Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
File:                     26dda032-79f9-423e-9994-33fdb1cd44db.cer (raw, json)
Hash identifier:          Y7OwGZUhHTWAxlfyMtkhQsfn9h2xkxYo4uaXf2HDf18=
Subject key identifier:   94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858445C37768FCB3094F1BB891480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 28 Dec 2023 01:45:15 +0000
Certificate not after:    Wed 01 Apr 2026 00:45:15 +0000
Subordinate resources:    AS: 53779
                          IP: 162.253.0.0/21
                          IP: 2620:104:6000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:5c:37:76:8f:cb:30:94:f1:bb:89:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Dec 28 01:45:15 2023 GMT
            Not After : Apr  1 00:45:15 2026 GMT
        Subject: CN=26dda032-79f9-423e-9994-33fdb1cd44db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:26:c6:a3:de:03:14:34:44:9d:f1:84:ae:96:
                    8d:50:85:3b:45:2b:eb:0b:ac:e8:52:af:af:00:e3:
                    2a:8f:c1:ce:9c:b6:be:2f:cc:08:93:b3:a4:a4:87:
                    5b:8f:17:8b:c4:66:d0:75:8a:e1:41:9d:de:4b:f1:
                    96:e4:e1:a5:89:fe:d4:73:92:cb:f3:7e:5d:63:10:
                    d4:b5:95:d6:fc:d1:89:66:7f:e2:a4:cf:56:ec:4f:
                    94:59:b3:63:24:ae:91:20:a6:46:46:f4:af:39:5b:
                    61:e5:90:97:d4:2e:6a:1f:8f:bc:dd:e6:9c:0d:00:
                    ab:ea:7d:6d:0e:88:7b:77:42:ed:9f:af:32:2c:ba:
                    a2:72:04:a6:72:38:eb:c5:c6:8e:34:db:0a:f3:d8:
                    ae:21:0f:6a:c1:a7:ce:b7:42:27:bd:49:28:06:6c:
                    52:67:05:d2:42:18:ef:8e:d9:9c:76:f3:cd:d8:d5:
                    18:a8:47:4f:e7:05:cb:f2:c1:3a:e3:66:27:a3:47:
                    d8:a8:2d:e1:d9:d7:c6:59:59:a4:bb:4c:4b:0e:8c:
                    b6:1e:d1:9a:09:a0:17:c0:8f:47:36:eb:30:83:c5:
                    cb:13:6f:08:ce:e1:e1:14:ee:25:28:46:bd:98:bb:
                    dd:00:db:56:e5:5c:bd:dc:0b:66:29:29:f5:16:6a:
                    4d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.0.0/21
                IPv6:
                  2620:104:6000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53779

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:c1:0a:f7:c8:65:c1:a1:93:2c:78:41:84:c2:7f:8c:eb:91:
         ec:e7:c6:27:81:41:e0:87:44:cf:f7:7c:6a:d6:ee:f6:ef:a8:
         12:b3:64:fa:02:01:a5:35:e2:55:02:d8:4b:88:40:93:f2:22:
         ce:f4:84:1a:04:dd:c1:3e:65:94:2c:a0:d6:b1:bb:6e:18:46:
         7a:55:14:d4:57:5c:69:47:f0:cb:df:76:19:e9:5d:7b:55:c9:
         5f:4a:c7:90:c4:4d:ac:90:4e:79:77:98:95:32:1e:9d:83:6c:
         e4:44:58:5a:c9:4e:fa:fa:05:12:18:4a:5c:75:c5:10:2f:8b:
         64:21:1a:a8:7e:ab:4c:fb:d0:a7:8a:ac:b6:bf:62:d2:f4:2a:
         82:49:12:d5:de:0a:e8:88:2c:5f:0b:e8:7c:ee:fd:27:c2:8a:
         b4:1d:88:ce:68:56:43:b8:4a:fc:5f:c1:fa:95:19:53:3f:20:
         f3:42:22:b5:9a:29:77:77:f7:10:a7:88:5f:c3:78:d3:a4:ae:
         16:63:c6:52:2b:10:52:00:83:64:c1:60:59:1e:b4:87:62:eb:
         bd:06:20:cd:ec:73:82:9b:27:4e:a6:2a:bb:59:fe:68:4c:6a:
         a2:05:d3:7d:9e:57:e9:6b:04:43:f3:d2:81:91:28:d9:2a:ea:
         23:c3:53:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----