Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987.cer
File:                     b511cf32-0933-4308-8981-9c296fc06987.cer (raw, json)
Hash identifier:          YMM6MRYMKWYI1qUsRvDzbICXyAkUovz4JURphN+e0uM=
Subject key identifier:   B7:63:09:26:C1:4A:FB:97:17:CC:67:FB:FB:6B:C0:FE:A5:E1:52:C4
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846B7480626CFC6B2E17AB9E300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/b511cf32-0933-4308-8981-9c296fc06987.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 31 Jul 2024 02:11:04 +0000
Certificate not after:    Tue 03 Nov 2026 03:11:04 +0000
Subordinate resources:    AS: 32995
                          IP: 23.137.160.0/24
                          IP: 2620:4d:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b7:48:06:26:cf:c6:b2:e1:7a:b9:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 31 02:11:04 2024 GMT
            Not After : Nov  3 03:11:04 2026 GMT
        Subject: CN=b511cf32-0933-4308-8981-9c296fc06987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:e8:ca:18:b7:ee:c9:ca:09:27:f4:e1:3d:
                    f3:66:71:65:12:4c:0d:f6:f6:23:20:0e:da:3c:44:
                    70:c5:50:ed:69:5f:98:92:b4:87:45:1f:8f:20:f3:
                    ba:cd:38:bc:60:5e:67:de:fa:f9:e9:a6:c3:d6:dd:
                    1e:30:2e:83:51:9c:cb:e4:58:f9:3c:a2:e6:8f:d5:
                    eb:f4:db:e5:42:9d:48:cf:81:27:15:32:1e:82:36:
                    a1:05:82:a2:84:c5:5a:3c:c5:6e:52:9b:da:36:20:
                    6f:53:8c:aa:d4:0c:37:50:b5:3b:ff:ac:34:07:34:
                    2d:a9:3f:30:90:b9:b4:72:bb:35:60:2f:b2:75:93:
                    eb:54:c1:37:8f:00:2b:a3:e0:68:4c:52:b5:7d:99:
                    00:09:13:15:2f:0d:6a:26:38:51:12:17:5b:cf:3a:
                    fa:d0:41:89:12:20:21:62:d3:92:64:11:69:27:2f:
                    37:1a:7b:e9:db:e3:73:dc:1d:49:36:c5:96:37:51:
                    dd:ae:e2:77:5e:f6:cf:c2:65:f0:61:2f:d8:bf:41:
                    2b:fe:8c:80:0b:af:e7:6f:c5:c5:00:d7:71:d5:db:
                    77:02:d7:2e:c4:78:a0:16:81:48:12:0c:ee:a7:4f:
                    ad:93:2a:cc:72:47:07:11:52:6b:4d:9c:09:1d:6f:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:63:09:26:C1:4A:FB:97:17:CC:67:FB:FB:6B:C0:FE:A5:E1:52:C4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/b511cf32-0933-4308-8981-9c296fc06987.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.160.0/24
                IPv6:
                  2620:4d:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32995

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:0c:94:a8:3f:22:8c:4e:da:49:97:88:a2:68:aa:b5:34:b6:
         2e:51:71:7e:ca:4e:eb:7a:67:76:62:71:57:2f:96:d7:b4:a6:
         e5:e4:c7:32:7c:29:8d:01:66:73:a1:eb:b2:a7:96:04:da:2a:
         4a:37:bc:9e:5b:b0:06:5d:6b:98:87:67:5a:81:14:f1:89:af:
         db:69:b5:b5:89:8b:53:b6:2a:39:56:d5:29:fc:64:43:72:16:
         34:24:2d:01:85:82:4b:ef:ef:cd:c8:ab:f2:a5:1f:fd:38:d3:
         0e:7d:a9:da:df:d8:23:9d:f3:ca:80:63:97:a8:f3:56:41:9c:
         77:77:ae:9d:9f:ce:6c:c6:01:9c:96:3c:d8:8d:5a:3b:2a:4e:
         c9:47:f9:9b:c5:f1:4d:7b:a2:07:51:6d:5a:e6:d1:45:a8:86:
         c7:28:71:32:cf:80:bd:3d:1c:64:5a:76:5b:e8:18:4a:b5:ea:
         c3:14:18:2f:67:3c:47:c9:c9:50:e2:31:62:f4:1d:5f:ca:4b:
         56:61:f9:17:cd:bd:27:11:85:ad:65:2a:94:7c:84:1b:c7:39:
         0c:ea:0d:12:88:9d:79:55:5c:e2:69:cc:dc:b2:f6:67:21:cd:
         f7:19:36:86:a2:2b:8d:6c:62:22:5e:b5:7a:2e:07:19:d5:0c:
         f8:b9:8d:1a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----