Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer
File:                     c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer (raw, json)
Hash identifier:          RHkIhtILhBeprSEIyLW0jygIOlgGm/yRgGkFTInYJlk=
Subject key identifier:   CF:1B:30:11:70:75:38:4F:72:3E:E9:B0:CD:09:2A:B7:5A:08:C6:EF
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285846CAA8491A248D2888252054C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 07 Aug 2024 00:45:22 +0000
Certificate not after:    Tue 10 Nov 2026 01:45:22 +0000
Subordinate resources:    AS: 40706
                          IP: 23.157.224.0/24
                          IP: 2620:57:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ca:a8:49:1a:24:8d:28:88:25:20:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Aug  7 00:45:22 2024 GMT
            Not After : Nov 10 01:45:22 2026 GMT
        Subject: CN=c9fc1d52-c008-4fdc-acd1-73ab6c71b153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5d:76:f5:c3:0c:ee:c6:95:41:90:73:a2:f2:
                    df:ea:2d:83:da:98:5b:08:e0:9b:ba:ef:7e:85:01:
                    27:11:6b:16:52:dc:9c:a8:be:32:94:38:11:ac:b0:
                    81:b5:ba:34:bb:0e:53:25:1f:42:3f:f6:e5:01:04:
                    ca:86:ad:f1:f4:4e:c2:87:5a:59:e8:ed:f9:92:dd:
                    a9:cc:34:6d:15:e6:d8:b6:4a:94:a0:1e:3f:a3:4e:
                    7f:0f:77:b2:a2:ea:cc:8e:11:f0:69:30:8a:79:61:
                    3e:f0:60:c9:d3:54:62:e9:f9:d9:19:a1:18:e7:fa:
                    2c:11:05:f9:3c:11:e7:a9:b8:db:83:99:36:d5:41:
                    e7:ed:2c:63:76:86:46:3e:b2:a6:98:1a:fb:d2:a9:
                    5c:27:a7:2a:9c:d3:65:8f:20:99:e2:a3:86:70:0e:
                    0d:5d:69:37:a1:df:54:62:c3:53:39:08:df:22:7f:
                    c8:32:07:bb:03:91:18:f9:be:1b:66:4e:81:02:ef:
                    19:00:b3:12:46:5c:70:a9:df:86:54:81:2f:47:c5:
                    1d:df:64:25:b4:8a:00:3d:91:cc:04:77:2e:18:64:
                    9f:68:ba:1e:36:d0:9c:bd:40:01:09:20:7a:a0:07:
                    36:5f:2e:00:0b:05:6b:10:2c:18:a3:b5:a1:9c:0b:
                    17:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1B:30:11:70:75:38:4F:72:3E:E9:B0:CD:09:2A:B7:5A:08:C6:EF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.224.0/24
                IPv6:
                  2620:57:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40706

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:28:fe:49:f1:de:9e:2a:fa:87:a5:fe:da:67:ef:07:f6:eb:
         0b:e0:14:3c:1b:30:69:45:4f:fa:21:0b:d3:59:c5:44:54:57:
         28:0b:99:02:eb:ad:22:fe:82:37:18:28:ad:6a:1c:45:37:cc:
         50:f6:1d:2c:9a:df:09:2c:8b:6f:2f:74:42:5b:2e:90:a9:41:
         e3:3b:c7:86:4f:fc:9c:8b:65:d3:ef:eb:45:19:40:06:60:d0:
         dd:cc:5e:76:83:a8:29:7e:54:c8:83:7e:7b:fe:0a:09:ea:aa:
         87:92:2c:bb:7f:78:55:d3:fe:8d:77:5d:a6:a5:9b:c3:e5:91:
         c8:61:25:c3:1e:54:19:bd:ed:3b:e0:fa:30:e4:40:54:3b:53:
         ec:66:be:14:e0:57:b9:06:bb:2f:c2:2f:85:b8:a9:dc:d0:8b:
         3e:4d:a6:33:f1:5b:78:e5:49:34:23:8d:4e:c3:9c:0e:47:4c:
         70:67:19:e8:41:05:cc:e7:b0:93:8c:57:3f:e1:9c:14:22:d5:
         f4:1c:7e:fd:a2:3e:ed:4e:8b:42:a9:e4:7e:80:69:77:95:1a:
         bb:06:79:21:ee:f6:49:e2:bc:df:80:0d:d8:bb:ed:98:70:9d:
         99:ca:51:3b:ec:4d:be:e6:45:30:40:59:75:87:17:2a:67:28:
         bb:98:7c:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----