Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.cer
File:                     d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.cer (raw, json)
Hash identifier:          6UflT4RTm7JNBi2WmBBX6RI466CZXlRjcFPfFAGIkz0=
Subject key identifier:   C0:BB:76:5B:62:09:40:B6:EA:DD:1F:3A:6F:31:E0:70:96:2E:85:68
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845DD6F27CB6038BC26866525C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 14 May 2024 01:23:41 +0000
Certificate not after:    Mon 17 Aug 2026 01:23:41 +0000
Subordinate resources:    AS: 19885
                          IP: 206.214.160.0/20
                          IP: 2606:2c00::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dd:6f:27:cb:60:38:bc:26:86:65:25:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 14 01:23:41 2024 GMT
            Not After : Aug 17 01:23:41 2026 GMT
        Subject: CN=d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d5:1a:db:2b:d1:52:66:88:5d:3c:c0:6d:14:
                    d7:a5:41:44:70:15:05:76:68:4a:39:c3:16:b8:71:
                    0c:7b:ff:bf:59:f5:a4:d3:9b:f2:4d:30:7d:57:fd:
                    d7:a9:84:2a:d0:e4:c1:9a:83:82:d1:cf:d3:e9:c2:
                    2f:56:f2:7a:38:55:1e:da:99:5f:cb:ab:fe:e4:11:
                    87:74:4e:09:bd:d1:15:c0:ea:53:1d:28:63:5b:f9:
                    98:7e:ab:de:9f:83:36:5c:89:68:01:f8:76:d2:6c:
                    90:59:18:00:77:ce:04:37:6d:82:12:5a:5d:48:01:
                    4b:17:67:d8:f9:be:f5:0c:71:25:64:4b:55:91:cb:
                    bf:3a:92:04:76:b6:ab:48:38:04:08:b1:76:e0:55:
                    58:bc:d8:38:a2:7a:aa:18:26:8a:b6:e3:2c:55:2e:
                    a5:f5:85:95:78:87:f5:69:b8:bb:29:10:bb:8a:68:
                    6d:34:89:b6:eb:44:a3:9b:3f:d8:b3:3b:6f:95:85:
                    44:14:f3:c2:76:ce:d5:26:9a:ba:d6:f7:c2:57:8d:
                    1f:84:29:10:70:0f:84:02:53:19:ce:25:a1:f8:12:
                    00:23:5f:e3:9e:0f:e1:d9:8b:7b:08:14:e3:32:ca:
                    5e:8d:4a:94:17:7d:25:75:78:9a:ae:b5:81:fa:ca:
                    e6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BB:76:5B:62:09:40:B6:EA:DD:1F:3A:6F:31:E0:70:96:2E:85:68
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.214.160.0/20
                IPv6:
                  2606:2c00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19885

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f4:b4:12:d3:c0:f3:3d:52:8a:ab:bd:e3:13:7a:3c:00:4f:
         7b:55:eb:b9:ca:de:75:40:c7:a6:2c:9c:60:7c:e8:0f:1b:e7:
         85:a3:ea:ab:88:c3:6e:fb:42:9d:cf:60:33:5b:e1:65:a3:cd:
         39:dc:f1:2f:b0:15:f4:5a:8e:83:88:fb:2a:9c:27:d6:ff:f2:
         0a:d3:45:2c:c3:08:67:85:44:67:08:4f:4b:35:4e:32:08:06:
         3b:df:58:ae:4a:fa:2d:85:34:54:75:1a:fa:aa:42:3b:5d:10:
         db:25:d5:48:33:5d:09:9f:57:d6:1d:03:dd:9d:a8:77:b4:d4:
         5c:4b:fa:63:59:cc:ff:80:8a:9f:7b:ea:5f:73:8f:36:e8:62:
         a7:f8:e7:09:49:9e:e7:12:4f:6f:38:b6:5d:3f:f5:17:14:61:
         88:1b:6f:01:d3:5d:d6:4b:f7:39:aa:cd:ef:80:19:6e:a4:fd:
         36:ed:c9:79:d1:eb:05:f5:3d:16:6e:ed:0f:be:dd:ed:45:fd:
         2f:01:db:a8:e0:98:e7:fe:e3:aa:86:4b:f3:3b:0b:62:03:65:
         1f:ec:fb:1d:e4:db:f1:72:fb:33:ae:1a:1c:66:0d:fa:5d:60:
         fb:bd:d7:38:76:15:85:00:20:73:81:f9:f6:be:97:82:63:1b:
         d0:e7:ec:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----