Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/30f6e7a8-5ea6-4cc8-811b-f1bde3f9aa00.cer
File:                     30f6e7a8-5ea6-4cc8-811b-f1bde3f9aa00.cer (raw, json)
Hash identifier:          2vzhz0UeLn8YqYQBaFH1KNmtFawd+HHmRrMsp9QMpQ4=
Subject key identifier:   CD:FF:C0:A8:93:31:A5:A9:F4:61:68:EE:19:F2:43:00:2C:47:03:BD
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584628BC9659B79AADC62A304800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/30f6e7a8-5ea6-4cc8-811b-f1bde3f9aa00/30f6e7a8-5ea6-4cc8-811b-f1bde3f9aa00.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/30f6e7a8-5ea6-4cc8-811b-f1bde3f9aa00/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 10 Jun 2024 00:45:19 +0000
Certificate not after:    Sun 13 Sep 2026 00:45:19 +0000
Subordinate resources:    AS: 398830
                          IP: 148.59.24.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:28:bc:96:59:b7:9a:ad:c6:2a:30:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jun 10 00:45:19 2024 GMT
            Not After : Sep 13 00:45:19 2026 GMT
        Subject: CN=30f6e7a8-5ea6-4cc8-811b-f1bde3f9aa00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f0:d9:43:f7:55:9c:b5:67:7f:e0:4c:ee:74:
                    99:39:27:54:3e:12:2e:8d:ba:81:67:b0:e0:b9:0e:
                    20:5f:92:97:52:0f:21:49:66:ee:d6:71:06:5f:08:
                    19:e5:6a:e4:e7:e2:ef:26:18:87:58:61:50:24:7f:
                    34:84:a9:4e:4c:a7:66:5f:87:4b:35:c1:b9:39:d5:
                    34:57:73:bc:d7:b2:1e:6c:77:19:46:1e:fd:5b:c3:
                    a0:dd:68:6b:39:b6:61:da:62:8e:2d:3b:41:b7:90:
                    d3:5a:6f:27:48:01:22:83:d9:31:f4:62:12:70:90:
                    65:b4:44:73:83:54:d7:8b:9d:a4:ba:9b:a2:44:5d:
                    d5:35:75:c0:05:40:20:fc:69:60:67:51:ae:5f:b4:
                    1a:e2:bb:94:a8:a7:5b:d6:86:fb:ea:39:e8:77:25:
                    e7:e6:06:d4:eb:3c:18:4c:03:25:b9:5a:b6:32:56:
                    90:cc:8c:63:b9:9f:02:2e:4f:14:a9:6a:a6:c2:d9:
                    f2:38:5a:f7:bc:bb:02:6f:58:3c:a6:9c:1a:25:a1:
                    c2:fc:11:7e:2a:5e:72:a1:99:2f:48:26:bc:3f:67:
                    fa:e6:dd:e3:48:2e:cf:ba:d9:67:ad:bc:33:0a:d0:
                    1f:12:89:86:d6:4c:ae:b1:dc:63:1f:8c:36:2e:75:
                    5e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FF:C0:A8:93:31:A5:A9:F4:61:68:EE:19:F2:43:00:2C:47:03:BD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/30f6e7a8-5ea6-4cc8-811b-f1bde3f9aa00/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/30f6e7a8-5ea6-4cc8-811b-f1bde3f9aa00/30f6e7a8-5ea6-4cc8-811b-f1bde3f9aa00.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.24.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398830

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:7c:01:6f:3d:2a:83:37:99:8d:42:2e:4f:ca:ed:19:82:a6:
         96:39:64:64:b7:b2:53:f2:f5:1f:cb:88:be:bd:25:2f:00:d6:
         ad:13:c3:24:18:89:b5:d3:42:29:d7:cd:19:9e:ef:6e:63:1c:
         a3:1a:07:d4:74:fb:69:c4:f8:15:fb:8d:ab:14:0e:b6:4e:7c:
         d1:8f:d9:35:5a:73:14:7c:ea:62:8c:7d:02:53:85:ad:47:ba:
         0f:3a:4e:62:91:6b:ce:a7:79:5b:ff:8a:18:20:21:eb:e6:a2:
         77:d6:5d:d7:63:65:17:f3:81:83:08:57:ff:aa:07:75:0f:39:
         18:73:7c:32:7a:1b:80:53:60:3f:89:42:62:1d:d5:ce:46:5b:
         01:fc:cb:af:c9:99:b5:7c:cf:a2:8b:80:7d:48:77:29:17:16:
         77:0d:9c:c7:9f:28:9b:e4:e0:af:90:1b:c8:1c:f0:31:bc:72:
         90:ab:0e:8d:95:0e:ac:81:cd:8f:00:bb:bb:79:e2:36:4c:ec:
         8e:40:c9:20:d1:9b:79:c0:71:bb:f9:51:76:22:15:6e:37:6e:
         33:ef:a4:5c:49:5a:f8:9f:43:14:e7:3c:5d:ae:f3:28:d5:17:
         1c:06:8e:b5:ac:cb:ed:12:95:50:c3:a5:10:c4:75:54:c7:26:
         a5:24:a7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----