Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer
File:                     c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer (raw, json)
Hash identifier:          HDxJWHeCOv7EGpByJA3rqRNKpTzKvC4MjUSBsnoR5RI=
Subject key identifier:   6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285845E026CFD3F697F49261731600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 15 May 2024 00:45:20 +0000
Certificate not after:    Tue 18 Aug 2026 00:45:20 +0000
Subordinate resources:    AS: 397898
                          IP: 67.159.203.0/24
                          IP: 2602:fccd::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e0:26:cf:d3:f6:97:f4:92:61:73:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 15 00:45:20 2024 GMT
            Not After : Aug 18 00:45:20 2026 GMT
        Subject: CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:e3:5b:65:c0:d0:3c:d4:6a:c4:ea:ec:84:
                    72:20:83:4a:a6:20:86:c7:42:47:45:c3:de:0b:59:
                    6f:fc:a5:89:e7:be:f2:fb:2d:98:cd:26:1c:59:13:
                    f3:f7:c3:d9:be:f0:af:22:d4:d5:11:01:05:73:39:
                    70:28:fc:11:97:9b:d4:6e:aa:4b:9b:bc:bf:77:51:
                    98:1c:4e:72:87:26:7b:13:69:46:54:34:88:8f:60:
                    ac:78:ea:b7:28:88:16:38:7c:ed:13:c3:20:3d:a7:
                    17:ca:67:0e:c1:94:98:72:ae:b1:13:fa:3b:2d:db:
                    d5:de:f1:d8:aa:fc:60:df:5b:70:62:73:7f:99:be:
                    1b:6c:45:50:d9:ef:96:a6:df:90:d4:2e:7b:44:90:
                    0f:4f:06:0a:4a:80:1e:4f:8e:cc:1e:fb:65:82:5f:
                    75:d5:26:2c:59:85:45:77:74:d3:ea:72:88:f5:68:
                    90:1e:d9:8d:f4:03:55:96:39:23:86:b9:3e:ca:48:
                    c0:11:0e:82:44:f5:14:21:8c:24:dc:16:f0:32:00:
                    24:a0:28:c7:bb:19:63:a6:d9:16:1f:c4:ac:17:e8:
                    cc:84:6e:75:eb:43:cc:a6:ce:45:85:e8:a7:9d:d5:
                    e3:86:ae:8c:2e:40:9e:f2:f8:f8:9f:46:ff:93:2d:
                    e7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.203.0/24
                IPv6:
                  2602:fccd::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397898

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:a1:ab:c0:43:1e:13:4c:da:f3:08:14:5c:b3:b3:9e:2c:1f:
         dc:81:10:22:3e:f7:92:78:74:81:21:e9:e8:d9:e2:c5:d4:ab:
         d8:58:5a:e7:eb:e3:77:c0:e9:8f:96:d8:1f:c4:09:44:fe:ee:
         56:41:06:e8:cf:04:20:23:3c:74:1f:5a:08:5a:e3:d8:e7:f1:
         9e:a0:c7:bd:f4:fa:e7:ed:33:86:86:53:f7:c5:71:6d:0d:88:
         9f:f2:de:1b:50:a9:f1:54:4c:bf:48:88:3c:40:74:a6:93:b9:
         4c:11:6b:5d:78:b4:31:d2:e5:07:2b:75:4a:28:de:33:13:b0:
         92:db:37:d3:a6:65:50:18:f2:13:b3:a2:61:42:e0:5e:18:09:
         ed:2a:0e:de:be:13:f4:f5:81:55:69:a8:7c:5f:bb:3e:1e:05:
         97:3c:d1:4c:7a:fd:36:67:a8:0d:43:74:f3:3c:fc:ad:d7:45:
         8d:3d:44:94:d9:2d:84:4a:f0:c8:31:b0:92:2c:bc:62:10:b9:
         0c:09:e4:6d:24:1a:1d:85:44:ca:6e:59:74:64:1e:7d:5d:37:
         dc:b2:52:f6:75:d8:79:3c:a9:44:74:f9:51:8b:49:de:21:f3:
         e0:a9:4c:1e:ea:8f:1e:a9:da:8f:2e:8e:fa:2e:e5:04:63:45:
         7a:16:b2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----