:f2:90:96:c9:46:85:43:0b:fd:eb:94:c7:fd:
         cc:f6:d6:e8:69:c4:f1:b0:20:1e:5b:60:66:03:9d:5b:b0:06:
         d4:70:b3:d8:9e:94:38:6c:82:32:62:f7:df:95:97:27:cb:a5:
         74:a4:d3:84:71:6a:28:b7:a5:ee:8a:74:97:f0:8a:c7:f8:da:
         56:ad:89:30:2b:45:06:e0:71:b2:d0:4d:8f:c5:a0:25:80:80:
         b8:02:8e:37:f2:d6:41:ee:64:18:80:2f:8a:ae:c3:23:4a:fd:
         52:13:68:44:20:15:e5:b2:c3:39:d6:ef:58:b5:77:fb:c8:ea:
         d4:8c:9c:2a:b3:93:d6:81:93:0a:a4:68:79:70:d2:62:0a:f6:
         be:d3:ef:08:fa:20:b3:56:32:5d:89:f4:07:70:53:c3:9f:74:
         ef:5b:63:40:b8:b5:17:a2:10:fa:b8:76:ca:b0:86:6c:79:eb:
         cf:58:8b:15:1e:9c:4d:fd:0e:4e:98:e1:ac:c0:ac:ce:b2:b2:
         a1:32:25:67:b8:cb:ec:bd:81:4d:9d:7b:cc:a0:47:91:47:c2:
         3f:b4:10:bd:72:5d:8c:c4:12:f9:4a:76:e6:61:60:64:36:da:
         d6:a8:b5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----