Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.cer
File:                     c7036deb-a358-4ff8-8a2d-c51f0988c8a2.cer (raw, json)
Hash identifier:          gK3jh03hupJeYz9YWwttaBK7r/GIDT+H/UxpOeF1zOU=
Subject key identifier:   05:C6:11:20:66:E0:FA:5E:98:9C:8B:85:30:7E:E5:34:E9:0C:A0:8F
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845E313E707D2A0D3F58A951180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 16 May 2024 01:54:40 +0000
Certificate not after:    Wed 19 Aug 2026 01:54:40 +0000
Subordinate resources:    AS: 15126
                          IP: 208.76.64.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e3:13:e7:07:d2:a0:d3:f5:8a:95:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 16 01:54:40 2024 GMT
            Not After : Aug 19 01:54:40 2026 GMT
        Subject: CN=c7036deb-a358-4ff8-8a2d-c51f0988c8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a9:2d:02:cb:d7:d7:d0:e7:d3:d8:97:28:e9:
                    2a:10:47:72:67:fe:42:59:51:e8:e1:6c:8f:5f:f7:
                    e1:09:1e:7e:5c:f1:8f:d7:bf:d6:76:55:78:bf:7e:
                    47:56:40:b0:1c:80:32:bc:eb:e7:91:34:f8:cd:3f:
                    c1:5d:79:00:60:03:f7:25:e3:a8:79:41:72:fc:b6:
                    de:ea:df:ef:e1:c7:94:7e:81:17:69:e1:e8:eb:3c:
                    de:61:ee:f1:f1:a3:89:23:7d:72:dd:42:3d:61:07:
                    4b:40:a9:f5:34:4a:1f:04:ae:0d:75:1e:95:18:7b:
                    40:4e:90:83:62:8c:b1:4e:66:d9:3f:03:bb:50:6e:
                    24:92:7e:de:79:8b:44:94:5b:4e:41:cc:a4:b4:a5:
                    2b:69:c9:f0:8d:22:29:8c:75:23:5e:99:98:54:e3:
                    ba:43:fb:b9:6d:ef:73:3f:38:90:15:12:46:46:77:
                    88:ec:34:17:24:ed:37:b3:0f:84:68:95:cf:e5:da:
                    a6:d6:ee:90:32:62:d7:b4:dd:2f:85:b1:c2:eb:a7:
                    c3:1c:97:4b:01:19:7b:d6:6c:1b:90:8b:31:31:60:
                    76:65:26:76:5f:3c:9c:94:44:26:94:01:b3:a5:1a:
                    d6:ab:f3:82:02:56:6d:86:f1:44:94:54:0d:dc:bd:
                    46:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C6:11:20:66:E0:FA:5E:98:9C:8B:85:30:7E:E5:34:E9:0C:A0:8F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.64.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15126

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:09:9f:87:b4:cb:61:b9:d6:c9:c9:cf:c8:15:44:1f:8b:f8:
         3d:ab:16:11:ab:7b:2c:33:04:81:80:24:b6:10:37:1c:3a:aa:
         fd:f3:45:29:02:6a:e9:46:c3:69:ea:f9:73:f1:00:88:fe:9a:
         75:22:61:51:6d:89:e3:98:53:22:62:92:91:dc:5f:7d:d9:ce:
         63:3b:1d:06:df:bb:02:0f:59:f3:9c:9e:6a:8d:27:ec:41:32:
         18:1e:cf:63:72:b3:06:55:cb:4b:f6:73:e9:17:93:97:7c:67:
         de:a3:9e:7a:73:c8:03:74:e9:64:8a:cf:80:93:dd:e2:d4:b8:
         66:c3:78:9e:05:73:22:e4:76:75:06:d9:0d:a6:39:1c:93:de:
         0e:20:f6:b0:ca:2d:6e:b8:54:9d:cc:3b:f4:12:0a:bb:a1:3e:
         14:45:a5:b8:61:ae:27:c0:78:35:b3:01:fd:e2:a5:e2:fa:7c:
         2a:96:d8:02:3a:96:c0:23:b3:ea:fe:8e:61:59:01:8d:3e:fd:
         ba:f9:40:58:b1:e3:95:b0:a4:5e:89:ae:8e:7c:ce:c7:59:38:
         7c:f2:81:10:2f:c6:4f:3f:9d:42:2a:0c:96:8f:90:59:6b:1e:
         75:c1:a2:e1:58:51:82:12:69:86:ee:d5:7f:26:84:06:cc:d1:
         98:83:1e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----