Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07a2ea2d-5c35-4668-851f-c5ac6ed1e66a.cer
File:                     07a2ea2d-5c35-4668-851f-c5ac6ed1e66a.cer (raw, json)
Hash identifier:          SJHpRdLx/paMXUNEKqJHI8PmKk+UrDdWY1ns/nWf46A=
Subject key identifier:   2C:DD:74:80:D3:99:BC:F5:CF:A6:B7:70:BD:1A:CF:E3:E3:7C:50:92
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584402E192CE964769B7FDC14780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07a2ea2d-5c35-4668-851f-c5ac6ed1e66a/07a2ea2d-5c35-4668-851f-c5ac6ed1e66a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07a2ea2d-5c35-4668-851f-c5ac6ed1e66a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 26 Nov 2023 01:45:15 +0000
Certificate not after:    Sat 28 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 399498

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:02:e1:92:ce:96:47:69:b7:fd:c1:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Nov 26 01:45:15 2023 GMT
            Not After : Feb 28 01:45:15 2026 GMT
        Subject: CN=07a2ea2d-5c35-4668-851f-c5ac6ed1e66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1a:74:c9:0d:1d:2d:c0:fe:f7:47:7d:5b:ab:
                    fe:fb:79:4d:bf:c3:3b:c9:0b:ba:3b:25:34:fc:41:
                    14:17:ce:ff:89:f9:b0:40:8d:98:73:95:18:44:14:
                    df:70:3e:2f:2b:c0:57:a2:ca:85:15:21:0f:9d:0c:
                    75:51:b1:0a:18:5e:7d:bd:ab:31:b4:96:32:7c:32:
                    e3:5f:81:01:3c:c7:10:1f:6b:e8:ff:eb:f5:4e:38:
                    1e:61:a7:cb:07:1b:aa:f2:b4:86:d0:20:7d:3a:93:
                    ff:2d:0d:ce:f0:53:c1:1f:98:4a:69:8a:f0:3e:73:
                    1b:c4:f5:f8:d1:6a:49:22:86:e4:58:92:37:cf:24:
                    a1:30:cb:18:5e:64:e1:9f:96:4f:f2:38:e8:a7:64:
                    07:ac:95:b0:31:a0:63:0d:39:bb:9e:6a:f4:f7:2c:
                    0a:23:08:62:26:8e:c2:c2:b9:3e:28:f5:7e:ec:db:
                    be:1d:4d:32:ba:1d:d5:e9:8f:03:c5:30:de:09:80:
                    30:c7:3d:11:1d:a7:f2:fe:d8:79:49:39:ac:48:f4:
                    b5:57:13:80:a8:64:76:31:62:02:01:cf:c8:80:d3:
                    49:bd:c6:d2:a6:c1:65:2f:6b:b3:8a:61:2d:c1:84:
                    37:75:74:78:f9:bd:7c:8a:8d:7d:7b:b2:b3:36:f0:
                    97:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DD:74:80:D3:99:BC:F5:CF:A6:B7:70:BD:1A:CF:E3:E3:7C:50:92
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07a2ea2d-5c35-4668-851f-c5ac6ed1e66a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07a2ea2d-5c35-4668-851f-c5ac6ed1e66a/07a2ea2d-5c35-4668-851f-c5ac6ed1e66a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399498

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:67:8e:19:83:d0:48:00:54:c5:fa:89:10:8e:48:94:52:dd:
         0c:c7:48:50:21:8c:e7:ea:2d:6d:06:d4:f4:32:f1:de:b0:60:
         5e:5d:fa:22:d6:6e:35:99:40:e8:a4:bf:b8:8b:bf:0e:39:f5:
         e7:6e:03:9b:19:4a:56:28:26:a3:fc:be:82:3c:7d:e5:93:9f:
         cf:dc:6a:bf:6f:53:81:5c:48:87:a8:1f:59:99:42:b4:65:75:
         8e:60:69:82:84:43:cf:49:19:79:4f:b8:03:25:e8:89:27:c7:
         92:09:e7:b6:60:6b:33:46:b7:da:3f:16:ac:c1:fb:9a:0b:c3:
         e5:71:36:de:a9:96:58:1f:76:cb:bd:cb:9b:dc:ac:56:94:74:
         aa:35:25:c0:d7:05:5c:03:20:8d:cc:a4:62:72:01:b7:d2:d3:
         01:b5:96:74:6e:ae:9c:c9:89:52:c2:8e:97:dc:13:6f:c9:36:
         69:42:c7:b4:f9:d3:cb:67:b6:f5:52:02:f6:f2:c5:b9:75:6b:
         27:2d:fc:99:bb:89:8c:70:6b:cc:6f:62:c4:f7:d9:db:5d:03:
         74:db:9e:e1:3f:c2:24:27:e5:90:0b:c1:76:b1:51:d5:2b:de:
         6c:cc:8c:a1:9a:f9:80:50:31:f7:e0:ff:1c:35:5a:66:01:d8:
         68:ce:65:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----