Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b.cer
File:                     293ffb60-5163-4ccd-8c12-c520cba4608b.cer (raw, json)
Hash identifier:          bLQ8dZaNWrfY9Dhqf9+cBn0qNuPhWkDAGjBQ4YGm2RM=
Subject key identifier:   6D:A3:88:72:CF:F2:A2:88:34:FF:26:E8:6E:73:11:06:0D:DF:B1:39
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285847B25F18847D5835D10368FCCC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/293ffb60-5163-4ccd-8c12-c520cba4608b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 29 Oct 2024 00:45:26 +0000
Certificate not after:    Mon 01 Feb 2027 01:45:26 +0000
Subordinate resources:    AS: 54598
                          IP: 208.76.212.0/22
                          IP: 2602:fd05::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b2:5f:18:84:7d:58:35:d1:03:68:fc:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Oct 29 00:45:26 2024 GMT
            Not After : Feb  1 01:45:26 2027 GMT
        Subject: CN=293ffb60-5163-4ccd-8c12-c520cba4608b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:47:08:6d:47:21:44:f3:9b:ee:c6:90:a9:31:
                    54:f2:45:6e:87:99:8c:e4:4b:28:5c:1f:dc:53:76:
                    e7:46:28:02:1a:c4:81:1e:a3:3b:1e:fe:7f:78:6b:
                    5f:58:af:c3:6b:9a:ff:06:12:9d:49:63:ad:90:61:
                    59:2a:ba:59:15:6e:2e:75:60:75:fc:dd:25:6e:84:
                    9d:d1:f6:9d:35:1b:d3:9f:50:ad:d4:6f:5a:d4:7a:
                    c2:7e:29:a6:18:3f:16:62:b9:b3:3c:11:3b:e5:a8:
                    06:78:ae:9c:df:fd:c2:a5:df:76:72:3b:f7:28:86:
                    d9:fb:5c:83:b9:06:c2:1e:22:9e:71:f7:a9:db:8a:
                    d9:30:3d:77:00:1a:8e:be:59:8b:44:c9:e7:7e:86:
                    c9:f8:e1:ca:02:fc:8f:eb:ff:4d:7f:4d:c9:fa:d6:
                    4e:7b:28:7a:2a:2b:f7:75:37:e6:a4:e2:50:e2:73:
                    57:e3:62:ae:4c:c7:04:f4:0f:47:04:91:53:3c:29:
                    df:8f:81:71:28:91:ac:71:d2:91:f2:ec:8f:5c:7f:
                    73:0f:45:60:53:88:37:48:bc:4b:9a:a4:f2:d4:d2:
                    f7:ea:df:f5:cc:f1:e4:c1:a8:0f:d1:87:8a:65:65:
                    3b:e8:e8:5a:f7:da:19:52:c3:cc:db:14:e3:78:17:
                    00:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A3:88:72:CF:F2:A2:88:34:FF:26:E8:6E:73:11:06:0D:DF:B1:39
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/293ffb60-5163-4ccd-8c12-c520cba4608b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.212.0/22
                IPv6:
                  2602:fd05::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54598

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:47:0c:e6:52:61:49:2c:3a:5d:25:0a:52:de:db:64:da:36:
         e1:c2:2f:4f:3e:f8:2b:20:70:9f:ae:df:53:f0:f6:02:a7:64:
         10:13:a1:86:a4:6b:ac:2f:1e:8a:07:67:73:6d:fb:5f:7f:e1:
         fd:f7:2d:b5:11:dc:e9:8a:9d:c7:b5:52:a7:bc:64:c2:3c:24:
         5a:02:46:ab:c5:bb:a7:fe:85:80:78:dc:bc:6b:5f:df:15:a6:
         33:71:90:3f:a0:86:2d:c9:2b:a6:6f:1f:4b:8d:f6:57:61:11:
         29:5e:09:bd:33:b9:a4:e7:ef:13:f8:ea:7d:43:35:3f:15:be:
         55:84:f3:cc:42:39:98:bf:6d:7d:df:e5:db:c9:ce:7a:b7:7a:
         0b:29:9c:75:52:86:ae:71:c8:38:ef:3e:2c:05:a5:1b:cd:c0:
         d7:d9:9e:68:fd:82:37:00:64:fd:32:7b:86:b4:03:69:89:26:
         c1:9c:41:bf:b0:5d:39:c4:48:dd:98:b2:c6:86:6c:45:f4:2a:
         89:8c:1f:5c:85:76:07:11:e5:af:b3:c3:1c:27:e1:12:ff:6e:
         f9:4c:f9:45:cc:a7:5a:fa:0d:cf:e0:4f:6b:1e:bb:00:c1:a8:
         36:7f:81:a5:c3:3d:30:8b:bc:e1:28:38:7c:20:f4:79:36:3a:
         74:f0:a5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----