Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7.cer
File:                     9206a173-a090-480c-96c4-8eb781fd02a7.cer (raw, json)
Hash identifier:          5eVdJh5I7cY9G4tE+thPpVGZmu2wzyZTjKub/zjGcvs=
Subject key identifier:   30:1F:D4:18:B3:BB:23:2F:A2:07:D4:1C:D9:59:D6:CD:4D:C0:6F:19
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584697254E636D3B8EFEBE438480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/9206a173-a090-480c-96c4-8eb781fd02a7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 19 Jul 2024 13:55:14 +0000
Certificate not after:    Thu 22 Oct 2026 13:55:14 +0000
Subordinate resources:    AS: 397972
                          IP: 216.181.104.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:97:25:4e:63:6d:3b:8e:fe:be:43:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 19 13:55:14 2024 GMT
            Not After : Oct 22 13:55:14 2026 GMT
        Subject: CN=9206a173-a090-480c-96c4-8eb781fd02a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:63:bc:22:05:3e:96:9a:98:7e:d9:07:e3:4d:
                    35:e5:cf:40:d2:ec:22:70:22:a0:46:5b:c7:68:cc:
                    6f:10:36:e2:e5:ec:5b:1b:08:2a:a3:0e:7a:bc:d1:
                    9e:1d:85:e7:8f:ec:50:33:e2:e6:cb:5e:40:d0:10:
                    69:e0:d0:23:35:74:2a:53:e4:3e:a0:de:b3:b6:53:
                    d9:f5:73:89:5c:cf:71:9d:28:23:a1:8e:20:19:6b:
                    de:87:0c:63:90:a5:a1:75:d5:ca:c8:55:9b:49:3b:
                    5a:81:b9:33:e4:87:7b:3f:44:c3:e9:b4:6f:bb:f3:
                    46:f7:c3:10:3d:c8:b4:f5:8d:de:d8:ae:c4:33:7d:
                    cf:21:d4:31:c1:f0:fa:39:64:a7:24:82:d8:7b:2f:
                    04:6f:7d:c2:d0:05:91:7d:13:80:3b:66:20:74:b1:
                    6b:fe:87:c5:6d:ed:35:28:36:91:c6:3a:89:c7:10:
                    e8:2b:a6:12:e5:b3:26:1d:0a:19:28:ab:81:1d:0b:
                    21:ab:c1:0c:7e:72:d6:96:ef:e9:74:b7:37:79:d8:
                    84:b5:cd:0c:4e:30:12:94:9c:99:71:9c:71:5c:f3:
                    ee:4a:e6:ad:79:81:ac:d5:da:f5:a1:42:6d:c4:2b:
                    a0:23:82:2c:b3:8b:e1:0b:70:60:3b:37:39:f8:f5:
                    37:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1F:D4:18:B3:BB:23:2F:A2:07:D4:1C:D9:59:D6:CD:4D:C0:6F:19
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/9206a173-a090-480c-96c4-8eb781fd02a7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.181.104.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397972

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:10:b9:ad:5b:71:e3:13:24:1a:0b:a4:6d:9f:ca:f4:a3:cd:
         4c:6b:20:c8:7d:7e:6a:c9:e5:34:7f:3a:d6:07:eb:2b:ba:61:
         a1:14:68:54:f7:d3:21:e5:95:eb:00:82:03:e1:35:50:f5:7d:
         f6:d9:58:86:6a:2c:ce:cf:e5:87:59:78:9e:00:96:8e:25:35:
         ee:fa:8a:c5:32:1c:75:36:e2:1a:89:07:dd:dd:1b:e1:3e:26:
         e3:3d:fa:ee:e5:ed:b5:0d:17:85:be:ca:3c:b5:74:70:b9:5d:
         dd:a5:b8:a0:c7:39:4b:19:66:1b:26:1f:fc:79:f0:1b:46:f0:
         14:5d:eb:57:47:a8:a1:64:b4:68:f8:71:db:d9:ed:0c:29:79:
         dd:ee:21:01:c6:de:82:54:5c:cb:60:a0:64:94:13:fe:e0:2a:
         e6:5b:66:8f:29:e6:47:3f:84:0e:a6:e1:a6:93:61:11:19:42:
         8c:ec:da:f1:6c:43:47:fd:ba:da:8c:66:32:42:d0:6a:13:90:
         45:56:a5:da:b0:42:be:c5:8b:75:ac:83:ed:4f:2a:d1:17:ca:
         13:bb:25:ac:d0:71:37:ea:50:c9:8a:e3:12:2f:47:9d:01:12:
         7b:20:3a:e0:98:1c:be:86:bb:54:de:40:86:9a:5d:2e:36:9b:
         7c:3e:f5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----