Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer
File:                     a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer (raw, json)
Hash identifier:          ZLf/NDSwwa+z5PgmmU8AWiPO1sK2RF6d5Z/9Y4XXtuE=
Subject key identifier:   1D:F4:2A:89:4A:59:CA:55:E9:A0:4B:D2:42:19:39:B3:96:4D:FD:2F
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584666B9E6BB3B2C7266FE1F72C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 02 Jul 2024 05:40:02 +0000
Certificate not after:    Mon 05 Oct 2026 05:40:02 +0000
Subordinate resources:    IP: 198.202.208.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:66:b9:e6:bb:3b:2c:72:66:fe:1f:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul  2 05:40:02 2024 GMT
            Not After : Oct  5 05:40:02 2026 GMT
        Subject: CN=a9d1aa7d-7229-416d-9a39-f6403c48ccc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d3:73:2f:f5:97:98:58:a2:9b:d9:eb:54:4d:
                    21:45:b2:94:57:d8:0f:80:77:fe:7b:ca:91:19:31:
                    45:35:a8:13:a6:d6:9b:6f:d8:1e:b4:c6:2a:23:0a:
                    4f:7b:b5:85:d9:bd:5a:ae:a9:46:07:35:17:cd:7a:
                    ea:44:96:ca:de:97:29:fc:8b:04:f9:00:7c:da:9b:
                    07:53:ff:d6:4f:32:a9:9c:34:03:ab:39:6e:38:42:
                    02:33:54:7b:35:a5:7a:f8:ac:20:9c:44:37:7f:1b:
                    86:1f:27:a2:fa:4c:b6:15:5e:01:c1:27:c7:1f:4d:
                    19:34:86:c6:15:9e:73:75:f6:f5:39:b4:33:09:1b:
                    b2:bf:fc:71:89:0b:bf:ff:91:33:1a:1f:eb:fb:00:
                    e9:a4:32:2a:bd:27:81:a9:97:cc:ba:8d:cf:eb:64:
                    ea:e6:b3:95:dc:6b:8e:8a:2d:84:34:43:51:9c:36:
                    d9:6e:8e:12:32:04:23:b9:77:c7:15:55:3f:76:6c:
                    f4:fc:4f:92:ce:14:43:e2:ba:e1:32:a5:58:63:2e:
                    b8:9b:77:92:00:52:cb:5f:82:f6:0b:54:70:62:14:
                    8a:02:53:9b:c6:1c:94:d3:32:c3:21:4c:7a:27:83:
                    2b:f0:17:45:32:8c:d1:9e:22:b7:b6:83:f0:93:44:
                    68:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F4:2A:89:4A:59:CA:55:E9:A0:4B:D2:42:19:39:B3:96:4D:FD:2F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ca:8c:32:dd:b8:b6:7b:39:3a:e2:ca:e9:25:81:4b:59:22:
         55:4e:8b:e7:dd:1f:b2:58:17:08:b2:b3:1b:e9:38:df:3e:9e:
         6f:66:52:1b:e9:b5:1b:29:19:d5:d5:e8:23:61:6c:87:8e:f2:
         20:d9:73:d0:5b:72:99:dd:bb:ed:5b:e1:d2:7c:a3:d5:18:e7:
         b3:64:e8:28:2a:2b:71:de:50:dd:d4:7f:84:e8:6f:ab:d8:ac:
         18:73:57:35:2f:b1:03:d8:76:11:3a:e5:60:c3:62:54:ba:9e:
         9f:76:e6:dc:61:3e:c2:e3:78:f6:47:7b:78:b8:d6:9f:0b:42:
         e0:87:68:e0:c8:62:62:cd:5f:22:59:e8:c2:e2:b0:fb:17:db:
         38:01:c0:1d:91:f9:e6:df:af:9b:a3:70:8e:9d:2d:cf:b6:b7:
         8a:25:5e:dc:15:99:12:dc:3e:88:a6:8d:00:f4:51:bf:ba:f7:
         83:3a:00:73:18:37:82:b2:06:97:20:1c:93:b3:cc:59:9d:67:
         25:de:a4:bd:84:33:8b:54:8e:f1:e3:03:71:c6:20:bc:f9:c1:
         de:5b:ef:a3:f6:b5:30:51:79:5e:4c:18:0a:6e:d5:69:80:b6:
         ca:66:7f:1a:e7:0f:2e:1d:46:ef:f5:13:40:91:69:74:d7:e8:
         86:de:cc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----