Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067.cer
File:                     20b01b41-6f04-43fa-8e06-b61037281067.cer (raw, json)
Hash identifier:          wpScGqS3DeC1gZZHGmab0vaiJ/HQVZBbsa+yRy6dyCI=
Subject key identifier:   0B:8E:F8:08:14:38:52:A8:6C:23:E8:4E:12:68:C7:82:EB:83:EE:10
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285847457E6AC78AA30F3817D40980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067/20b01b41-6f04-43fa-8e06-b61037281067.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 20 Sep 2024 00:45:26 +0000
Certificate not after:    Thu 24 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 36743
                          AS: 400818
                          IP: 23.159.200.0/24
                          IP: 2602:fabb::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:7e:6a:c7:8a:a3:0f:38:17:d4:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Sep 20 00:45:26 2024 GMT
            Not After : Dec 24 01:45:26 2026 GMT
        Subject: CN=20b01b41-6f04-43fa-8e06-b61037281067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:38:d1:38:4f:24:e9:fd:b1:95:44:f8:78:c9:
                    52:fe:c0:2b:f0:26:57:e3:9f:54:12:cf:96:a1:fb:
                    2c:94:43:50:42:90:e2:e9:69:f8:5f:42:6d:24:4c:
                    d1:43:57:c8:93:fe:2e:c0:f6:33:a1:3d:51:95:18:
                    9a:04:61:03:5f:e4:7a:d3:e8:43:54:26:d5:90:1d:
                    4e:ad:70:93:cf:5e:2b:21:a2:22:5f:b3:f9:be:6b:
                    da:66:8c:9a:da:1b:24:cd:9e:a0:39:e9:e3:6c:72:
                    05:62:e0:3a:29:7c:a1:f1:f1:be:5a:b9:82:f6:d9:
                    da:c8:fe:9e:c5:e3:e3:ff:a4:a9:1f:04:5b:73:ab:
                    eb:7e:f9:0b:76:62:c0:d3:cd:a4:65:f0:17:7e:41:
                    18:73:8f:9b:08:63:fc:b8:d9:8e:3f:96:23:dd:af:
                    96:5f:87:8d:c1:76:49:d0:c1:c1:03:77:b3:fe:91:
                    f5:86:25:94:05:c8:30:6b:29:4f:cc:89:3c:41:c5:
                    06:48:b3:1f:f6:32:09:93:88:09:cd:a5:25:cf:24:
                    f1:05:34:09:a9:97:b1:27:1d:cc:77:e7:4a:6d:d0:
                    16:c4:69:13:be:c8:48:b8:7d:65:20:85:af:2e:5a:
                    92:20:4c:54:cc:e4:c5:00:4a:42:27:fe:31:3b:ab:
                    1f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8E:F8:08:14:38:52:A8:6C:23:E8:4E:12:68:C7:82:EB:83:EE:10
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067/20b01b41-6f04-43fa-8e06-b61037281067.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.200.0/24
                IPv6:
                  2602:fabb::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36743
                  400818

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:1b:e4:55:d6:e2:90:20:36:0a:43:bb:b6:41:47:ae:ed:0d:
         59:67:3d:15:47:db:81:e8:bb:d8:d5:1f:2c:b7:9c:e7:b7:71:
         dc:1a:eb:80:fc:59:b8:a6:d8:0c:f8:ae:3c:06:ef:56:d2:98:
         ba:44:5e:c7:b1:c3:00:5b:d9:ed:03:57:af:e0:53:29:1d:51:
         ab:43:d0:10:b1:00:93:69:43:e2:d5:22:27:4d:5e:ee:5d:79:
         31:87:5c:c5:be:89:a4:e5:34:24:f1:fb:c4:85:59:7a:e2:23:
         3b:bb:ed:17:c1:23:20:8c:a6:ce:54:cc:11:d3:bd:59:a7:54:
         5c:b1:06:9c:ee:37:df:21:95:3e:1a:16:d7:d6:cc:89:aa:da:
         41:dc:87:7b:4d:ef:fb:c1:72:79:3e:7e:dc:35:37:a9:af:6a:
         10:f7:72:0e:03:c0:2b:8d:8f:a6:5c:75:1d:ac:ea:5b:04:13:
         ef:4b:38:f1:0d:fd:a5:0d:23:ca:76:1f:ff:7e:4e:25:d3:42:
         32:4c:65:37:69:af:e5:49:04:31:d7:c7:16:9d:cc:74:61:f2:
         47:20:30:66:fe:c8:00:7e:a1:d6:10:0c:30:6d:6c:47:18:f1:
         17:9f:b5:3c:5d:6d:a1:ec:97:f5:39:71:5c:5d:ae:9b:3d:a8:
         51:61:5a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----