Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
File:                     0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer (raw, json)
Hash identifier:          +86bkSsUag+w67k2QPX/qo6Kk4Adx+Ssh2YJ2CdKct4=
Subject key identifier:   F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858466A79DE68F6AF398D08746880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 03 Jul 2024 13:54:15 +0000
Certificate not after:    Tue 16 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 968
                          AS: 982
                          AS: 34553
                          IP: 45.59.140.0/22
                          IP: 2602:809:3000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:6a:79:de:68:f6:af:39:8d:08:74:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jul  3 13:54:15 2024 GMT
            Not After : Jun 16 00:45:20 2026 GMT
        Subject: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:89:33:15:16:1e:27:60:43:08:26:3a:b5:80:
                    21:da:bb:80:4f:11:f7:1c:77:b8:ee:c0:6e:8f:10:
                    51:d7:a3:3a:7d:3b:7c:77:b1:91:64:4c:6a:6e:98:
                    84:c8:7c:bb:d3:b8:c2:e9:33:9b:cb:98:b7:dd:a6:
                    be:c4:b6:fd:03:7e:34:ee:e7:9a:ad:89:93:1a:41:
                    9f:67:b8:90:6a:c5:59:b1:80:b1:50:be:0a:d3:09:
                    1b:68:2f:1f:01:44:55:f7:5d:de:4c:44:7a:ef:40:
                    3f:7e:22:0c:41:35:2d:da:f1:5b:7b:0a:89:b8:13:
                    0e:33:c3:8a:25:5b:1d:e1:d9:c8:30:b0:08:4f:a6:
                    c9:9d:41:29:f4:f2:5a:4e:0f:17:e9:88:55:88:74:
                    8f:30:2d:59:1e:aa:98:b4:9a:56:28:41:f4:b6:8f:
                    cc:12:e0:95:1e:53:30:c5:63:26:03:29:0f:c6:44:
                    be:69:4e:0c:3e:50:79:13:a0:a5:03:f0:da:5c:48:
                    5a:a4:d3:9c:8c:bc:32:ab:98:ec:40:c5:34:e6:79:
                    d8:18:c7:64:38:4d:06:74:34:44:49:4d:2d:c6:ea:
                    4d:f1:61:20:fe:cd:00:b1:8c:c9:79:73:55:ee:d4:
                    b2:c0:78:63:0f:07:f2:aa:85:85:3e:5e:b9:c7:5e:
                    29:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.140.0/22
                IPv6:
                  2602:809:3000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  968
                  982
                  34553

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:85:42:c1:9a:6e:5c:c6:57:60:11:af:4b:b0:70:84:2d:a7:
         df:d5:d7:2e:6b:88:64:87:2b:52:b6:81:9f:81:36:da:5d:44:
         8f:2c:49:c9:cb:09:92:33:cf:e6:07:d8:da:3c:03:c8:41:71:
         9d:3a:ae:a7:26:b1:ea:68:c3:53:11:e5:f0:f3:be:27:5e:7a:
         1b:c4:16:e9:be:58:9b:a3:58:7b:9d:58:a1:f0:dc:84:60:96:
         63:f4:7e:8c:e0:04:1b:af:73:ae:d9:31:fd:c0:9c:3b:0b:17:
         54:7c:60:82:81:d5:d5:55:a5:c7:c0:dd:16:a8:37:8b:df:21:
         5e:c2:b7:e8:f7:b7:4d:52:cf:5f:c7:45:9a:76:f5:82:56:8b:
         2f:ea:c7:f3:a4:90:42:1d:8f:fb:cc:ad:0b:9d:66:f0:6e:ed:
         90:91:a4:1b:f8:8b:a2:ac:af:e6:02:11:dd:7e:20:b9:f1:a6:
         f4:dd:81:34:96:35:2c:75:da:4c:0e:ac:0c:0c:61:30:10:67:
         55:ef:95:a3:de:24:34:49:f3:38:b1:fb:89:65:46:f1:46:c4:
         b8:d8:64:50:30:fe:10:32:1a:3a:3b:55:95:da:e6:4d:24:7a:
         9d:20:98:2c:63:c0:fd:c5:b3:8f:8f:77:af:fb:07:d2:81:2e:
         04:d7:9c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----