Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer
File:                     ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer (raw, json)
Hash identifier:          t8zJOiwLTF/gAk7clgv/buNcs/Rz4nHJFdtqLoD/I6k=
Subject key identifier:   5C:7A:5D:FA:65:3A:32:DA:E6:35:F9:92:DA:69:5C:AD:F6:7E:82:C5
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584617FC7BC0A3124AA6617C5180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 04 Jun 2024 00:45:19 +0000
Certificate not after:    Mon 07 Sep 2026 00:45:19 +0000
Subordinate resources:    AS: 21846
                          IP: 64.209.144.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:17:fc:7b:c0:a3:12:4a:a6:61:7c:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jun  4 00:45:19 2024 GMT
            Not After : Sep  7 00:45:19 2026 GMT
        Subject: CN=ff081ee5-1af1-4a04-9fee-2540bcef95c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:84:e0:8e:0f:6c:34:10:a1:bd:c4:23:32:21:
                    09:a2:88:3d:2c:07:3f:00:27:24:b4:89:4c:4c:31:
                    0d:58:1f:1e:a4:94:71:4b:82:37:13:7b:fb:62:e1:
                    e1:52:b7:49:3e:2b:98:b2:fc:28:1d:b9:e6:af:0d:
                    5e:24:a8:27:3f:8c:f2:06:4a:ba:f3:7a:dd:f3:b4:
                    02:a1:9c:c1:5a:b9:59:70:24:39:f1:43:86:c9:dd:
                    71:c0:84:41:da:2d:6e:b8:60:3c:3d:59:49:9f:d0:
                    3d:b2:04:d6:0f:d0:a5:62:c0:a8:c4:ae:99:e7:5a:
                    06:bc:bd:3d:7b:ad:c8:93:5c:06:f2:30:8e:60:1f:
                    7c:34:24:67:93:24:d7:be:89:ed:72:32:3a:31:b5:
                    55:dd:32:42:cc:94:47:d8:8a:12:bf:3f:24:b7:96:
                    51:a4:1c:39:77:dd:6c:41:1a:04:58:d6:53:87:22:
                    ec:ed:ae:3c:83:dd:30:1b:ec:a7:1a:84:89:70:ef:
                    17:d9:9a:a2:df:81:e9:c6:c9:e0:e0:20:b1:3d:46:
                    9d:d4:13:e2:45:37:70:b4:93:a4:3b:ea:a8:fa:a4:
                    f7:ee:08:f5:48:e7:b3:72:8b:fb:d1:ab:c9:02:74:
                    c4:a7:45:26:42:d4:62:94:ee:5b:39:48:0c:0e:af:
                    ae:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7A:5D:FA:65:3A:32:DA:E6:35:F9:92:DA:69:5C:AD:F6:7E:82:C5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.209.144.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21846

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:00:95:2e:6f:d9:bc:4e:60:2f:6c:24:17:7e:d7:a5:52:71:
         1e:80:4b:0d:34:43:1b:8e:d0:22:77:93:9f:ea:c9:47:c5:59:
         1d:69:b9:80:24:c5:6e:26:1c:8a:67:b4:a9:54:f0:21:44:fb:
         05:f2:aa:d4:86:24:89:5d:4f:43:08:b0:09:24:46:22:f2:32:
         ee:98:13:a0:f5:ae:3a:1f:64:39:bd:8d:87:2c:08:10:28:5e:
         1f:88:f1:85:28:dc:42:6f:b7:89:5f:e1:68:42:77:d2:1a:dc:
         6a:50:d5:1f:79:fd:fa:75:6a:25:af:6e:cb:2c:5a:fe:b2:3d:
         4d:48:d0:b2:17:06:d7:f3:79:43:7b:ed:4e:58:b5:5c:3f:31:
         b8:30:63:dc:01:bf:a8:02:f4:9c:93:0d:81:be:0b:bf:d0:e2:
         2c:51:1f:af:f4:52:91:41:79:b0:52:77:af:82:8b:37:21:56:
         a8:05:be:0c:91:af:0b:51:7a:99:52:c6:2b:7b:37:35:82:56:
         22:2f:09:9a:61:56:25:1c:dd:ed:98:4a:36:7b:5c:d6:f3:84:
         40:2c:f3:77:eb:41:b2:e5:04:a8:e5:ed:80:01:e4:4a:b1:ef:
         bd:58:bc:0d:84:e3:42:25:71:c3:b8:c9:53:0a:87:d3:18:03:
         06:e3:b2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----