Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
File:                     a9a8478d-2e70-4659-8d85-8edbac09d675.cer (raw, json)
Hash identifier:          Y5E0YDzsa2fKNSvAamr7/SJFw78d05YO7+a7lE1OlWc=
Subject key identifier:   77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858460618808632518E4C1A53EC80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 28 May 2024 14:57:14 +0000
Certificate not after:    Mon 27 Jul 2026 19:06:14 +0000
Subordinate resources:    AS: 27370
                          IP: 140.241.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:06:18:80:86:32:51:8e:4c:1a:53:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 28 14:57:14 2024 GMT
            Not After : Jul 27 19:06:14 2026 GMT
        Subject: CN=a9a8478d-2e70-4659-8d85-8edbac09d675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:83:14:0b:69:a7:83:a5:12:64:9c:e5:8f:86:
                    d9:b8:9c:46:48:6a:54:2c:f8:5d:47:f3:30:16:52:
                    26:02:1b:d4:2e:c3:19:ab:06:0a:a7:f2:e9:3e:51:
                    f5:96:ae:55:ba:50:b4:9f:ba:3f:78:a9:37:c3:21:
                    2b:77:f1:f8:24:cf:d8:6f:e5:bb:bc:98:3c:49:4e:
                    48:83:06:63:e8:1e:4e:b3:b0:87:4d:ff:74:6b:03:
                    cc:87:33:6b:e8:51:d6:be:88:de:b0:a5:e9:8e:69:
                    44:8d:3e:f8:d9:e6:8c:73:d1:c5:ac:47:17:0f:bf:
                    bd:77:17:2c:de:2c:5a:ae:f5:62:a1:a8:4d:0b:28:
                    46:d8:e7:80:c2:4a:72:c0:97:28:8c:2b:ff:69:f7:
                    46:db:e7:d8:9b:da:5f:65:62:d4:12:67:9f:a5:8b:
                    01:c0:a9:a4:e2:38:02:1a:33:bb:06:00:f4:d9:cc:
                    bb:5b:75:9b:e9:8d:b7:bf:37:a1:28:ba:94:ef:58:
                    7d:d4:78:d1:bb:e7:d2:78:11:5c:d3:c8:ee:19:c5:
                    95:50:24:f9:5b:d7:12:47:bb:6a:ed:dd:04:20:0f:
                    77:ad:2b:7a:3f:16:2e:00:a8:b0:4b:0b:b2:93:9d:
                    92:8e:c1:c9:ed:c6:a7:bd:54:5b:bd:de:84:3b:0e:
                    99:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.241.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27370

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:8e:9b:21:77:16:a3:ed:2a:d0:a8:11:6d:69:a3:a9:e9:c5:
         01:a1:e2:3b:0c:af:5c:c0:04:1e:eb:44:8e:f8:49:1f:56:12:
         b5:e8:ea:62:5e:56:fb:dc:d2:85:20:f1:53:ea:f0:d7:bf:f5:
         da:83:ac:12:05:0b:a8:65:dc:fe:83:e4:98:c9:6d:87:d2:25:
         d2:55:6e:e7:5a:26:59:b5:53:ab:4c:05:da:50:37:0f:a9:92:
         f5:8a:d9:19:ee:f7:02:0e:2b:b6:dc:7a:65:fc:2a:fd:c7:78:
         42:02:a3:83:f2:31:1d:76:f3:32:83:2b:8e:ed:51:a1:52:b0:
         8f:67:45:1d:05:37:87:00:96:9b:98:07:0b:87:a5:9c:08:7b:
         b9:2b:79:35:c6:60:95:82:99:0d:75:28:72:56:ae:16:6d:a0:
         63:38:ce:8c:e4:16:8d:ac:ac:2b:a3:f4:ff:da:c4:1c:a1:c9:
         92:3f:c0:df:14:82:59:41:18:c3:eb:1f:cd:57:0a:73:59:3c:
         cb:0f:08:e0:ef:5e:6a:0d:77:79:78:9c:65:73:41:cd:f8:cf:
         89:3f:e0:c1:51:54:49:4c:f7:87:c9:3a:b4:b1:7b:56:94:de:
         20:ff:03:c8:b4:6a:f7:86:7d:db:ea:94:d3:db:c9:d2:9f:17:
         e2:14:43:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----