Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e245cff5-7032-45c2-9463-fce67888b2f7.cer
File:                     e245cff5-7032-45c2-9463-fce67888b2f7.cer (raw, json)
Hash identifier:          DlmFnZL/UjCWimRfVIwXoGF/2W2+Ehir6JwEd3y/2VU=
Subject key identifier:   88:A7:7F:D6:97:C2:9C:95:80:0B:12:A8:2F:F2:70:C5:D0:01:E7:E5
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858460646AC953DA5B632AB77E8C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e245cff5-7032-45c2-9463-fce67888b2f7/e245cff5-7032-45c2-9463-fce67888b2f7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e245cff5-7032-45c2-9463-fce67888b2f7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 28 May 2024 16:30:16 +0000
Certificate not after:    Mon 27 Jul 2026 15:09:13 +0000
Subordinate resources:    AS: 55052

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:06:46:ac:95:3d:a5:b6:32:ab:77:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 28 16:30:16 2024 GMT
            Not After : Jul 27 15:09:13 2026 GMT
        Subject: CN=e245cff5-7032-45c2-9463-fce67888b2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e9:b6:d5:3c:2a:05:a4:0b:c0:10:90:e3:4a:
                    61:83:4b:ee:67:85:2c:e0:b8:b6:42:d2:6c:6e:da:
                    cf:ea:2d:1a:bb:1c:6b:12:15:6f:44:e8:53:fe:2e:
                    3f:83:e1:05:82:47:94:89:26:4a:4e:ca:dd:50:43:
                    37:42:1e:93:a4:b8:14:42:b3:51:22:c0:6d:9f:db:
                    30:9d:72:00:9b:8a:51:a2:f8:d2:fc:dc:19:14:bf:
                    99:ee:60:f5:89:af:40:f8:5b:91:3a:35:a3:35:2c:
                    60:c7:b0:06:0e:6a:af:72:80:ad:ee:d6:eb:c5:bb:
                    4c:ba:4b:53:a6:16:d8:61:d1:55:9d:08:21:a5:8f:
                    98:d5:1b:7b:8c:79:94:8b:08:b6:b1:94:ac:38:b7:
                    2b:d4:29:f4:7c:c3:07:34:9b:cd:d9:c3:16:76:ff:
                    2f:93:07:e4:0a:3a:35:89:a7:ae:61:4e:5b:41:3d:
                    a6:44:c0:dd:c0:5f:f6:08:f2:67:6c:1d:f2:4c:55:
                    6b:4d:a2:1f:92:51:a2:56:42:d5:73:2c:1d:69:f9:
                    f8:49:0b:27:6d:d5:c1:c1:cc:a8:2c:21:d8:ad:c6:
                    0b:88:3d:70:2c:e0:9b:c4:3e:37:46:bc:03:f8:02:
                    6f:9f:03:dd:7e:8b:e8:24:7e:dc:ad:4e:64:76:5c:
                    da:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A7:7F:D6:97:C2:9C:95:80:0B:12:A8:2F:F2:70:C5:D0:01:E7:E5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e245cff5-7032-45c2-9463-fce67888b2f7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e245cff5-7032-45c2-9463-fce67888b2f7/e245cff5-7032-45c2-9463-fce67888b2f7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55052

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:3b:13:37:33:18:96:a2:64:1b:95:fb:17:19:99:9a:1a:e0:
         1c:08:06:6b:7c:d4:a5:18:92:f7:8b:d0:73:f6:51:6e:c7:26:
         80:60:4e:72:c9:db:6e:a7:92:0d:3f:21:d5:43:ef:4a:23:aa:
         ac:b4:2c:98:89:4d:95:79:9f:e3:bf:9c:46:0a:ce:8f:0b:fd:
         1b:f9:6b:91:16:15:e0:f2:85:12:60:1a:70:70:43:c7:06:45:
         1f:99:74:6c:52:97:c7:21:d8:70:43:14:ac:60:79:9a:81:a7:
         0d:4c:ce:26:0f:10:1c:a4:36:c7:a9:54:76:54:97:5e:cb:7d:
         3d:d8:95:44:83:f1:6d:b5:4b:25:d0:36:a1:1f:6c:29:3a:d8:
         77:f8:0d:10:ae:a1:c4:72:d1:9d:73:a9:b8:0a:a1:ed:69:91:
         48:70:a5:fc:3e:d2:61:1e:ac:e5:c1:53:ac:9c:68:97:5b:2e:
         23:15:3a:a1:a7:c3:d3:3a:6f:96:45:34:6b:7a:3a:63:91:b2:
         8b:d4:08:90:c1:80:6c:9f:33:6e:5e:a0:79:f9:10:78:8f:4b:
         24:f7:dd:b1:7a:74:64:6f:5f:9c:4e:6e:8a:e3:94:2f:1f:b3:
         cf:2e:61:ce:ad:13:a9:10:21:ed:05:4e:a1:8f:9c:4f:13:b5:
         f0:61:f8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----