Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781.cer
File:                     f06bd477-b8a8-473e-9210-c25d8e9ee781.cer (raw, json)
Hash identifier:          mcXzkHOtWCcoLJVSJ8J6KNMX1C1gLgKqECtP7I9WaQQ=
Subject key identifier:   76:D6:95:68:D1:DB:93:A7:99:AD:19:56:A7:AB:9B:69:46:3B:70:30
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858468EFA5BAEA4DE30B9A7624F40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781/f06bd477-b8a8-473e-9210-c25d8e9ee781.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 16 Jul 2024 15:42:14 +0000
Certificate not after:    Fri 16 Oct 2026 01:03:21 +0000
Subordinate resources:    AS: 401248
                          IP: 149.105.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8e:fa:5b:ae:a4:de:30:b9:a7:62:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 16 15:42:14 2024 GMT
            Not After : Oct 16 01:03:21 2026 GMT
        Subject: CN=f06bd477-b8a8-473e-9210-c25d8e9ee781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:78:82:62:dc:c1:91:27:fc:ba:b8:b7:33:
                    11:d2:ef:7f:27:a1:ff:f3:1f:9e:10:7b:8c:51:b5:
                    a8:63:35:5e:21:4e:32:7c:e0:26:4f:cd:9d:ed:a8:
                    60:fb:51:1e:cf:e4:b7:37:45:0f:a5:77:8a:45:f6:
                    12:ce:6c:79:9d:49:cd:33:fd:bb:f3:f7:06:88:9f:
                    8c:8f:34:be:16:39:ca:09:6c:fa:9e:06:4e:33:5a:
                    35:ee:53:f9:a8:d6:56:aa:43:1a:21:0f:bf:e6:32:
                    02:26:13:c0:79:d8:c9:9b:a5:ea:fb:ef:d9:b2:e3:
                    08:76:ae:1e:85:34:e8:8f:e1:3f:16:30:52:73:e4:
                    fd:32:40:5c:8e:be:96:4d:4c:20:b0:d0:86:08:84:
                    89:b0:9f:4a:b1:db:e4:31:ae:9c:83:33:ca:00:f5:
                    17:e5:71:92:c9:cb:21:35:15:b2:47:f6:3d:8f:a7:
                    16:be:f5:5d:79:91:b4:f7:23:9f:35:ed:c0:f2:9a:
                    bf:df:87:81:6c:f9:e0:fb:52:3a:8b:d5:83:85:ce:
                    2a:33:c6:d8:58:8c:a7:6c:55:98:e0:0f:ce:bb:a0:
                    f7:f5:6d:4d:c2:d2:17:4e:0f:97:99:ab:9e:68:e2:
                    bc:d2:2e:c8:6a:40:cf:30:fa:a0:73:ec:e7:4d:e7:
                    a0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D6:95:68:D1:DB:93:A7:99:AD:19:56:A7:AB:9B:69:46:3B:70:30
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781/f06bd477-b8a8-473e-9210-c25d8e9ee781.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.105.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401248

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:3d:78:29:c3:dd:dd:60:53:9c:16:6b:04:2c:e0:27:c9:5c:
         a1:04:1e:2d:80:8a:3a:9d:b2:ff:3d:ca:53:62:29:51:38:bd:
         94:0a:c9:b0:ce:3b:e5:c1:80:c5:de:9d:5e:39:a2:92:dd:99:
         ce:60:bd:cc:eb:18:14:91:f7:eb:5f:78:95:1a:f2:4e:3b:63:
         c6:77:5c:19:ed:81:65:af:e0:84:43:cf:e2:8c:e0:ba:d8:cc:
         bc:57:96:f9:aa:88:de:37:6c:35:f6:d7:b3:6b:4b:52:44:de:
         09:36:70:3d:84:b0:7e:ff:0a:7c:4c:6a:ff:e0:a3:21:e6:a1:
         48:c6:b3:b6:82:ce:c4:cc:ec:65:06:44:34:aa:4a:ad:fb:b9:
         1f:3a:6b:ef:67:7a:94:8f:09:9e:6d:a3:ba:dd:6d:e7:55:dd:
         b3:18:5f:f9:e0:c0:c1:56:32:9b:d6:19:77:a4:f5:54:74:16:
         5f:9c:8e:19:50:97:c0:27:23:b2:e1:21:c4:b3:63:20:84:c5:
         bc:be:c7:58:51:77:d0:33:af:7e:ff:cd:e3:68:a5:ff:9c:96:
         f8:b4:7a:d7:0f:fe:af:c2:f6:47:d4:8c:5d:e5:03:fd:c3:87:
         4e:64:bb:2f:b4:4a:86:e2:48:83:2e:92:f8:48:ef:a1:24:cc:
         49:69:5b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----