Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bab5692-2f22-42f2-9aef-ca4cbe4685b6.cer
File:                     0bab5692-2f22-42f2-9aef-ca4cbe4685b6.cer (raw, json)
Hash identifier:          XJhcRO66r64otx7lw1pW4sONYBLXq5/SlFzBJfd/fJ0=
Subject key identifier:   C8:56:A0:CB:D0:9A:0B:3E:F3:25:67:F1:B2:B1:13:C6:88:B7:D5:FF
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858447AECFB844501709C0B321680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bab5692-2f22-42f2-9aef-ca4cbe4685b6/0bab5692-2f22-42f2-9aef-ca4cbe4685b6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bab5692-2f22-42f2-9aef-ca4cbe4685b6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 08 Jan 2024 01:45:14 +0000
Certificate not after:    Sun 12 Apr 2026 00:45:14 +0000
Subordinate resources:    AS: 29776
                          IP: 208.79.181.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:7a:ec:fb:84:45:01:70:9c:0b:32:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan  8 01:45:14 2024 GMT
            Not After : Apr 12 00:45:14 2026 GMT
        Subject: CN=0bab5692-2f22-42f2-9aef-ca4cbe4685b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9d:b4:ef:6d:47:41:32:e8:16:a9:72:aa:d3:
                    71:7f:34:2c:2e:5c:44:63:77:99:26:0f:e3:da:c3:
                    02:bb:5c:e2:54:89:09:37:ac:ee:18:44:2a:9d:c8:
                    b5:96:07:c0:56:25:c5:53:7a:e9:41:fa:1b:3c:b9:
                    2a:37:c6:ce:d0:30:1b:be:e4:de:f0:89:8e:e4:39:
                    dc:c1:19:1b:4a:38:80:94:77:95:26:86:29:d5:17:
                    85:ba:05:af:58:39:4b:13:e6:10:b5:88:51:94:92:
                    40:9c:76:43:bf:de:f2:a3:8f:bb:6d:a2:94:25:ab:
                    6d:32:56:05:d2:12:b1:6d:02:42:dc:8f:8e:73:6e:
                    5c:35:58:1d:22:d8:7d:0c:f3:f5:5e:ce:b7:c7:84:
                    b6:55:5d:11:4d:71:78:3d:45:4e:64:34:88:8e:c4:
                    7c:17:5a:9e:50:15:f9:52:03:59:31:9b:45:a0:e1:
                    56:0f:44:7a:00:be:0f:a3:19:73:2c:c2:20:a9:99:
                    d8:a8:00:54:ba:5f:a0:c7:eb:90:4d:9b:32:8d:b1:
                    99:4c:01:e5:8f:58:6a:a5:63:d3:1c:74:55:44:be:
                    21:e5:e7:05:4b:33:4d:80:bc:f1:50:94:52:40:70:
                    d7:cb:53:45:72:4a:84:e4:76:3c:fd:4a:70:db:98:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:56:A0:CB:D0:9A:0B:3E:F3:25:67:F1:B2:B1:13:C6:88:B7:D5:FF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bab5692-2f22-42f2-9aef-ca4cbe4685b6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bab5692-2f22-42f2-9aef-ca4cbe4685b6/0bab5692-2f22-42f2-9aef-ca4cbe4685b6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.181.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29776

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:61:77:8e:b0:29:e5:98:18:16:89:57:32:fd:25:09:07:1a:
         f6:b8:4f:ed:e8:61:67:6c:11:51:3a:4a:e3:34:28:de:53:ef:
         cb:bd:3f:a2:f9:00:89:b2:71:de:ec:5a:7d:1c:5b:fc:78:69:
         8a:70:d0:cb:18:a8:c5:68:ed:ea:69:d2:0f:d9:93:ec:90:aa:
         cd:2e:31:2e:1d:11:5b:3c:c3:72:57:37:52:47:11:fa:84:e7:
         ae:35:04:7d:af:30:22:85:ca:b6:2e:56:93:18:ba:81:df:5e:
         91:f4:4a:d3:47:58:ab:f5:92:9a:c3:23:e0:e8:00:b1:e6:d3:
         47:75:f6:1b:ff:f2:88:58:bf:84:63:58:e0:80:62:e5:c3:15:
         38:88:cc:ad:17:8b:a8:0a:30:88:1b:2f:3c:bb:e3:57:b1:73:
         da:c2:1e:2f:2e:8c:a9:96:c9:a2:31:97:22:37:84:a6:c9:ef:
         0f:4e:09:de:8b:6b:db:a8:d3:fc:7e:d8:d6:40:25:b7:b8:55:
         11:e4:ce:07:13:41:e4:ce:30:27:f2:ef:02:2e:ca:39:8c:05:
         2d:60:6c:47:90:37:b4:bf:55:63:a4:6f:77:9f:ed:62:cf:81:
         f8:39:20:b9:f4:d7:3e:b3:6b:68:bd:5c:df:2b:c9:1b:e6:18:
         a7:2a:76:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----