Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b.cer
File:                     d4090525-7aee-4e0d-b577-ad34aaf1da7b.cer (raw, json)
Hash identifier:          fqHkhTNVB0xL8iIgT9p41yLCNgwfXX5XLXEKFfBxcIw=
Subject key identifier:   4B:44:58:96:26:7B:96:69:81:7F:C9:A6:E0:A9:D0:44:3E:76:A4:91
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845EF50AB20B1E8A88856F2C7A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/d4090525-7aee-4e0d-b577-ad34aaf1da7b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 20 May 2024 11:06:48 +0000
Certificate not after:    Sun 23 Aug 2026 11:06:48 +0000
Subordinate resources:    IP: 167.253.136.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ef:50:ab:20:b1:e8:a8:88:56:f2:c7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 20 11:06:48 2024 GMT
            Not After : Aug 23 11:06:48 2026 GMT
        Subject: CN=d4090525-7aee-4e0d-b577-ad34aaf1da7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d5:8e:47:2d:94:89:10:fa:e5:29:85:b5:6e:
                    90:50:b2:b1:a6:5e:b7:08:11:3a:3e:a1:06:89:1f:
                    0e:9c:3d:6a:f3:69:fa:7e:a8:c4:2e:fe:40:df:09:
                    b5:9d:2a:9f:ed:5d:34:74:3d:72:a1:82:7a:a7:35:
                    0b:2c:88:e9:bd:b7:57:4a:02:52:18:f3:fd:37:31:
                    98:2d:d6:eb:7a:85:c8:b3:45:08:ff:75:6c:f6:82:
                    a8:2c:82:b4:37:3e:04:e6:c5:81:b9:08:c8:ce:71:
                    58:15:c2:ee:5e:d7:ce:e1:8a:d7:16:0f:3b:7f:24:
                    81:1f:29:4a:04:40:3e:ee:ca:2b:be:d7:02:43:d3:
                    bb:96:0e:68:e3:c3:77:0d:6e:49:15:03:b8:c3:79:
                    8f:10:0c:80:41:81:0a:a5:a3:a9:e3:cb:dd:24:30:
                    cf:9d:83:76:66:96:40:86:d8:c5:8d:85:f7:4f:48:
                    d0:39:50:36:40:8e:8b:4a:4e:70:d0:18:70:e3:03:
                    f6:a8:9b:78:a2:bf:04:81:ae:fa:50:d3:fe:4a:8b:
                    fe:f3:2f:5d:56:53:24:5d:bb:cc:a0:72:22:cd:9b:
                    fa:b2:bb:52:de:f8:4b:17:9b:86:98:eb:a7:09:69:
                    d2:c7:d7:99:3c:5b:43:cb:70:78:10:ed:81:25:fb:
                    f5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:44:58:96:26:7B:96:69:81:7F:C9:A6:E0:A9:D0:44:3E:76:A4:91
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/d4090525-7aee-4e0d-b577-ad34aaf1da7b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:93:ce:80:cd:86:92:10:2c:ed:0e:44:b3:68:12:19:7e:ca:
         cd:71:a5:55:93:b6:92:ce:60:04:6d:17:ae:b3:08:d6:c9:b3:
         ae:82:58:3e:58:0f:e1:0d:08:e6:4c:42:dc:63:19:e7:32:d2:
         b1:33:6a:07:ac:b9:28:4d:d1:82:b7:3a:86:fb:ca:a6:4f:33:
         65:59:b6:0f:c4:aa:42:31:f3:1b:55:8c:cf:7f:f4:91:a7:29:
         ec:3a:c9:c2:de:aa:c4:77:1b:33:53:3e:de:2c:f0:55:23:cf:
         77:dd:1c:b0:32:05:55:cc:8b:72:31:c3:d8:ca:9b:ee:d8:ca:
         dc:68:89:51:d4:41:69:76:b2:31:5f:b7:54:cd:4a:63:a1:48:
         97:53:1b:f5:f4:80:0b:2c:99:04:00:fa:a6:0b:48:76:8d:0b:
         8b:0b:95:6c:3f:9c:65:a9:a1:29:9f:ca:0a:39:df:bc:d8:62:
         bc:ed:5c:b2:04:57:36:98:41:e8:68:35:9a:36:8f:4f:bf:8e:
         e3:a2:db:04:aa:9b:42:4f:88:f0:0d:18:20:53:ff:01:9a:7b:
         5e:22:55:24:75:13:c7:6c:a9:e2:15:8d:f8:14:fc:6b:b8:91:
         a0:8b:f4:b5:a5:ea:9d:6b:36:54:c8:96:ee:1d:6a:8b:31:18:
         96:24:c2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----