Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e.cer
File:                     339ec033-73b6-4268-bb2b-7188aedd736e.cer (raw, json)
Hash identifier:          xwj1jegyVyhN01AIq8bOYED/jl0x/9uoxnfwEYa8nyU=
Subject key identifier:   13:76:18:63:11:24:3C:AA:F8:93:71:BA:B5:02:D7:25:E5:D0:A4:C7
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858456550B7067F6139AB1F270CD0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/339ec033-73b6-4268-bb2b-7188aedd736e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 01 Apr 2024 00:45:20 +0000
Certificate not after:    Sun 05 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 40361
                          IP: 199.242.255.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:65:50:b7:06:7f:61:39:ab:1f:27:0c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Apr  1 00:45:20 2024 GMT
            Not After : Jul  5 00:45:20 2026 GMT
        Subject: CN=339ec033-73b6-4268-bb2b-7188aedd736e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:05:7c:ee:c7:13:f3:48:10:aa:36:18:57:d7:
                    6a:10:0a:09:27:be:fc:93:1a:86:08:b9:ba:04:b2:
                    11:17:7a:cf:34:04:01:b6:c1:a0:d6:22:99:87:7f:
                    92:1c:3c:9b:5c:5b:0e:7a:84:f7:99:3a:fe:71:91:
                    70:6b:3e:75:77:ca:1a:77:09:ed:c5:c6:64:1a:f3:
                    5e:da:92:03:42:ee:1f:1b:4c:b4:f9:39:e9:85:fa:
                    76:9f:93:a8:f4:38:38:03:48:d0:be:07:65:c1:19:
                    c5:6e:fa:26:36:5b:e2:89:1c:13:5e:18:d7:70:23:
                    d6:e5:8e:61:3d:ef:cc:d0:55:db:37:4c:be:76:92:
                    19:64:26:71:eb:d8:7e:37:15:c1:c5:bf:e0:5a:5e:
                    a5:07:14:a6:cf:83:4a:60:68:de:3c:75:f1:56:d6:
                    ec:c9:cc:36:f0:71:53:d4:75:cf:5c:1b:e5:ea:4d:
                    e5:43:b3:c0:99:56:c1:c5:91:17:54:25:e3:f4:3d:
                    bf:d9:3e:95:dc:2e:28:24:9e:48:d2:2d:28:ae:9f:
                    90:75:e9:6f:e8:ad:7f:06:0d:d6:86:8c:4d:9c:99:
                    40:ef:ac:16:91:b2:19:46:d8:1b:fb:43:61:8c:c4:
                    4b:8e:aa:f4:d2:a3:3f:76:1f:f8:fb:76:97:c6:75:
                    e8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:76:18:63:11:24:3C:AA:F8:93:71:BA:B5:02:D7:25:E5:D0:A4:C7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/339ec033-73b6-4268-bb2b-7188aedd736e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.242.255.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40361

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:e1:56:a8:4b:b6:15:16:35:d5:59:3f:61:79:60:c3:5c:a3:
         b7:bd:bf:c5:a1:10:48:a5:d9:6e:57:80:05:74:69:c4:86:0f:
         8b:76:71:92:b8:3f:03:0b:1b:e0:e4:3e:53:29:1d:94:70:e3:
         1a:ae:bf:6c:43:bc:04:0a:7e:27:ba:46:a4:98:cc:49:ed:b8:
         93:22:01:a9:04:a3:a6:bc:dc:e2:0a:0b:4e:86:df:d0:d3:d2:
         fe:17:bf:0a:9c:f9:df:40:46:26:ce:ad:a1:ac:81:c2:16:57:
         9c:cb:c4:b7:d9:3f:92:45:1d:3d:63:e6:2b:73:9b:12:56:55:
         10:d2:f3:6c:98:c5:25:95:26:85:86:88:ec:49:0f:e7:55:f2:
         c2:72:6e:c0:d7:fd:d1:3d:6c:80:5b:3a:02:5b:97:7d:c4:8b:
         55:77:e1:fc:f9:c2:63:3a:ba:eb:45:6a:4c:c6:00:47:93:55:
         ca:77:60:aa:18:44:06:df:b7:0e:82:68:5b:5b:cd:4a:46:69:
         74:b8:f2:6c:fd:fb:e1:01:f5:02:8a:b9:1d:99:71:99:f7:66:
         59:f8:50:2f:08:a4:58:86:13:7d:d5:41:06:67:92:7c:45:fb:
         66:5f:a5:c8:0e:4a:23:9a:d1:28:0d:34:e2:22:df:e2:e8:08:
         d9:3d:2e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----