Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de1fa60c-18a9-45f9-b9b5-c12bcb7b3b23.cer
File:                     de1fa60c-18a9-45f9-b9b5-c12bcb7b3b23.cer (raw, json)
Hash identifier:          +dTXsPnSv7UWzlqNr8T8uSJWBaIm7db/nf31I1q+PWY=
Subject key identifier:   DD:9D:1E:7F:57:25:F9:08:65:37:77:F7:D6:04:19:BA:5E:CB:7B:FE
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285845979104825DFD0E20813C1B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de1fa60c-18a9-45f9-b9b5-c12bcb7b3b23/de1fa60c-18a9-45f9-b9b5-c12bcb7b3b23.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de1fa60c-18a9-45f9-b9b5-c12bcb7b3b23/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 19 Apr 2024 00:45:20 +0000
Certificate not after:    Thu 23 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 32205

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:91:04:82:5d:fd:0e:20:81:3c:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Apr 19 00:45:20 2024 GMT
            Not After : Jul 23 00:45:20 2026 GMT
        Subject: CN=de1fa60c-18a9-45f9-b9b5-c12bcb7b3b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:25:51:f8:e4:c0:4e:62:16:22:06:8e:82:
                    26:b5:71:67:83:aa:49:30:e9:b3:33:11:d8:e7:93:
                    ff:e8:c7:f4:66:a1:f9:31:e8:ec:6d:cc:5a:d7:d4:
                    20:a3:10:9a:40:86:42:b5:56:db:cb:00:48:95:99:
                    db:a1:11:c1:e5:2e:ca:56:b7:db:3a:5c:93:d8:78:
                    e7:f1:92:7b:0b:36:ee:11:40:79:2e:96:66:8c:52:
                    09:96:15:65:c9:63:b6:e9:e2:5f:fb:32:31:d6:80:
                    ee:9e:13:84:d6:09:6f:77:f0:e7:0c:13:97:d4:5a:
                    0d:84:66:c7:e9:57:9d:27:91:f9:99:56:90:27:06:
                    7d:fc:9c:ee:40:3d:db:f1:00:9c:aa:15:f0:e0:b7:
                    f0:73:ca:77:43:c3:55:b5:2e:92:79:32:bd:65:73:
                    63:65:b4:25:3f:76:b1:24:db:2d:58:04:61:94:38:
                    de:60:e5:35:c2:3f:b8:68:41:a9:ee:0b:28:62:50:
                    94:df:a9:cf:46:11:48:5b:b9:7d:8d:81:43:3d:ea:
                    b5:c9:b4:42:83:1b:b5:75:ee:a8:dd:4f:df:4b:d7:
                    19:34:d3:57:a6:9c:d4:53:0e:b0:e1:6f:58:c6:35:
                    dd:db:4c:08:25:32:33:ce:e8:50:93:d2:cb:dc:a1:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9D:1E:7F:57:25:F9:08:65:37:77:F7:D6:04:19:BA:5E:CB:7B:FE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de1fa60c-18a9-45f9-b9b5-c12bcb7b3b23/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de1fa60c-18a9-45f9-b9b5-c12bcb7b3b23/de1fa60c-18a9-45f9-b9b5-c12bcb7b3b23.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32205

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ea:72:82:57:11:b4:87:94:60:9b:1f:b2:15:91:9d:c5:f0:
         8d:ef:3e:e1:6a:f2:d0:20:87:db:ce:88:c3:c5:95:80:72:ba:
         c1:06:de:39:44:6e:ed:3f:4c:07:aa:a2:fc:4c:e5:5f:c4:cf:
         39:70:16:96:19:a3:cd:85:b6:6f:52:5d:5b:0a:e9:21:b4:71:
         78:e0:40:a4:28:07:55:e8:17:dc:cd:14:55:64:c0:4a:55:72:
         65:72:da:11:ab:d5:60:fb:0d:8a:1b:4d:8a:c0:3b:da:6b:95:
         bf:fc:5a:9a:5c:8b:b5:40:5d:b1:13:4f:3e:29:1a:2d:66:8e:
         e4:7d:4c:d9:93:c6:30:0d:4c:c9:8a:f8:cf:03:dd:64:2e:14:
         0f:ed:02:e1:28:2b:2d:8a:91:09:84:ac:bc:0b:34:0a:4f:21:
         f4:54:af:42:be:d4:d7:fb:7a:f7:9e:78:bb:d5:e6:bf:7a:3e:
         0e:8c:57:26:75:e0:4a:ee:3d:2a:70:9e:27:ac:b7:dd:54:f5:
         48:1d:bb:14:ce:21:b2:68:13:db:b9:de:a4:50:2b:b6:b3:3a:
         39:15:95:99:ff:1f:fa:6d:c6:aa:b5:85:06:9c:72:d1:23:ae:
         44:63:68:f9:08:98:72:15:0c:6a:72:f0:bb:23:68:6f:ea:62:
         2c:7a:48:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----