Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer
File:                     2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer (raw, json)
Hash identifier:          fWWm+uD9sicFEesq7UWwR6huKKpon7M6BJutEzYc2sc=
Subject key identifier:   9C:27:42:85:58:D4:D6:AA:7D:F7:C5:8B:92:6C:36:9D:A4:85:7F:94
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285846A65D6051C009A62F51D12380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 25 Jul 2024 00:45:20 +0000
Certificate not after:    Wed 28 Oct 2026 00:45:20 +0000
Subordinate resources:    AS: 33194
                          IP: 2620:10:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a6:5d:60:51:c0:09:a6:2f:51:d1:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jul 25 00:45:20 2024 GMT
            Not After : Oct 28 00:45:20 2026 GMT
        Subject: CN=2fb495fa-b5b2-4d47-aab0-bb476ca61963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7c:91:90:bb:86:db:95:43:78:ad:c8:36:e9:
                    69:a1:e2:e0:a0:dc:df:b7:2f:bc:e6:33:f1:14:0f:
                    b6:0e:46:0e:79:31:90:e2:b4:94:4d:e6:df:07:87:
                    66:05:ad:4d:32:24:24:f9:8c:ad:c1:75:d8:d5:de:
                    c2:cd:37:25:4b:7c:c1:bc:8f:e9:88:5a:15:eb:da:
                    df:01:0d:e6:56:5f:7e:9f:95:fa:e1:fe:09:9b:cd:
                    af:67:8a:fb:1c:45:d8:30:97:a5:af:f9:1a:46:1f:
                    93:61:fa:fd:16:d5:e8:3a:f1:af:f4:42:a3:04:86:
                    f3:17:40:fa:f8:05:18:f3:47:ad:55:f3:6c:b5:83:
                    63:a8:ee:c0:78:e7:7d:af:54:d5:5d:9e:2b:74:60:
                    b2:bc:3e:c4:f4:0c:f4:33:f0:fe:ea:3b:53:88:0b:
                    9e:c1:1d:7e:10:d0:4d:7e:96:e0:02:8e:3e:12:df:
                    66:d6:b3:f5:0d:e9:82:5f:4d:bf:b1:9b:2d:ff:28:
                    23:d7:16:b4:1e:3a:e4:ff:dc:33:8a:fa:4d:2c:c6:
                    b3:3b:4c:bc:7d:6c:b5:87:47:83:f3:3e:a2:af:1c:
                    eb:00:7e:d3:2e:90:7c:91:cf:9e:e5:a4:d4:94:38:
                    36:79:8e:53:4e:55:8c:c2:48:ba:7c:a4:ae:04:84:
                    b6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:27:42:85:58:D4:D6:AA:7D:F7:C5:8B:92:6C:36:9D:A4:85:7F:94
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33194

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:72:db:e6:6e:71:95:84:44:73:19:a0:c4:be:69:a4:e6:50:
         d9:83:be:cc:87:76:6a:51:91:31:92:c2:5d:17:f2:ae:a6:76:
         08:f5:2a:1c:4d:7e:cd:07:b3:a0:72:67:37:38:55:54:7e:89:
         ae:d2:34:cf:86:46:de:2a:a9:34:d1:77:23:1e:16:04:10:b8:
         3f:53:cf:b4:82:3f:00:0e:6b:30:57:b7:86:25:c2:1f:6f:96:
         57:85:ec:5a:e4:f8:17:cf:6d:e9:2d:86:aa:3d:77:ae:f8:02:
         23:6a:28:8d:b6:d1:3f:35:d3:37:54:90:cb:3a:28:7d:8a:6c:
         7a:49:df:96:8f:37:90:7e:41:f8:58:dd:51:f8:ef:6d:f4:36:
         76:54:cd:0c:50:97:d6:b7:68:92:d1:07:ba:b9:6e:eb:89:ce:
         fa:f2:05:59:74:45:e2:df:7c:85:68:61:92:e1:84:ac:a7:4a:
         a1:02:07:c5:0d:47:da:40:cd:ac:e8:9e:d6:ca:fb:f6:6d:a3:
         dc:ac:f9:1b:67:79:e2:38:7c:8c:ba:08:27:c0:94:08:17:e5:
         07:5e:81:c9:c5:87:5b:34:47:5a:37:4b:e0:d8:4d:30:c3:31:
         15:dc:e7:97:b0:51:80:4f:8a:b9:03:2d:16:1f:ce:02:cf:2c:
         07:f8:3b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----