Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
File:                     1918ee56-343c-40dc-b01d-fb5efd51e26a.cer (raw, json)
Hash identifier:          WujDFVNC8Z70CLMVXbHq5mMsQXUtUTBVWJ7iIwnttiI=
Subject key identifier:   17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858453E3B215E5B5A34D2029AC200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 18 Mar 2024 00:45:19 +0000
Certificate not after:    Sun 21 Jun 2026 00:45:19 +0000
Subordinate resources:    AS: 398351
                          IP: 2602:80a:2000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:3b:21:5e:5b:5a:34:d2:02:9a:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Mar 18 00:45:19 2024 GMT
            Not After : Jun 21 00:45:19 2026 GMT
        Subject: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:46:97:75:a0:20:d5:e2:ec:48:89:b6:c4:61:
                    31:98:47:24:d2:72:ec:28:ff:d9:3e:3f:00:9b:ee:
                    db:a5:0a:52:56:e0:3f:87:69:97:8f:85:5d:b7:da:
                    ec:82:b4:ff:e0:ed:0c:89:d7:87:b4:be:9c:76:c1:
                    32:33:f3:15:b4:84:ef:8f:d0:bc:b6:0e:9b:4c:bb:
                    35:fe:44:a3:a9:a8:1e:13:f8:fb:2d:90:55:a4:69:
                    df:96:cb:0e:72:a1:45:2e:9a:84:54:a9:39:85:7d:
                    df:4f:6b:9b:0a:7e:2b:ed:84:3e:88:bb:e2:d8:66:
                    53:db:d5:ba:17:f0:1c:e7:3a:00:5e:e7:00:95:f8:
                    0b:5d:79:16:bd:51:4f:a6:7d:7f:a3:2a:1d:3b:61:
                    be:ad:0d:df:63:b9:60:8c:ab:79:0d:cd:de:51:f0:
                    50:72:4f:5c:bb:2c:59:aa:75:6a:ab:c1:ca:e5:41:
                    fe:e4:09:d9:61:52:97:d0:73:61:39:05:7b:fb:66:
                    29:99:18:47:66:58:d7:92:7f:96:3c:bf:2e:cb:22:
                    dd:c9:1b:97:8d:55:69:3a:9e:64:ac:7e:3c:1c:e5:
                    c4:ee:77:aa:b5:42:67:30:d9:3d:96:f3:a7:b5:08:
                    49:a0:4a:a1:79:5b:76:d4:92:e8:3f:3b:9d:1a:e7:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:2000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398351

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:06:e9:41:f2:1e:f2:a6:9e:b4:5e:9e:e2:1e:3c:7c:ca:9b:
         a6:f7:cf:c2:08:b1:28:71:77:70:46:a5:39:94:e7:fc:8f:b4:
         32:f5:52:14:0f:69:75:ca:8a:77:28:47:d6:cb:e3:1b:ec:f5:
         95:ee:0d:5c:77:d7:c5:36:e1:52:7d:71:02:29:53:fb:6d:a0:
         8b:c8:3d:95:00:8d:ab:fa:e5:6c:0c:df:19:fd:2e:72:4b:f0:
         ff:14:3e:d3:c7:0a:a8:6b:f3:c7:87:13:6b:39:48:19:50:1f:
         07:f8:76:bd:01:94:38:3d:bc:12:cb:41:86:57:f7:a3:4b:aa:
         9e:5f:c7:7f:2d:97:26:19:66:fb:ce:f2:79:05:ff:71:e4:45:
         f0:a5:7c:41:60:0d:f4:9f:bd:94:fa:63:82:b0:c6:34:b5:fe:
         f6:cc:cb:5f:fa:3f:16:72:ca:7c:9d:0b:c6:0a:3e:ff:3a:31:
         c3:d5:93:22:a0:2b:4a:7d:85:93:4b:db:38:91:b1:9a:14:64:
         e3:c6:d0:2b:06:7f:7d:4b:0f:d8:fc:84:81:b5:67:06:53:9b:
         c2:46:ff:de:72:09:d4:f9:e0:d9:73:5a:41:b8:61:41:2b:21:
         89:03:1a:7d:22:df:6e:1a:e4:54:93:95:b9:6c:99:ec:b0:12:
         20:80:d0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----