Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
File:                     e2213668-8973-4471-a19a-d7e8374ada63.cer (raw, json)
Hash identifier:          rqV/UIzi1BH/NGf5zcvsQ/hJDmHk1+uh/vyV2K9KFnw=
Subject key identifier:   C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846597545E5C3EF95803A6A2100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 27 Jun 2024 11:36:15 +0000
Certificate not after:    Wed 30 Sep 2026 11:36:15 +0000
Subordinate resources:    AS: 22557
                          IP: 69.64.144.0/20
                          IP: 104.244.184.0/22
                          IP: 198.147.208.0/22
                          IP: 2620:115:3000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:59:75:45:e5:c3:ef:95:80:3a:6a:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 27 11:36:15 2024 GMT
            Not After : Sep 30 11:36:15 2026 GMT
        Subject: CN=e2213668-8973-4471-a19a-d7e8374ada63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:91:b5:75:b5:a9:38:75:e2:3a:c1:1d:f4:89:
                    db:c0:f1:18:72:14:75:a6:d3:18:4b:d7:95:40:a3:
                    8c:17:04:fb:af:60:eb:ce:3d:f2:2e:02:47:e8:af:
                    6e:2a:12:0e:e5:6d:e4:ba:51:cf:25:79:3b:70:81:
                    55:94:ae:3f:75:78:43:5f:7a:c7:60:0a:1d:51:e0:
                    52:6f:6b:82:cd:86:ad:04:1a:28:39:6a:5e:81:ac:
                    4d:77:c8:18:9d:d7:1f:74:99:1c:b3:c3:87:cf:93:
                    42:1b:05:48:8b:9a:25:cd:f3:e5:8e:ca:ee:5a:76:
                    4c:c2:94:17:e1:ad:26:3f:8c:c4:22:d4:4c:d4:50:
                    9d:75:84:94:74:ec:12:73:eb:bb:0b:dd:31:2c:29:
                    5a:9a:aa:f8:78:64:41:4f:b8:c6:a3:47:3d:88:dd:
                    56:2d:12:8f:e6:5d:47:37:08:0a:25:82:b4:09:9c:
                    b7:5d:79:bb:e3:8b:f3:bb:ac:fe:df:47:c4:6a:2f:
                    4a:de:2c:c8:1c:a7:d4:2e:3b:85:b1:cf:7e:23:47:
                    52:2b:d8:85:fb:68:77:48:11:2c:6f:a1:8f:48:20:
                    29:01:5f:a8:15:9e:4a:80:5c:ab:01:d7:9d:47:f5:
                    47:8e:54:aa:e4:75:74:df:bf:83:43:1d:89:ef:95:
                    7c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.144.0/20
                  104.244.184.0/22
                  198.147.208.0/22
                IPv6:
                  2620:115:3000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22557

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:36:db:95:c4:65:fd:40:08:a2:32:39:9d:86:8a:84:39:0e:
         63:0c:02:97:54:d4:87:db:33:31:de:79:20:70:68:97:9e:be:
         42:40:31:05:d5:e8:29:04:d7:0d:95:83:52:aa:61:d5:71:ef:
         20:fa:41:27:2a:75:80:1e:d0:7e:b5:01:f3:b0:f9:ac:aa:47:
         e0:00:46:ce:78:a1:28:f4:c0:06:76:ea:c9:08:00:71:bc:4d:
         e5:15:2e:09:20:26:37:74:42:c1:6f:5b:00:3b:e4:84:3d:a7:
         52:69:05:dd:7b:28:cd:a6:85:ff:2b:d3:61:61:e6:a2:1c:43:
         71:78:0c:a2:95:87:a5:c8:e4:41:a1:88:bf:80:bb:22:06:52:
         fc:11:52:ab:d7:0b:0a:5a:9b:aa:e8:8c:33:64:fe:3e:29:61:
         46:ce:c5:78:84:1c:3a:b5:17:b3:7e:3b:c6:d0:5c:5c:85:1a:
         41:2d:ad:c2:ef:06:a8:1b:95:31:3b:3a:0b:6e:fd:f1:97:88:
         e9:e8:8b:48:df:5c:84:7d:bf:d7:97:c9:ef:21:bd:8e:b1:71:
         ef:59:0d:2f:2b:65:69:e1:15:23:b6:34:31:fc:01:9d:6e:a5:
         c3:a3:67:4d:9a:60:10:9c:32:b6:53:b0:fb:48:a3:d7:b5:56:
         28:4b:3f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----