Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9017595-719d-4059-bffd-7812d56605ee.cer
File:                     e9017595-719d-4059-bffd-7812d56605ee.cer (raw, json)
Hash identifier:          czzEVYEhLHlugsHsgl6KfgiFPb2UYhqorV0h65ecuZA=
Subject key identifier:   02:58:8C:05:75:A4:E3:85:F3:CB:58:5F:4C:39:B2:70:AE:8F:DF:88
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858464D4F1B92BE0B474CB19B2300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9017595-719d-4059-bffd-7812d56605ee/e9017595-719d-4059-bffd-7812d56605ee.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9017595-719d-4059-bffd-7812d56605ee/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 23 Jun 2024 03:09:39 +0000
Certificate not after:    Sat 26 Sep 2026 03:09:39 +0000
Subordinate resources:    IP: 192.157.30.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:4d:4f:1b:92:be:0b:47:4c:b1:9b:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 23 03:09:39 2024 GMT
            Not After : Sep 26 03:09:39 2026 GMT
        Subject: CN=e9017595-719d-4059-bffd-7812d56605ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:ac:ee:99:5a:bd:8b:36:8c:d7:41:c2:a5:
                    57:45:4f:2a:b9:64:d7:79:08:47:44:af:1a:21:f7:
                    f1:dd:ff:c1:f2:51:7c:28:b8:8c:3b:61:90:16:01:
                    2f:c4:2e:04:a2:41:a1:1f:f5:02:62:d1:9a:d2:a0:
                    a7:3e:82:0c:73:22:0a:cc:02:47:96:01:79:18:94:
                    42:83:8e:54:16:aa:6a:a3:0b:26:0d:16:4f:20:cf:
                    91:8b:c2:7f:a4:4f:5e:72:ca:5f:fb:e7:75:05:b4:
                    bd:70:cf:c5:a2:ab:e9:a6:70:68:07:38:90:b6:7d:
                    50:6a:bf:74:ac:44:e3:58:27:c7:db:b1:02:67:60:
                    08:7c:61:0e:7d:73:ee:b2:b6:34:60:00:d1:2c:b2:
                    ff:f5:a7:79:86:f7:57:5c:7b:24:79:aa:60:9e:a1:
                    ec:06:4b:71:24:25:0e:8b:96:c1:b1:31:f6:6b:40:
                    dc:03:65:61:c0:09:fe:2f:1f:e4:1d:f8:31:75:ca:
                    fd:0b:eb:82:da:9c:f4:72:03:9d:9c:18:0d:37:d6:
                    54:c6:f2:f4:22:31:27:16:a4:fa:20:96:96:ce:e1:
                    ca:73:fa:5f:1d:2e:12:02:a1:7e:53:1e:37:bd:c7:
                    94:30:fb:04:24:0e:ab:e7:93:d3:3c:96:ad:27:cc:
                    ef:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:58:8C:05:75:A4:E3:85:F3:CB:58:5F:4C:39:B2:70:AE:8F:DF:88
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9017595-719d-4059-bffd-7812d56605ee/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9017595-719d-4059-bffd-7812d56605ee/e9017595-719d-4059-bffd-7812d56605ee.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:41:38:86:b7:ae:e3:39:ec:ba:f9:0d:76:6a:19:11:b4:04:
         bf:33:2c:b8:61:79:0e:e4:76:28:c7:f3:23:a9:ec:b1:5d:60:
         dc:ba:22:f4:cb:bf:fc:86:3d:d9:d6:07:dc:6e:b7:6f:a3:f4:
         4e:5b:de:78:54:9e:4a:c1:1f:2c:a0:8b:cd:38:55:f9:f6:ec:
         5c:1a:99:8b:1c:96:3e:f2:33:6e:07:fc:bd:df:87:ff:77:19:
         d0:e5:07:54:24:ae:c1:e0:2a:f0:2b:c5:f1:f2:49:86:dc:6a:
         97:2c:8e:4e:85:4f:6d:02:13:c6:fb:1c:a3:10:69:2b:8e:b7:
         87:79:cb:1b:59:87:c3:16:5d:46:dc:af:58:0f:b3:33:85:05:
         5d:76:f6:74:f1:65:cd:79:49:1d:ae:68:d0:9c:f8:07:44:a7:
         02:59:bc:19:49:a8:dd:61:96:76:b7:79:be:ca:b6:f3:ca:fa:
         75:24:4d:01:05:7e:47:c2:e6:e3:58:51:02:83:23:df:aa:4a:
         4c:2a:f0:76:df:49:15:73:2e:82:da:fa:95:1e:d8:28:c7:2f:
         34:ef:3e:e3:83:d5:6f:00:d3:1a:a0:5a:d9:9e:70:e3:de:97:
         0f:00:14:4e:4f:0e:5b:d4:e3:91:f6:aa:d3:09:8e:9b:35:a5:
         9e:c3:42:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----