Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
File:                     abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer (raw, json)
Hash identifier:          MB7T+VNcCILwYQahxjvb2socjYIzhVpj0OLqC9ZNlAU=
Subject key identifier:   B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858465A7B51B809616390648CB580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 27 Jun 2024 20:24:14 +0000
Certificate not after:    Mon 11 May 2026 00:45:21 +0000
Subordinate resources:    AS: 40755
                          IP: 64.49.96.0/20
                          IP: 172.98.4.0/24
                          IP: 174.136.252.0/24
                          IP: 2606:3040::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:5a:7b:51:b8:09:61:63:90:64:8c:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jun 27 20:24:14 2024 GMT
            Not After : May 11 00:45:21 2026 GMT
        Subject: CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:97:a3:22:34:08:f7:a1:86:f2:e2:56:c2:
                    48:e6:4e:29:a6:42:e3:5b:ac:27:f9:74:08:df:95:
                    61:1f:4d:2b:00:e0:29:83:1a:c8:bd:9e:8b:a9:2b:
                    0b:bf:40:72:4b:61:f7:52:38:55:63:1a:2b:14:e9:
                    6f:af:36:8c:7a:58:0e:76:ed:76:07:81:33:a0:4f:
                    2c:c4:2c:2e:3e:af:10:c9:30:66:78:69:d8:f7:78:
                    19:53:bb:98:ae:39:11:5f:c4:ec:bb:e6:ac:34:c4:
                    ce:09:aa:6a:4c:e9:69:9d:b3:be:5b:46:99:e3:30:
                    16:79:e5:7b:0d:5c:8d:19:ec:87:31:68:a1:e0:44:
                    0e:f1:07:df:4b:e0:03:f0:27:b4:51:0c:00:3f:ba:
                    02:ee:76:68:52:d7:ee:1e:03:c9:da:6d:ef:2e:a1:
                    ce:ae:a9:29:49:24:eb:67:fa:1b:98:e0:42:75:7b:
                    47:89:83:6b:d6:7d:35:5a:cd:96:82:ba:6e:90:e9:
                    39:b9:46:54:82:16:6a:b9:03:c3:56:54:9d:6f:cf:
                    87:b6:5b:2a:be:5e:c3:bc:89:a1:c5:58:94:98:5d:
                    b2:d6:b7:0e:7f:cb:4e:16:5f:6e:c5:48:b6:a3:34:
                    1f:82:e5:b5:00:c8:ef:16:5c:db:81:78:83:04:8b:
                    de:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.96.0/20
                  172.98.4.0/24
                  174.136.252.0/24
                IPv6:
                  2606:3040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40755

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:2f:0c:1a:da:80:08:f4:9a:7d:6c:9b:38:e0:6c:bd:e6:4f:
         5d:10:d1:91:10:28:f0:7a:ed:c4:57:ee:15:20:e8:c3:32:de:
         ba:04:e1:81:7a:c8:6f:f1:72:5f:fb:7b:af:f1:1c:c1:2c:3a:
         2c:08:f5:aa:87:c9:2c:7c:f8:db:c6:8f:6e:41:92:9b:a8:af:
         3d:95:87:da:64:ce:ed:d4:8e:35:bc:3e:c9:59:21:c6:66:42:
         41:3d:bc:45:eb:8e:dc:07:50:09:62:aa:0d:14:e2:0f:b5:54:
         be:c1:2e:5c:fd:33:85:ed:99:c5:65:a9:91:90:74:35:17:c1:
         cb:a2:77:f2:a6:6e:89:cb:f3:47:aa:4e:cc:52:13:bf:72:0c:
         9b:02:37:c1:78:1b:ba:d9:24:cb:54:43:4b:30:bb:22:50:04:
         25:e8:12:e3:5c:21:72:ab:98:5a:81:56:3f:76:fe:52:4f:e6:
         0a:db:21:2b:a4:24:77:cd:b8:1f:a5:1f:70:d0:27:8f:60:e2:
         25:f7:5e:36:0a:cf:09:0b:cf:9d:25:a6:29:24:a3:23:55:1c:
         bf:b6:64:0c:ee:bb:46:d9:86:92:42:a3:19:b1:3d:a0:e3:4a:
         3f:75:e2:54:ed:98:c7:27:65:e4:3a:4f:a1:84:1b:16:d5:1d:
         2f:13:19:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----