Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3.cer
File:                     eb9c4fdf-96db-4874-8da5-2c10670d3aa3.cer (raw, json)
Hash identifier:          nndUu8tPtER/g0mGhUBmPtJBFlM1RTOHTE6iaj11WbU=
Subject key identifier:   E8:0D:66:3F:6D:1D:2E:31:68:59:6E:B4:68:F9:30:65:9C:F1:60:EC
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846757E968D6C994CD1B4B45E08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/eb9c4fdf-96db-4874-8da5-2c10670d3aa3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 07 Jul 2024 12:37:39 +0000
Certificate not after:    Sat 10 Oct 2026 12:37:39 +0000
Subordinate resources:    AS: 401202
                          IP: 23.182.88.0/24
                          IP: 2620:ca:2000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:75:7e:96:8d:6c:99:4c:d1:b4:b4:5e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul  7 12:37:39 2024 GMT
            Not After : Oct 10 12:37:39 2026 GMT
        Subject: CN=eb9c4fdf-96db-4874-8da5-2c10670d3aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7f:55:6c:a6:70:fa:26:6a:db:93:d0:2a:f3:
                    8e:05:c1:d1:fe:f7:10:40:50:78:9e:45:29:d2:c7:
                    d4:15:67:55:40:cd:73:78:0b:da:ab:e0:bf:05:31:
                    ef:60:10:1a:72:70:78:ec:d4:e0:44:b2:d4:36:ef:
                    c1:c5:38:c0:8b:18:6e:8e:ef:aa:81:0e:1e:0f:f4:
                    5c:32:a6:b8:84:7a:7b:c3:3d:16:e4:65:58:4d:f4:
                    01:df:56:f4:18:0d:2a:9d:c1:05:60:1b:16:f6:09:
                    e2:d3:68:ee:59:d9:c8:8b:f2:dc:00:56:82:39:36:
                    b4:c6:05:22:0c:03:2e:2a:d7:88:d0:bc:a4:d8:6e:
                    e6:d8:a6:a3:dc:e2:48:bf:d9:57:ac:4c:04:e9:e4:
                    6d:16:eb:f6:cb:94:78:26:6e:d4:9c:00:38:1a:05:
                    fc:74:d7:ce:1d:2d:e8:58:08:69:17:b5:31:01:68:
                    c2:49:9a:06:91:1a:4b:a7:75:36:bb:84:de:56:e1:
                    3f:be:73:9c:1d:88:ed:ea:47:67:ef:be:e5:1a:4d:
                    ca:ec:18:28:34:20:0f:b0:c8:9c:e4:8d:a9:38:59:
                    00:70:0a:ad:55:53:d8:02:25:17:19:d5:bd:12:09:
                    f5:9e:b3:83:53:6a:84:5d:8a:b3:03:d7:bc:b1:e3:
                    72:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0D:66:3F:6D:1D:2E:31:68:59:6E:B4:68:F9:30:65:9C:F1:60:EC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/eb9c4fdf-96db-4874-8da5-2c10670d3aa3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.88.0/24
                IPv6:
                  2620:ca:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401202

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c7:8c:1d:5a:8e:a6:09:9e:0b:4b:cb:3d:f4:ca:62:fd:f5:
         52:81:7e:98:d4:31:e5:61:2c:65:cb:5a:ad:06:39:4f:4e:33:
         93:d2:5a:d0:55:2c:0c:c5:c4:b6:7d:b7:33:8d:4d:b7:13:69:
         83:35:f8:c5:1a:02:5e:65:37:dd:78:f3:a4:72:37:a4:c8:76:
         52:58:53:32:e6:d6:b9:5f:1e:ea:49:f8:0b:e4:4b:2d:c2:23:
         56:ac:94:e7:f2:80:d3:d9:f3:20:cf:99:de:c1:bc:a8:cd:ad:
         c5:58:ef:1c:f7:34:6f:17:dc:a2:45:db:01:ca:bb:1b:dd:10:
         4f:d6:ec:31:65:fc:04:f9:66:10:5b:81:c1:64:19:da:24:8f:
         77:4b:88:e7:59:52:1e:d8:7a:5c:cf:41:35:4d:30:e2:57:52:
         bf:b5:fa:41:b1:38:7c:f1:8b:f6:f5:78:43:09:77:b0:55:cf:
         60:af:ad:25:ff:48:c3:dc:48:78:93:a4:47:6f:e3:b8:7d:6c:
         7e:ff:db:19:8e:ea:6d:d8:ca:54:ec:4f:d0:76:d3:10:dc:8a:
         7f:5c:c1:3b:12:2d:b4:39:cf:18:9b:34:c7:7e:96:6c:be:e0:
         43:fd:38:c2:36:d7:41:ed:86:e9:71:48:ad:d6:72:94:43:76:
         35:66:fa:db
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----