Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e6bd2448-ef0e-4fc2-80ac-65edf6f68043.cer
File:                     e6bd2448-ef0e-4fc2-80ac-65edf6f68043.cer (raw, json)
Hash identifier:          Yzt9ahbJiOhfIIqv25tff6PHf5glMk0TnTsK+UuLyd0=
Subject key identifier:   43:E4:AE:6E:B3:AC:15:15:00:77:58:E8:C6:8C:43:18:60:D2:B7:29
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584665634F44F040A4C57A805F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e6bd2448-ef0e-4fc2-80ac-65edf6f68043/e6bd2448-ef0e-4fc2-80ac-65edf6f68043.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e6bd2448-ef0e-4fc2-80ac-65edf6f68043/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 01 Jul 2024 18:09:45 +0000
Certificate not after:    Sun 04 Oct 2026 18:09:45 +0000
Subordinate resources:    AS: 400261
                          IP: 64.94.86.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:65:63:4f:44:f0:40:a4:c5:7a:80:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul  1 18:09:45 2024 GMT
            Not After : Oct  4 18:09:45 2026 GMT
        Subject: CN=e6bd2448-ef0e-4fc2-80ac-65edf6f68043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:f4:98:aa:8a:cd:af:76:57:96:7a:22:e0:
                    31:7a:1f:98:77:7d:e7:cf:6f:4c:cc:b9:aa:e6:5a:
                    5c:83:fc:d2:b9:df:f3:09:ad:95:d7:41:54:2f:ed:
                    80:29:48:0f:fe:4e:ff:7d:1b:ec:c4:8b:83:61:30:
                    17:d4:c4:c6:81:55:09:1c:89:99:93:f7:a5:8c:be:
                    02:b1:20:ec:25:b1:4c:c9:dd:a8:16:0b:78:13:37:
                    1e:06:a6:0c:83:bd:7d:6a:fb:b3:82:13:e7:ad:37:
                    54:4b:3e:2e:a1:2d:f7:ed:c3:3b:2c:7a:5a:17:43:
                    fe:5b:5b:e5:2c:df:c1:a8:be:15:77:6a:ea:72:cf:
                    08:fa:2d:23:ec:89:72:71:f3:ba:35:d0:ca:fa:4a:
                    88:ad:e2:b6:82:c8:a0:11:4a:e0:75:2c:4d:32:94:
                    68:6a:38:0a:38:df:0e:48:ab:47:1f:dc:00:9b:22:
                    19:8a:6b:9f:47:f0:c7:9f:53:e0:21:bb:f0:91:47:
                    32:71:35:cd:6b:ef:ee:78:a8:ef:ad:02:ac:af:1d:
                    4a:4c:bd:cf:a9:e6:d0:10:0e:4a:06:b4:e3:ef:9a:
                    4f:4c:20:71:fa:7e:d6:b0:8f:8a:63:c2:2c:82:14:
                    df:5c:2c:d9:7b:52:e9:2e:b5:1f:11:3f:99:a0:46:
                    04:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E4:AE:6E:B3:AC:15:15:00:77:58:E8:C6:8C:43:18:60:D2:B7:29
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e6bd2448-ef0e-4fc2-80ac-65edf6f68043/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e6bd2448-ef0e-4fc2-80ac-65edf6f68043/e6bd2448-ef0e-4fc2-80ac-65edf6f68043.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.94.86.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400261

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:66:57:4e:f7:62:a0:ff:8c:79:2d:c8:12:29:f6:c7:a6:e4:
         b2:55:94:e5:27:7a:39:32:e0:44:65:1d:95:51:57:c8:1c:01:
         63:69:06:10:34:6c:56:b4:98:05:c7:15:c7:6f:a7:45:72:30:
         2d:72:c1:84:37:f1:65:10:d0:96:5b:da:40:64:37:52:15:57:
         e8:e1:72:d4:2e:e9:d3:ef:2b:2e:df:ae:c0:e6:34:ad:e1:1f:
         d2:a4:e1:ef:c1:5b:77:8b:54:eb:3c:31:4b:e0:ea:fa:94:ae:
         b4:08:24:7f:37:ad:bd:b1:ee:cd:e7:ae:81:fc:74:cf:0c:43:
         e8:fe:5f:90:ea:5b:e7:3a:d1:28:3f:a8:de:54:0c:f9:28:ee:
         38:30:ff:9f:c3:03:e6:dd:e9:5f:68:75:d0:ea:8e:0b:e2:e3:
         07:c5:8b:c2:d9:16:a7:c5:b6:35:84:8b:43:47:8e:d5:ca:81:
         a5:50:ad:fa:fb:bb:38:58:9e:39:58:d7:4c:45:f5:85:ab:5d:
         e1:19:ba:6a:02:db:d5:1e:31:97:49:ec:8d:5e:b2:41:b0:55:
         4e:c5:99:88:90:a4:63:06:bc:12:25:46:9c:3d:78:54:7e:70:
         86:c0:26:aa:0c:65:e7:b3:3d:a5:34:0e:a1:0d:04:94:8f:a4:
         c1:46:a5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----