Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664.cer
File:                     de70a194-124d-4ea2-9bff-570049254664.cer (raw, json)
Hash identifier:          08UbgKfH6Nvh9BtouUXAKxlGnt98puirkzkjxU1ob/Y=
Subject key identifier:   68:64:CC:E9:C9:59:C6:8A:17:EE:0A:85:A4:AE:B9:42:3E:02:28:E8
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845A30CA42B790EB7E9E5FD3700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/de70a194-124d-4ea2-9bff-570049254664.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 23 Apr 2024 03:28:18 +0000
Certificate not after:    Mon 27 Jul 2026 03:28:18 +0000
Subordinate resources:    AS: 399338
                          IP: 23.174.48.0/24
                          IP: 2602:fcbf::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a3:0c:a4:2b:79:0e:b7:e9:e5:fd:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Apr 23 03:28:18 2024 GMT
            Not After : Jul 27 03:28:18 2026 GMT
        Subject: CN=de70a194-124d-4ea2-9bff-570049254664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:54:e4:4f:25:d7:f7:43:26:d1:15:dc:4c:ae:
                    c2:44:7a:ef:4b:76:54:1a:80:c1:ff:69:88:5f:3f:
                    fb:04:bd:ae:81:11:e3:1d:1d:cc:e9:45:e8:6b:0c:
                    c3:8b:2b:6a:01:19:ea:2d:97:ee:3e:6a:a8:a0:b6:
                    87:f6:93:98:b1:13:69:79:45:21:61:36:ad:9c:b2:
                    ba:62:36:b9:b8:06:87:0f:c2:8e:b2:92:fc:78:f9:
                    01:81:f2:dc:66:42:32:61:8b:43:2b:c3:c0:fb:25:
                    ee:ad:19:f9:77:e4:a2:d8:07:d4:d0:37:59:98:e6:
                    54:3a:49:ef:39:68:f0:68:d3:e0:54:de:c3:05:d6:
                    8b:63:c0:8b:4a:5a:01:f5:21:1c:12:80:4e:94:25:
                    22:f6:44:d6:74:22:f9:f3:cd:8d:35:b0:aa:40:73:
                    79:f3:9f:56:dd:b3:b6:40:21:5f:24:7a:9b:e0:70:
                    59:ed:b6:b0:e8:9b:d8:aa:83:95:eb:5d:33:81:31:
                    c7:56:25:0c:ff:67:ae:b6:86:1f:2c:07:aa:c3:9b:
                    06:cb:57:0f:a8:78:1f:e1:d5:71:a5:f3:2c:e2:4f:
                    f4:26:71:1b:65:d7:39:eb:df:e2:1b:15:ad:db:bc:
                    54:4c:ee:d3:7a:3e:25:56:6d:0d:2e:54:de:93:8d:
                    19:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:64:CC:E9:C9:59:C6:8A:17:EE:0A:85:A4:AE:B9:42:3E:02:28:E8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/de70a194-124d-4ea2-9bff-570049254664.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.48.0/24
                IPv6:
                  2602:fcbf::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399338

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:04:ee:a0:ef:a9:7a:d7:83:1a:6e:b2:05:a5:3e:0d:01:28:
         4d:e7:5f:96:2b:25:97:b5:ce:dd:05:98:30:ee:65:f6:16:1d:
         05:2b:60:98:49:dd:17:10:da:aa:e7:c0:37:5e:cf:fd:07:1d:
         14:6e:de:cf:c9:ec:34:8a:e6:69:74:05:b7:15:9e:f6:fa:49:
         7f:fa:0d:1a:08:1b:3f:fe:54:90:c7:cb:0b:24:3b:4c:34:f7:
         d3:da:83:b1:01:c1:4c:f3:27:14:08:f0:f1:1a:1d:fe:ae:ca:
         70:78:52:fd:63:91:0f:89:fd:69:e3:d6:fd:5a:84:aa:2d:c0:
         a8:1a:36:aa:62:aa:02:5f:f6:d9:9f:cc:82:26:d7:c4:19:ff:
         b3:88:70:73:f0:81:dd:96:58:86:40:4a:0a:5f:b6:6c:b6:75:
         82:33:c8:ee:37:f1:b2:68:39:6f:b3:b6:f3:db:18:55:88:e5:
         8a:9f:cc:fd:a5:d1:cd:5a:41:1e:02:9a:16:63:bc:8b:22:4d:
         ae:7d:1e:e4:27:01:8b:f8:56:db:c5:e3:a4:54:f0:44:42:0d:
         29:52:61:f5:40:75:f6:bb:81:c7:c2:f1:db:17:0e:fb:cb:7b:
         37:9d:8f:7e:1d:dd:ed:1d:53:f8:69:48:7e:d0:22:35:cb:0c:
         ee:57:b1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----