Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8.cer
File:                     90352753-4ed5-4805-a661-e3c0ff7bc8f8.cer (raw, json)
Hash identifier:          RTgxyW+WwiDlAulI9mm1KEqXFWH89EovldFPMm3ygEc=
Subject key identifier:   94:65:E6:E2:16:55:D9:00:51:A5:59:B4:7C:48:24:47:D0:7A:C1:1C
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845C8DE3C68C78EA0ACBF649300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8/90352753-4ed5-4805-a661-e3c0ff7bc8f8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 06 May 2024 16:35:31 +0000
Certificate not after:    Sun 09 Aug 2026 16:35:31 +0000
Subordinate resources:    IP: 167.253.152.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:de:3c:68:c7:8e:a0:ac:bf:64:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May  6 16:35:31 2024 GMT
            Not After : Aug  9 16:35:31 2026 GMT
        Subject: CN=90352753-4ed5-4805-a661-e3c0ff7bc8f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2e:60:ca:10:28:48:3a:4d:3d:29:39:b9:05:
                    d1:93:91:80:fc:ab:48:88:e7:e4:c4:38:c5:a1:ae:
                    30:42:36:52:f9:ac:0c:b7:58:bf:f9:7c:75:56:b4:
                    3a:43:f1:d4:b0:1f:eb:d8:f7:9a:96:fa:a1:6e:c0:
                    9c:31:7a:f0:25:27:48:74:bf:f6:c1:0e:67:19:7a:
                    35:0a:f4:39:7f:37:bd:3a:6e:04:00:7a:e3:6f:11:
                    a5:4a:a2:49:93:07:c2:75:95:1e:11:74:ff:f1:3c:
                    93:cb:de:54:15:bb:57:91:bc:d5:be:7b:43:2e:25:
                    06:71:9a:bb:b0:b0:74:f4:c2:ca:02:da:42:76:af:
                    7a:ea:99:7c:41:cc:3f:03:67:7c:5c:12:9c:39:ca:
                    1e:fb:1d:ae:ba:91:fd:db:ba:8b:49:86:7f:ce:68:
                    6a:3c:58:6b:a4:0f:58:00:3f:ac:53:d4:c8:86:97:
                    ac:0b:f0:5f:1a:1d:7b:4c:37:77:d4:97:77:c0:90:
                    93:9e:1b:ee:ad:39:76:53:05:03:b7:f2:0d:d8:99:
                    61:bc:7b:de:41:a8:41:9b:fd:35:9c:16:fe:84:79:
                    87:ed:23:fb:a4:ac:20:fd:02:1d:34:ad:94:48:10:
                    27:18:fb:95:f0:55:a6:fe:06:02:d2:bc:3c:64:5d:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:65:E6:E2:16:55:D9:00:51:A5:59:B4:7C:48:24:47:D0:7A:C1:1C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8/90352753-4ed5-4805-a661-e3c0ff7bc8f8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:7c:57:d2:8a:d8:fa:67:ca:ca:4e:8a:ab:77:c4:e4:02:8b:
         ba:12:3c:7d:01:09:12:7e:ff:33:30:fb:29:8f:f3:b7:5a:2e:
         3d:7d:11:60:78:12:f6:3d:97:0b:ab:f0:4b:b4:28:0e:db:72:
         22:69:a6:9d:01:be:bd:27:b6:8c:f3:f0:8f:d2:df:b1:a3:99:
         a0:ac:ca:cc:a5:a2:41:3a:de:e4:4a:97:6b:01:9b:cf:1e:28:
         5e:51:5e:39:3b:8e:7d:6a:3e:f1:c8:e6:cd:1e:ac:1a:e7:67:
         4d:6f:ab:ee:bb:69:be:82:84:26:a0:0f:ed:6d:f0:2b:04:9c:
         7e:b5:c7:3d:3a:8b:ba:c0:d2:14:aa:59:c4:03:5b:55:98:fb:
         94:40:92:b4:7f:da:10:e2:b2:0d:b9:a2:dd:52:3a:b8:54:1f:
         57:d6:fe:cc:ad:dd:28:95:35:70:19:69:35:28:10:f5:5a:c0:
         56:0d:90:2f:43:ce:6f:f1:85:7e:1f:99:77:a3:17:6e:8b:4d:
         f5:e7:ba:dd:ad:2b:26:af:ce:fc:54:ca:18:28:6b:5b:ce:da:
         8e:c4:a2:9c:e1:7d:10:29:9e:83:7a:eb:71:30:40:eb:91:94:
         f8:57:71:50:69:97:f5:65:a4:8b:a3:42:81:c1:33:cd:ff:74:
         0b:32:4f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----