Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0.cer
File:                     c171481d-6579-4949-8249-70529ec0d0f0.cer (raw, json)
Hash identifier:          DD3THMh8yRz63eiRW2yFroRSKOINIPhXpKOQnTAK5h8=
Subject key identifier:   37:74:6E:72:DC:83:87:D0:42:29:6F:C9:D5:AB:F9:39:6D:B0:DE:DD
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858460897426C99261909A1470A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0/c171481d-6579-4949-8249-70529ec0d0f0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 29 May 2024 12:24:15 +0000
Certificate not after:    Mon 17 Aug 2026 20:16:19 +0000
Subordinate resources:    AS: 20332
                          IP: 66.84.84.0/22
                          IP: 2602:f8db::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:08:97:42:6c:99:26:19:09:a1:47:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 29 12:24:15 2024 GMT
            Not After : Aug 17 20:16:19 2026 GMT
        Subject: CN=c171481d-6579-4949-8249-70529ec0d0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3c:60:e9:05:a4:2e:55:9c:04:09:df:21:af:
                    79:22:63:20:a5:25:bc:0d:61:4c:8c:85:d1:57:66:
                    97:47:08:39:91:84:d3:1c:dd:c4:e1:a7:b1:16:8b:
                    a1:7a:aa:35:d8:f9:df:02:10:25:82:ea:78:ee:cd:
                    56:b4:34:1f:32:94:7a:1d:d5:33:18:e1:45:32:8d:
                    43:08:e5:82:53:6b:54:c7:20:2b:92:80:73:a8:d3:
                    ac:04:48:8b:56:67:2e:6f:d4:e6:75:2a:3b:f3:17:
                    e0:7f:82:fe:2f:bd:41:b9:a4:3f:62:e0:03:7a:93:
                    ae:56:8b:36:8a:fe:97:a4:db:69:a4:b2:c7:ef:22:
                    02:f3:95:69:c4:a9:f6:36:87:41:ad:f1:d4:00:8b:
                    64:64:45:8c:23:5c:74:f7:6b:ab:2a:5a:04:a5:d2:
                    c7:bb:e3:21:fa:85:12:b1:9d:3c:bb:24:e2:d8:b7:
                    24:b1:fe:e6:3e:ea:39:9c:fa:c4:22:cc:57:25:ec:
                    fc:84:51:3e:ad:e8:14:f6:bd:63:39:a3:d7:a9:0a:
                    7d:c8:d9:6c:d4:58:75:69:01:1f:c0:d9:9a:e8:50:
                    df:88:ad:ea:ac:9f:af:85:c2:d3:65:59:c5:3d:07:
                    25:ea:5a:e9:37:6e:35:63:66:94:e0:3c:a4:6d:8c:
                    fd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:74:6E:72:DC:83:87:D0:42:29:6F:C9:D5:AB:F9:39:6D:B0:DE:DD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0/c171481d-6579-4949-8249-70529ec0d0f0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.84.84.0/22
                IPv6:
                  2602:f8db::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20332

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:6c:d4:54:fa:65:2d:01:88:90:82:e6:c2:7f:0a:4f:31:11:
         79:f6:24:4d:ae:a3:fd:a5:8b:0c:84:6f:5c:0e:17:78:ed:2c:
         44:25:dd:70:8a:86:8b:46:63:88:14:ac:b0:1a:5f:80:9b:08:
         20:3e:9a:8c:bb:fa:07:e4:43:fc:b6:db:0d:e6:a3:70:05:01:
         38:9c:7c:41:65:68:28:86:bf:60:eb:58:74:8a:c9:a1:b5:8b:
         ba:a3:fb:ad:ca:03:e1:7a:4a:ef:40:53:be:b5:3c:41:82:f1:
         80:2c:0c:9e:19:32:38:ce:e8:c3:ef:7e:e6:43:59:4f:29:2e:
         52:3d:7a:03:0e:ce:e4:d8:d7:8b:9e:72:be:7c:81:ca:3e:cf:
         d3:5d:4c:82:d0:50:d1:2e:42:f8:14:4e:e6:6c:12:76:94:c5:
         0d:b2:9c:fb:eb:20:90:7b:34:37:54:24:69:6e:aa:45:43:bd:
         40:47:de:ea:0c:1d:75:7f:77:ff:c3:eb:0e:5e:ab:9f:a7:e1:
         7b:ca:71:0a:db:f9:c6:63:34:4b:e1:de:15:26:f6:3d:65:39:
         40:f9:d3:ec:2d:cb:87:8f:0c:47:93:58:49:bc:93:4c:57:20:
         ad:a7:72:c9:93:ba:6c:e8:96:34:73:15:f1:0e:4b:e4:7b:fb:
         fd:cd:ec:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----