Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2.cer
File:                     ac699a48-185c-4550-bdcf-e3cf55ab56f2.cer (raw, json)
Hash identifier:          Qb45bMq1dHQ9iBhccRkbQ6GJbUqNGZi+rc3LF5FSP14=
Subject key identifier:   D3:A1:36:49:AD:4E:5B:81:8E:DA:0A:92:E1:DE:48:AE:02:AF:91:49
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846025075D91382622DD0262B40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2/ac699a48-185c-4550-bdcf-e3cf55ab56f2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 27 May 2024 06:26:45 +0000
Certificate not after:    Sun 30 Aug 2026 06:26:45 +0000
Subordinate resources:    AS: 399803
                          IP: 23.188.144.0/24
                          IP: 2606:7ac0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:02:50:75:d9:13:82:62:2d:d0:26:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 27 06:26:45 2024 GMT
            Not After : Aug 30 06:26:45 2026 GMT
        Subject: CN=ac699a48-185c-4550-bdcf-e3cf55ab56f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e0:d6:87:95:37:94:be:5b:48:72:3f:41:f8:
                    f3:f5:57:4e:db:86:ec:63:89:25:1d:f0:a9:e9:99:
                    4e:33:dd:65:2f:18:8c:d6:d1:68:4d:06:30:a3:ca:
                    84:10:a0:77:b2:d9:f1:5d:3d:6b:ec:9f:b9:8d:1b:
                    d5:e4:18:a6:68:6e:07:5a:1c:b3:da:85:e9:e1:0f:
                    5f:b4:f5:f9:e9:85:31:31:62:8f:fa:37:1c:34:c9:
                    53:82:ad:45:53:33:95:12:66:e8:b2:ad:cd:83:89:
                    7e:4b:9e:ec:ce:9e:e3:0a:0c:ed:f4:44:28:2d:f1:
                    91:ef:6d:61:97:43:a7:f2:b7:6e:3e:87:bc:d8:92:
                    5a:af:a5:6c:b5:37:5f:a6:d2:7e:75:c0:a8:9b:39:
                    e7:8f:6b:c5:1a:7d:78:44:17:fc:20:2a:34:22:8c:
                    b9:0c:4c:59:a4:e6:7b:b2:e1:3f:62:71:0f:42:29:
                    76:77:6d:fb:d3:b3:6e:83:27:36:00:c2:4d:61:8e:
                    bf:02:1f:2e:f2:69:92:b2:63:77:0d:ef:d5:da:89:
                    00:d6:d9:3c:70:2d:54:6e:8f:e9:1b:14:68:8a:89:
                    28:f0:3d:63:83:67:d7:1e:2d:95:52:e5:82:10:f4:
                    67:22:f5:84:93:c5:b8:6d:1b:c5:1a:4b:d1:a2:f1:
                    38:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A1:36:49:AD:4E:5B:81:8E:DA:0A:92:E1:DE:48:AE:02:AF:91:49
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2/ac699a48-185c-4550-bdcf-e3cf55ab56f2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.144.0/24
                IPv6:
                  2606:7ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399803

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:68:17:38:89:ae:60:c5:a2:46:87:47:d9:ed:48:fe:e5:44:
         c7:73:dc:61:98:87:97:f1:19:d6:27:fb:71:bf:82:b9:e0:0e:
         51:f8:8f:0e:fe:09:b5:33:5c:41:ed:f6:fb:6e:ec:1b:62:bf:
         b5:1d:7c:f2:6c:03:bd:87:70:2c:7a:d4:c6:7c:ef:f6:7b:00:
         70:46:8b:37:39:87:79:d7:92:b9:2f:27:c9:89:0f:30:08:d9:
         7e:0e:ca:61:52:ab:2c:ae:de:a8:68:97:48:63:15:9c:19:04:
         36:b1:e7:0f:29:3f:10:86:d7:b0:81:03:10:ca:84:54:23:75:
         80:f5:9b:03:bc:69:2f:df:a5:ec:6e:59:73:1d:ca:9d:15:07:
         0e:cd:b2:4f:65:e0:63:12:8a:ff:ea:d5:87:c2:4a:2a:d8:3e:
         de:44:f5:e6:45:71:df:00:a3:c5:58:e7:6a:58:66:2c:20:82:
         7a:3c:15:31:75:ad:21:18:e1:9a:56:3b:d4:58:9a:3f:48:31:
         2b:eb:b4:56:2f:8e:84:af:dd:89:bd:f5:ce:c4:78:89:29:f4:
         36:d0:24:29:32:8f:02:fd:a2:01:86:55:85:fc:61:9b:73:74:
         1a:15:b8:a7:d9:96:8b:5c:c6:76:cf:da:c3:d1:0f:b6:ed:32:
         ad:73:2d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----