Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer
File:                     44dfb2c2-6b0e-4f2c-956d-497df0881015.cer (raw, json)
Hash identifier:          LqhoADAicn52wNasRtLWTl1RVdT+9fNcKAyWuctxWxc=
Subject key identifier:   AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285847BABF25042A0B5EA445C25580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 01 Nov 2024 00:45:25 +0000
Certificate not after:    Thu 04 Feb 2027 01:45:25 +0000
Subordinate resources:    AS: 16938
                          IP: 74.123.144.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:bf:25:04:2a:0b:5e:a4:45:c2:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Nov  1 00:45:25 2024 GMT
            Not After : Feb  4 01:45:25 2027 GMT
        Subject: CN=44dfb2c2-6b0e-4f2c-956d-497df0881015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:0f:3d:ca:58:83:5d:57:0e:11:42:e9:04:
                    2d:fd:9a:ca:f9:b6:3f:43:76:45:1c:f9:9e:ea:dd:
                    8b:be:33:c3:68:7c:5d:b3:6d:73:ba:c8:c1:30:c7:
                    ac:b3:bc:95:49:87:cb:20:7d:49:cc:ec:d5:55:16:
                    6b:05:25:c4:f1:76:ca:bd:40:3a:23:08:66:01:5f:
                    02:4a:18:45:89:cf:ed:0b:b1:fe:bc:68:c6:1a:a7:
                    c1:92:98:00:1a:22:c2:d6:5b:27:cf:93:4c:57:c8:
                    5c:85:e5:12:d6:4b:fc:14:00:69:29:6b:d1:5e:21:
                    4c:9f:72:d1:c7:26:03:02:1e:21:25:27:de:f1:a2:
                    6f:a8:60:4b:b3:a1:e0:f7:45:9f:f0:53:04:83:fd:
                    33:df:3d:f6:19:9b:e9:d5:ff:2b:11:a6:95:12:89:
                    fd:78:0a:b5:4c:3a:40:b0:a4:d0:cb:88:ea:d9:4b:
                    3d:89:b4:cb:6b:2b:bf:19:7c:1a:30:df:d7:4c:18:
                    8c:e8:32:00:3e:b5:65:f4:d4:5a:57:90:92:b7:85:
                    97:1c:7d:04:4a:a2:4f:06:79:6e:68:3c:d5:5f:08:
                    f9:3a:90:75:68:ae:b2:39:38:07:d6:15:69:72:20:
                    e9:93:f1:11:5c:34:ef:51:df:c4:73:d4:1f:3a:45:
                    a9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.144.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16938

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ff:02:39:9f:9e:6f:15:e9:58:9b:c0:fd:cb:ee:68:b8:c4:
         09:87:eb:7f:58:0b:73:45:59:94:b5:11:6c:40:29:1f:8e:16:
         a4:48:09:5f:e0:aa:ee:c7:73:50:31:93:2c:69:85:50:4b:f4:
         12:08:42:08:e2:f1:82:a9:77:e7:dc:e0:61:f4:e8:55:25:59:
         78:4f:01:08:5b:3d:cd:18:70:8f:4e:04:98:c0:c4:ac:68:d8:
         59:24:94:fc:17:4d:73:f0:f2:35:a1:be:b4:ed:51:22:50:57:
         20:cf:fc:82:77:63:00:02:db:27:f0:98:19:da:ac:ff:fa:79:
         de:46:c7:9a:33:d4:96:8a:cf:52:ff:ef:52:1d:7f:c4:5d:c9:
         2e:5a:b0:73:ff:0f:63:55:c5:f0:1f:56:69:15:7c:b2:67:38:
         5e:e4:fd:f9:cc:54:e6:db:19:79:8a:1c:ed:4a:10:27:e4:ce:
         d8:2e:d0:9c:ca:bd:d9:5d:ee:ec:8a:db:33:bf:51:f4:9a:c4:
         0f:56:fc:7e:a1:23:9a:1d:98:7e:e1:6e:15:57:a4:4b:2e:57:
         1b:0d:9a:e6:1e:ed:5b:2f:36:53:77:39:a4:71:78:13:02:79:
         37:77:b2:a6:ad:a8:09:d5:6b:81:b8:f8:af:08:06:fe:5a:bf:
         ae:4f:bb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----