Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73.cer
File:                     42a6a92d-cd75-4125-b537-c87919ad3f73.cer (raw, json)
Hash identifier:          FNCjqj9rBHN5CDSrkHZ1n2tffC/+OK5kU1Y5UJfTiKY=
Subject key identifier:   8C:94:14:C3:3F:03:44:25:C8:60:7A:5E:08:AC:01:C6:4C:FE:C7:EE
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584790DEE43949119A64D88F5900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/42a6a92d-cd75-4125-b537-c87919ad3f73.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 17 Oct 2024 00:45:26 +0000
Certificate not after:    Wed 20 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 397280
                          IP: 72.19.12.0/22
                          IP: 2602:fdd3::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:90:de:e4:39:49:11:9a:64:d8:8f:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Oct 17 00:45:26 2024 GMT
            Not After : Jan 20 01:45:26 2027 GMT
        Subject: CN=42a6a92d-cd75-4125-b537-c87919ad3f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:59:1c:02:ef:42:26:2f:52:b4:5c:8c:15:35:
                    0b:f5:32:02:ca:35:38:fa:f5:85:d2:2c:24:2d:08:
                    ce:31:39:5f:a2:a1:03:be:48:90:08:e1:d0:9b:76:
                    34:e8:d3:5e:88:ff:6b:d7:02:d8:9b:5e:a4:4c:06:
                    76:ef:6a:ff:cd:67:12:7f:f1:d6:92:66:64:7b:f3:
                    59:77:8a:e3:b9:b5:8f:99:6c:63:a8:39:42:95:22:
                    b8:b9:e9:ef:0b:37:43:7e:3b:a9:c3:db:7d:86:87:
                    45:ba:bf:9f:a9:86:87:5f:8c:68:ef:f9:cb:31:4b:
                    c7:e8:bd:e9:55:7f:7d:d8:27:74:28:e0:17:e1:5e:
                    74:86:4c:db:7e:d4:40:ee:ae:08:98:67:96:c5:f5:
                    bf:33:52:6c:57:25:55:99:21:30:eb:48:f5:ec:80:
                    2c:2a:8a:e3:ea:09:29:22:2f:51:aa:b9:12:20:9d:
                    d1:89:dd:b8:cc:57:33:cf:03:66:90:87:3f:d6:73:
                    87:aa:e3:2d:cf:f9:67:81:f9:bb:7c:ec:5b:f8:9a:
                    bd:e5:32:85:a1:40:e8:f9:1c:bc:75:7e:8f:0e:88:
                    77:da:13:bf:d6:8d:57:f0:c2:35:06:a2:b7:11:c5:
                    a9:f9:4a:13:03:d4:12:80:15:17:40:78:c1:1c:80:
                    5c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:94:14:C3:3F:03:44:25:C8:60:7A:5E:08:AC:01:C6:4C:FE:C7:EE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/42a6a92d-cd75-4125-b537-c87919ad3f73.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.19.12.0/22
                IPv6:
                  2602:fdd3::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397280

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:4f:c8:d3:a5:d3:47:a7:48:e2:c4:34:6b:bb:d7:e7:63:00:
         88:40:1b:93:86:ed:b9:76:0f:b3:7c:78:2e:1b:10:8e:ab:b1:
         47:9b:a3:13:42:a2:7a:f9:15:b9:de:18:f3:12:10:bd:a1:c5:
         59:f0:95:0f:be:31:7a:44:c7:f1:62:64:28:b5:1f:92:ba:8d:
         d1:f4:54:8f:23:a5:ee:b8:5d:cd:81:f9:cc:33:15:85:f8:63:
         91:26:ea:a6:47:cc:eb:42:c6:86:75:33:98:ef:fb:da:5d:bc:
         1b:f3:22:ee:8b:86:f0:36:19:90:a4:d0:c9:ed:1e:eb:ca:23:
         e0:ca:91:d5:50:18:8a:ce:d9:bb:7b:7f:5b:ce:fe:ca:51:70:
         85:d3:c4:ca:a0:e5:38:9e:b0:03:9a:48:03:76:6a:59:91:28:
         cf:47:42:a9:88:c3:03:37:f8:40:2b:8f:05:42:07:b6:7c:6c:
         d4:d6:d9:bf:30:41:f8:de:3a:08:1f:2d:c0:24:29:df:68:b6:
         da:89:8c:af:53:e4:d3:c2:62:53:67:4e:4b:c9:80:b6:56:61:
         55:14:ea:63:af:06:75:3a:53:c4:2b:3e:11:0b:69:a8:49:cd:
         c7:c7:6e:de:68:91:83:01:3e:2a:6c:13:8e:5c:7c:4d:08:87:
         d5:75:22:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----