Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6c054d19-db22-401e-9688-db913ddb0b0f.cer
File:                     6c054d19-db22-401e-9688-db913ddb0b0f.cer (raw, json)
Hash identifier:          zMnkJKJwFe7VwZtLNs3hCDBbn0hf55Q+CiCT4eNn6UI=
Subject key identifier:   0C:D1:BF:36:27:7E:23:CE:8B:66:4A:E0:AE:77:5D:55:1C:F2:8D:25
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858467E1F1713395BBA8250209600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6c054d19-db22-401e-9688-db913ddb0b0f/6c054d19-db22-401e-9688-db913ddb0b0f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6c054d19-db22-401e-9688-db913ddb0b0f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 10 Jul 2024 14:47:30 +0000
Certificate not after:    Tue 13 Oct 2026 14:47:30 +0000
Subordinate resources:    AS: 397474
                          IP: 208.75.184.0/22
                          IP: 2620:13f:1000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7e:1f:17:13:39:5b:ba:82:50:20:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jul 10 14:47:30 2024 GMT
            Not After : Oct 13 14:47:30 2026 GMT
        Subject: CN=6c054d19-db22-401e-9688-db913ddb0b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:a4:3e:a4:fd:33:be:87:a4:ca:66:a3:de:
                    19:29:17:6e:eb:c7:49:8a:02:59:d6:4e:41:e4:7f:
                    ff:3d:d9:a2:16:46:84:5e:93:57:54:94:65:ac:b9:
                    c1:da:81:08:de:f3:e1:0d:31:84:9d:4b:27:21:63:
                    02:ad:c5:64:b5:9f:4b:29:ce:99:fb:6e:58:a5:8f:
                    f7:45:99:ac:1c:fc:98:f1:b3:c2:92:cc:30:ed:3a:
                    90:e7:e2:6f:09:ee:87:49:65:69:fb:83:6b:77:52:
                    ab:3c:5f:f9:82:51:37:62:f7:df:af:bd:0f:5f:c1:
                    27:85:44:7b:92:95:ba:9a:ba:4e:55:dc:ac:5e:ab:
                    4e:ab:86:62:90:95:2b:e3:00:c1:9a:c0:4f:69:85:
                    63:9b:87:29:e2:50:09:b0:eb:60:40:98:52:65:1d:
                    30:db:46:69:b4:b7:98:4f:95:29:48:02:2c:dd:44:
                    f9:23:c4:3e:29:ac:0a:c5:bd:06:9a:76:78:35:9a:
                    22:8a:4c:24:58:59:0e:db:2a:b3:06:fb:d6:cc:e5:
                    96:07:ab:93:1f:27:f2:d4:62:19:80:e0:a2:d2:2f:
                    8f:49:95:07:92:f9:80:f6:0c:9e:fc:65:8f:29:cd:
                    28:7a:97:ba:f4:d6:c3:41:e4:b0:e0:b5:cb:e9:e0:
                    60:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D1:BF:36:27:7E:23:CE:8B:66:4A:E0:AE:77:5D:55:1C:F2:8D:25
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6c054d19-db22-401e-9688-db913ddb0b0f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6c054d19-db22-401e-9688-db913ddb0b0f/6c054d19-db22-401e-9688-db913ddb0b0f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.75.184.0/22
                IPv6:
                  2620:13f:1000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397474

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:26:97:dd:ed:1b:2d:a8:4c:4a:2c:19:5b:14:e1:3a:7f:09:
         8d:89:51:0c:f5:f1:d6:62:45:35:da:10:62:c3:df:d7:5c:7a:
         e0:7a:a7:0e:08:82:3c:3e:61:6f:8b:c1:84:f9:bf:4d:fe:66:
         ce:01:4f:91:68:6a:44:67:1f:9e:60:0c:72:70:44:d0:92:5a:
         60:c5:d3:c8:4d:b5:62:47:5f:be:c8:5e:21:e4:b2:ff:ef:fa:
         15:5e:09:b7:33:08:0b:6c:94:95:c4:f0:e7:c2:6a:41:fe:78:
         9d:ed:f9:f3:2a:19:c0:76:67:32:db:57:c0:31:a2:f2:93:c6:
         03:ce:3d:ee:fd:d7:e2:76:59:3a:a9:c1:be:0c:df:df:c5:d1:
         c0:17:7c:e3:0d:94:0a:b2:3d:69:60:92:53:24:bb:b6:ef:1f:
         dd:4d:99:0e:e4:d2:40:fa:c1:53:0a:e4:58:e7:32:c7:5a:dc:
         d2:b1:7a:aa:22:5e:a3:e1:bb:c7:80:63:31:0e:90:48:13:7b:
         c8:1a:2f:82:03:b1:e0:50:a6:aa:b0:48:f8:74:df:79:51:3e:
         dd:07:08:7f:4f:12:13:1a:3a:ba:b9:67:46:93:24:8b:29:98:
         48:37:2e:bc:a5:b1:84:96:8a:53:83:9d:fc:b8:23:d6:22:d2:
         89:4c:5e:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----