Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer
File:                     940078fb-65b7-4c74-922c-09f44f222b6e.cer (raw, json)
Hash identifier:          8paPQMBXPDKXT2dqvDIhm9A/bngvsPK0VJefaB0nYb8=
Subject key identifier:   45:F5:D6:A8:D8:00:E9:0D:69:24:18:70:88:48:D7:BF:CE:DE:FF:DB
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858463B12B82DEA7C064CACF3DEC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 16 Jun 2024 14:23:25 +0000
Certificate not after:    Sat 19 Sep 2026 14:23:25 +0000
Subordinate resources:    AS: 20317
                          IP: 2602:f8a2::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:3b:12:b8:2d:ea:7c:06:4c:ac:f3:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 16 14:23:25 2024 GMT
            Not After : Sep 19 14:23:25 2026 GMT
        Subject: CN=940078fb-65b7-4c74-922c-09f44f222b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d5:bd:61:d4:c9:f3:69:2d:a3:3a:51:dd:d3:
                    4d:f7:35:2a:f6:de:d6:8f:d7:50:40:82:7c:ad:b0:
                    7a:9b:ea:0e:d0:d9:ad:a1:d1:b4:90:3a:77:42:28:
                    9a:96:92:c9:7e:86:bb:e9:ad:00:df:c6:d6:81:e9:
                    54:44:11:db:d6:49:10:67:dc:69:34:a6:bf:53:06:
                    b5:ed:7b:d2:94:ed:12:d7:82:33:32:1c:c4:df:bd:
                    64:4b:a6:31:ce:3c:3c:45:bd:05:c5:07:5e:6a:88:
                    f0:3a:05:61:e9:b3:be:a9:15:2b:56:d7:45:a7:dc:
                    b3:53:a9:9f:ae:5a:a4:f8:3c:d8:a6:e8:69:d6:47:
                    30:a9:46:ec:62:ed:7c:59:41:00:f3:7e:5b:f5:92:
                    47:5e:fd:09:f6:bb:3d:bc:32:d9:ff:0f:1c:47:5c:
                    f1:35:4c:53:ac:5d:79:1e:68:26:96:ec:7e:90:0a:
                    ec:3e:82:3f:bf:e6:82:e7:dd:b0:19:fa:38:ee:fa:
                    fd:69:ad:ec:31:db:f4:c5:91:c1:8f:a1:0b:94:1e:
                    aa:e1:66:56:c7:88:02:d7:e9:25:ce:3b:32:ba:29:
                    bc:6a:33:9f:5a:c7:8a:54:20:08:ea:ce:20:28:c7:
                    af:8d:99:29:b7:35:d4:6b:84:3a:86:4f:38:8a:9c:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F5:D6:A8:D8:00:E9:0D:69:24:18:70:88:48:D7:BF:CE:DE:FF:DB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8a2::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20317

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:9e:de:d2:79:cd:36:d6:27:a3:c2:eb:00:f0:48:29:42:ca:
         0b:3e:44:e1:4f:26:55:e6:00:14:59:6d:da:14:94:64:40:dc:
         32:3a:18:fd:86:68:63:5a:57:d9:6c:e1:af:b4:42:2d:fe:fc:
         af:7e:4d:f7:0a:45:2b:23:b8:30:10:d8:6a:fb:63:ff:39:5d:
         2d:55:52:b8:9a:62:71:0c:2e:9e:ba:51:97:ee:c2:66:da:a0:
         69:0c:f3:5b:66:2e:3c:ca:eb:bf:cb:87:f8:a9:64:c5:3d:c4:
         57:1c:06:d0:0c:65:b9:1b:c0:7a:78:ea:d3:69:16:60:36:84:
         93:0b:b7:67:99:f0:da:7e:be:82:00:82:6b:96:e4:e2:db:6c:
         cd:10:4e:7e:d9:b3:c6:ed:1d:95:86:13:af:72:47:8a:03:d8:
         c7:75:c8:58:c0:9d:39:67:ee:ab:e1:e4:73:99:a1:ea:9b:09:
         f8:71:ed:a5:4e:e1:3c:40:3e:3c:e0:0c:cf:c4:de:84:ce:aa:
         ab:cd:d6:fc:d4:6b:1e:2a:b0:3b:0c:8d:64:34:e6:7b:14:01:
         cc:52:9f:1e:da:90:00:76:b1:98:79:55:ab:0e:9d:7a:2b:13:
         b9:1c:9a:18:1e:05:6f:cf:9b:d9:49:ed:e3:a5:14:ad:43:f6:
         d6:5e:c6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----