Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15.cer
File:                     d38fa32a-a6da-4615-8255-2c818c06ef15.cer (raw, json)
Hash identifier:          /91e06Jan2RM7h0w1YaOppZMDzEwtuJYM0qKLlFEIlw=
Subject key identifier:   B0:67:1C:77:5A:84:56:36:CE:B2:69:45:C5:6F:E4:A3:1D:07:07:6C
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858465437BFE31D58DC8CB6DF3E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/d38fa32a-a6da-4615-8255-2c818c06ef15.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 25 Jun 2024 14:33:15 +0000
Certificate not after:    Mon 27 Jul 2026 21:47:12 +0000
Subordinate resources:    IP: 204.107.89.0/24
                          IP: 2606:8740::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:54:37:bf:e3:1d:58:dc:8c:b6:df:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 25 14:33:15 2024 GMT
            Not After : Jul 27 21:47:12 2026 GMT
        Subject: CN=d38fa32a-a6da-4615-8255-2c818c06ef15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:44:8e:1c:20:91:30:62:20:dd:87:c5:99:fa:
                    99:6a:87:73:bc:b2:45:9a:f7:2c:47:6e:2a:39:80:
                    7f:34:2d:52:a9:1c:d3:fc:35:91:98:82:de:62:84:
                    39:2c:0a:a4:27:22:2c:10:53:f4:a4:0e:0e:fc:ee:
                    21:c5:ea:f2:7b:50:63:50:24:45:ac:6f:1a:01:45:
                    35:81:ec:1c:ef:80:02:81:ca:9a:da:91:46:65:96:
                    ca:30:7b:24:05:37:d1:e9:09:f4:0c:fe:92:cd:97:
                    d8:9d:4c:34:8f:1f:43:15:9c:c5:89:2d:69:d5:4a:
                    47:94:60:45:1e:5e:d2:bc:e2:b2:81:5e:73:7f:96:
                    fd:d8:fe:3d:72:5a:4b:38:0b:56:0c:29:1c:bd:7f:
                    af:41:67:fb:07:0e:75:da:4f:47:86:34:1d:b2:93:
                    08:84:63:78:ae:a9:6e:4f:76:bd:de:55:ce:fb:69:
                    d4:83:f2:1f:02:51:4e:e2:18:30:5b:0c:35:e7:4f:
                    eb:e3:94:4b:5d:07:bc:53:b4:be:67:5c:20:7f:74:
                    40:61:57:41:ff:33:ef:ff:72:79:75:27:aa:33:dc:
                    01:37:ff:1f:29:bc:2f:1b:cf:44:71:44:02:f1:c2:
                    e3:11:ba:fb:a2:7d:51:d0:61:e5:cb:a3:26:07:12:
                    64:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:67:1C:77:5A:84:56:36:CE:B2:69:45:C5:6F:E4:A3:1D:07:07:6C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/d38fa32a-a6da-4615-8255-2c818c06ef15.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.107.89.0/24
                IPv6:
                  2606:8740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:61:92:b6:13:56:4a:40:0a:d6:15:5a:d1:77:d9:1d:f5:68:
         7a:bd:70:b6:72:ae:4f:28:c3:31:b8:b2:53:0e:42:c5:a6:ff:
         03:db:fd:e1:f9:e4:4b:e0:1e:cf:47:d1:db:1d:08:64:39:19:
         88:5a:20:f8:c4:78:3f:03:b3:ab:e9:cc:36:7a:e8:da:aa:fe:
         fd:06:7d:42:43:9d:d0:cb:9f:49:08:cd:80:87:15:1f:4e:25:
         7d:c3:42:5b:97:0c:82:63:08:50:68:cb:bb:28:89:2a:e2:44:
         32:9f:f5:02:93:3f:e8:fe:ae:8c:a1:f5:fe:69:22:8c:96:f8:
         10:0c:92:9f:0c:f2:61:d9:8f:7e:53:ef:60:72:ae:26:11:55:
         a8:b1:0c:17:57:3c:ed:5b:8b:46:4f:ce:e0:5a:55:37:03:4b:
         f4:47:09:82:8f:b3:4d:16:e7:10:4d:96:56:f5:38:bc:5e:63:
         26:a8:32:92:e5:cc:41:2d:fd:46:d8:6c:39:2f:bf:78:f2:6b:
         f4:f5:b2:af:db:66:88:d1:f2:4d:2a:a6:cd:b4:66:92:ae:b4:
         ad:1b:fb:29:a9:31:77:5a:90:62:1c:68:63:7b:9c:3a:e8:09:
         c1:f4:49:1b:3c:92:52:21:9d:1e:97:57:b3:08:ac:01:9c:59:
         cc:9c:92:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----