Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer
File:                     900d3223-79ad-4ee2-af23-163d305bdd0a.cer (raw, json)
Hash identifier:          chbDrU4qjfGPcueCgOjhBoiJhzG4yBHQH8DsIAv+qhI=
Subject key identifier:   7D:D6:33:9D:D2:D7:AE:48:75:4D:EE:25:DD:4E:7E:D5:65:C5:3A:BC
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584722C2FF7A4B92EC67D8514380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 07 Sep 2024 14:10:20 +0000
Certificate not after:    Fri 11 Dec 2026 15:10:20 +0000
Subordinate resources:    AS: 13505
                          IP: 208.64.40.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:c2:ff:7a:4b:92:ec:67:d8:51:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Sep  7 14:10:20 2024 GMT
            Not After : Dec 11 15:10:20 2026 GMT
        Subject: CN=900d3223-79ad-4ee2-af23-163d305bdd0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:30:a7:4a:10:23:60:19:67:7a:87:93:8d:
                    f2:94:f3:b7:2e:3b:40:63:f2:0a:46:1d:c5:d7:9f:
                    84:9a:a1:83:c0:8f:5b:0a:b0:8c:ba:a7:f6:b0:11:
                    d7:6e:c4:3c:52:a5:fb:3c:d1:a9:63:4e:ee:19:a6:
                    b8:be:d0:bd:9a:0c:59:47:56:7b:0a:ab:d0:7d:a1:
                    6a:37:ea:1a:6b:bf:81:84:71:2c:27:e3:26:27:38:
                    71:54:b3:3f:36:f2:bf:97:c2:9d:1f:be:77:fe:e6:
                    04:94:04:39:ed:8f:f3:cc:38:0f:a2:a9:70:07:b6:
                    12:69:14:02:12:52:f7:03:ea:bf:42:34:c5:0d:f5:
                    0d:70:19:84:fe:d4:cf:aa:2f:8e:a4:d2:cf:0e:16:
                    04:1c:e6:8c:1c:4d:d1:a1:2f:68:87:4f:c4:9a:36:
                    45:b2:93:2e:6e:f5:b9:cc:fd:28:eb:61:1b:c6:fb:
                    91:c5:55:b3:05:89:71:2e:29:dc:e2:3b:a8:f0:c2:
                    c1:39:d7:7b:e5:83:82:4f:c9:30:63:fd:ad:44:97:
                    5f:47:90:d5:26:4f:44:bb:41:d3:43:a0:e0:7c:6d:
                    8c:a8:16:50:7d:06:14:e7:01:9c:af:75:21:fb:d0:
                    63:8a:cf:77:99:22:97:0c:53:59:34:bb:09:54:6a:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D6:33:9D:D2:D7:AE:48:75:4D:EE:25:DD:4E:7E:D5:65:C5:3A:BC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.40.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13505

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:b5:c1:c0:6f:00:8c:0a:2f:dc:3c:9c:ee:0b:3c:f4:ab:22:
         6e:94:a1:93:59:f4:d9:07:5d:9a:85:f9:c5:78:dd:4d:98:45:
         e4:2f:af:38:1c:44:55:b0:a1:df:98:02:84:cb:33:51:88:8f:
         0f:a4:f0:f9:77:48:d0:71:6f:a0:68:59:cf:fa:c0:ca:6a:67:
         e9:68:ec:48:93:81:10:e7:c5:de:7d:74:47:f4:c0:3a:c0:29:
         db:3b:75:ae:16:6b:23:af:d4:b6:94:91:dc:c4:c5:8c:cf:6e:
         2a:7d:0c:ef:73:7b:18:52:3e:c7:cf:1c:17:56:42:4b:56:39:
         4b:9c:d4:dc:4b:a0:aa:9b:a3:cf:94:11:92:13:8b:c7:6b:48:
         3e:d3:41:37:c9:48:43:72:3d:81:2e:7f:3d:94:dd:89:e0:e3:
         6d:28:f9:7b:cb:d9:ed:04:1d:3e:b8:e1:4a:34:23:a1:07:23:
         39:c9:11:47:66:a4:fb:90:92:43:9b:c4:b7:d6:cf:63:99:51:
         a8:89:b3:59:d7:5e:4a:fd:a6:55:56:50:43:2a:58:7a:1e:fa:
         53:b9:ce:90:95:f5:81:c7:a3:a7:ed:9e:a0:9b:b4:9d:fa:23:
         06:95:cd:ec:a8:53:c4:0f:db:5f:8b:e9:a6:9a:1d:6f:d0:82:
         40:81:7c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----