Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e80dd22b-e8f1-416e-8863-412b46d1db86.cer
File:                     e80dd22b-e8f1-416e-8863-412b46d1db86.cer (raw, json)
Hash identifier:          0ghnzqMMfWEoXSdhA8Yoy3La44/gBPTFMbrrwN2Cp1M=
Subject key identifier:   D4:14:EA:DB:1C:1D:30:45:26:3D:D5:48:24:32:18:21:2B:26:0B:27
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584750A928161FEB828E55DE86A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e80dd22b-e8f1-416e-8863-412b46d1db86/e80dd22b-e8f1-416e-8863-412b46d1db86.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e80dd22b-e8f1-416e-8863-412b46d1db86/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 24 Sep 2024 00:45:27 +0000
Certificate not after:    Mon 28 Dec 2026 01:45:27 +0000
Subordinate resources:    AS: 395290
                          IP: 216.176.46.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:a9:28:16:1f:eb:82:8e:55:de:86:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Sep 24 00:45:27 2024 GMT
            Not After : Dec 28 01:45:27 2026 GMT
        Subject: CN=e80dd22b-e8f1-416e-8863-412b46d1db86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:49:16:cd:2a:d6:3d:62:54:07:9b:01:99:c2:
                    a1:d5:11:2d:4a:fa:90:c6:53:a8:89:6b:94:73:73:
                    f3:f2:8e:b2:39:62:4d:be:37:33:39:9b:2d:b7:6b:
                    c9:db:eb:36:95:3c:57:72:da:d6:34:2c:57:4a:c3:
                    19:a7:cf:c2:b0:f0:d6:83:18:d7:ec:08:43:3b:8e:
                    c1:f3:06:e6:9b:7e:6f:54:77:e7:3a:05:82:cd:3b:
                    83:07:d0:1e:17:20:3b:ba:ec:e7:02:4e:9c:07:22:
                    d5:60:16:f5:6f:71:c7:83:5a:1e:01:bf:b0:17:c3:
                    76:23:a2:1b:fb:6e:9b:d5:3b:79:fb:9c:6e:82:01:
                    3a:76:c3:e7:7e:ae:60:91:b5:a1:d2:53:68:df:45:
                    4f:47:ab:48:39:0c:7b:52:f2:75:19:18:de:21:66:
                    95:c6:3c:bc:ab:3a:07:58:75:cf:94:aa:76:f8:4d:
                    ce:d1:9d:aa:49:fe:00:56:65:ee:e9:1f:7d:12:d8:
                    94:6f:a9:fd:2c:2a:ed:64:ca:5f:d5:36:6e:33:54:
                    ff:74:10:f4:a3:ec:c4:30:22:ad:54:62:32:87:31:
                    3b:e4:3e:71:1f:31:9a:18:e2:29:bd:a6:62:a8:4b:
                    dd:82:07:3e:59:42:c5:f3:3c:d2:77:a3:17:4b:86:
                    ab:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:14:EA:DB:1C:1D:30:45:26:3D:D5:48:24:32:18:21:2B:26:0B:27
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e80dd22b-e8f1-416e-8863-412b46d1db86/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e80dd22b-e8f1-416e-8863-412b46d1db86/e80dd22b-e8f1-416e-8863-412b46d1db86.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.176.46.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395290

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:3e:5b:a6:84:a0:fe:bf:6d:df:0f:ee:d7:24:b5:53:e9:63:
         28:eb:82:d8:4c:fd:da:8c:7c:64:fb:94:1d:16:ac:ae:7b:fd:
         da:99:fa:f8:09:73:9d:6a:d0:4b:f7:bf:de:a2:eb:4f:fa:0c:
         7b:ca:30:4f:49:5b:dc:6c:45:51:d2:46:04:0f:08:cb:d3:43:
         c6:40:1f:ae:61:3d:e5:e7:64:dd:e6:78:8f:c8:25:bb:9e:10:
         ff:c7:49:a9:19:60:7f:96:66:57:64:d1:2d:35:5e:c0:43:e9:
         ff:87:a5:bb:54:fe:b8:8f:47:99:55:52:df:de:56:8c:c9:56:
         7e:87:2d:66:5a:95:1b:e8:83:77:63:fb:e3:af:04:6c:00:53:
         4a:e9:ec:d2:33:2d:df:87:59:6a:51:5c:3a:45:a1:65:27:d6:
         95:2d:4c:7f:b3:7d:f7:bb:f5:c8:c7:37:27:06:29:cc:30:67:
         dd:49:ae:dc:a0:0e:4d:18:9a:61:a7:65:2a:aa:28:80:63:b3:
         fb:37:3a:01:52:37:93:55:4a:82:01:d0:3c:d7:14:9a:0b:0c:
         e5:32:54:40:ff:ee:79:4e:d2:6c:55:cc:2f:f5:0b:3e:ce:bc:
         10:79:7b:3f:e1:fd:8b:6f:40:60:2b:7e:f3:f0:4d:df:31:98:
         ff:e5:c9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----