Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65.cer
File:                     f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65.cer (raw, json)
Hash identifier:          A4QNyK8YSjxLtQrn+GAJAVgGUXMiq/MGOkFtcE9ravs=
Subject key identifier:   E0:D8:1B:F6:4D:3E:35:A6:CE:33:3A:A0:D6:B3:D8:2F:90:11:21:54
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858473D1E5FCD25D48D9924F05A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 17 Sep 2024 00:45:27 +0000
Certificate not after:    Mon 21 Dec 2026 01:45:27 +0000
Subordinate resources:    AS: 399011
                          IP: 23.169.80.0/24
                          IP: 2602:808:7000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:1e:5f:cd:25:d4:8d:99:24:f0:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Sep 17 00:45:27 2024 GMT
            Not After : Dec 21 01:45:27 2026 GMT
        Subject: CN=f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:83:ac:67:1d:d8:dc:9c:18:87:80:2b:49:6b:
                    9f:4f:99:7b:86:14:d3:3c:57:64:cd:05:48:74:99:
                    48:cd:f4:95:2f:56:18:aa:03:c4:79:5e:d9:13:d4:
                    33:52:e4:3e:74:b7:86:fc:06:18:74:0d:40:42:99:
                    ca:4a:63:60:5c:f9:c8:5d:75:7c:2c:f3:0e:5d:97:
                    99:8e:30:48:f2:1d:78:25:44:c4:19:3c:12:0e:21:
                    58:c3:cb:51:f4:05:05:d9:d8:9d:3a:a1:f5:f3:14:
                    e7:83:f2:92:a0:3a:a2:3b:27:ff:99:97:7c:07:f8:
                    6e:c6:86:6b:fb:a1:9e:db:ad:8f:99:3a:e7:e8:db:
                    16:b5:eb:2b:31:38:fb:30:b3:16:65:4e:06:4c:de:
                    16:84:84:1e:5b:d5:7b:2d:88:83:04:ed:bc:e6:6f:
                    2e:10:f2:4b:fa:43:71:8a:8f:68:bf:6f:4a:d5:0a:
                    4d:78:c7:d0:1a:8b:67:b6:91:5e:46:70:84:ee:ac:
                    ce:60:3f:51:3e:8a:35:ba:45:5d:54:6a:43:7f:dc:
                    c2:eb:c6:bc:23:39:d5:72:29:dc:1d:ed:3e:be:57:
                    e7:f0:e4:63:be:56:e3:70:46:2e:0d:84:9a:c3:8b:
                    87:36:85:b0:16:36:7e:4a:2b:39:23:81:1a:93:ce:
                    44:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D8:1B:F6:4D:3E:35:A6:CE:33:3A:A0:D6:B3:D8:2F:90:11:21:54
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.80.0/24
                IPv6:
                  2602:808:7000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399011

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:af:c9:ef:ac:20:b3:7c:2d:bc:b8:6a:39:5d:c9:ff:96:2e:
         4f:5e:1e:f8:14:68:eb:0e:e6:e8:3e:7a:0c:71:1d:c8:6b:a4:
         a7:29:ce:d2:f5:15:03:75:50:85:99:12:71:c5:cf:22:18:46:
         ff:29:33:3c:92:67:69:05:bf:3a:52:d2:f4:d2:39:59:81:11:
         db:aa:ed:29:b4:63:e6:f1:31:a4:92:e1:c8:29:e2:0d:fc:71:
         4e:64:cf:e9:25:20:b5:f3:66:cb:82:d8:b8:17:5e:cb:14:0a:
         ef:31:1d:f0:68:71:7b:9e:fd:bd:21:21:9a:d8:23:53:ba:a9:
         e8:84:0f:f3:42:d9:be:7b:f3:91:08:b8:83:ba:cf:b5:e3:d1:
         29:98:b4:20:ef:d0:da:89:26:62:0b:1c:11:7f:c6:02:83:62:
         27:ae:9a:85:55:2c:40:75:ca:6f:d1:8d:b5:59:7f:f6:45:d1:
         ff:47:c4:f6:9c:6c:09:c5:de:73:b1:12:5e:92:e2:17:14:92:
         e5:d5:73:b3:1c:44:e4:e7:3a:82:a7:30:9b:f8:e5:b3:5b:c8:
         d0:25:8b:7b:93:12:86:c7:ac:18:be:5a:e4:ad:53:2f:f4:a6:
         a8:42:5b:6f:50:01:36:3e:eb:8f:0e:16:48:94:05:3b:2e:58:
         15:22:9d:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----