Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7.cer
File:                     51efee9c-4595-4144-8b00-687d5d4d64a7.cer (raw, json)
Hash identifier:          uo4FDCrCrkriBFfGw4hH4fSJw+EKaVyqheEWiDcEwBs=
Subject key identifier:   14:40:E8:BF:37:0F:42:6B:CF:0F:2A:93:A4:F8:4C:60:E4:34:71:9D
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584718D3782FF707DE7159FE8280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7/51efee9c-4595-4144-8b00-687d5d4d64a7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 04 Sep 2024 00:45:25 +0000
Certificate not after:    Tue 08 Dec 2026 01:45:25 +0000
Subordinate resources:    AS: 47087
                          IP: 69.12.28.0/22
                          IP: 2620:115:f000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:18:d3:78:2f:f7:07:de:71:59:fe:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Sep  4 00:45:25 2024 GMT
            Not After : Dec  8 01:45:25 2026 GMT
        Subject: CN=51efee9c-4595-4144-8b00-687d5d4d64a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:19:43:37:ff:0a:4b:8c:dd:51:8f:c9:22:8f:
                    29:ac:30:12:c7:05:22:2e:84:4a:06:a5:5c:28:c5:
                    01:05:b3:50:26:dd:35:e6:30:fa:76:fb:a0:f3:ab:
                    70:ea:3f:b2:9d:38:4f:ad:ab:01:27:1a:d8:fd:51:
                    52:ad:d7:38:76:00:4e:31:1a:96:bd:b4:7b:54:d8:
                    91:8b:51:2f:a0:8f:c6:36:ce:7e:5a:a5:28:70:cc:
                    cf:07:7b:1a:2c:c5:6f:8c:ed:8d:5b:64:b8:9a:9f:
                    99:e9:2b:a8:66:d9:54:fc:bb:75:9e:41:c1:e0:6c:
                    64:02:85:a0:a5:d9:ba:95:cb:42:25:cc:56:51:55:
                    f3:00:ca:5c:7e:40:89:cb:65:d8:32:01:99:ed:c8:
                    c4:01:f6:cf:19:9f:e4:33:ba:c2:2b:63:49:9c:e8:
                    68:17:b7:4e:fb:12:ac:3d:e5:19:51:74:fa:8f:c8:
                    4b:ae:0d:bf:78:48:ff:49:b4:9e:d6:1c:a7:1c:07:
                    c4:2d:be:c1:d7:a9:d6:bc:a0:2b:e9:a5:ca:3f:e7:
                    6c:74:a5:dd:46:64:ae:ee:78:e8:e1:25:1f:ce:71:
                    ab:79:2c:31:53:50:5c:f2:43:42:69:75:84:f5:76:
                    b5:0c:5b:cc:17:e7:d8:1a:79:99:f5:66:0f:80:09:
                    cd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:40:E8:BF:37:0F:42:6B:CF:0F:2A:93:A4:F8:4C:60:E4:34:71:9D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7/51efee9c-4595-4144-8b00-687d5d4d64a7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.12.28.0/22
                IPv6:
                  2620:115:f000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47087

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:6d:64:0c:dc:82:de:a7:ca:e2:47:12:e5:27:2a:8e:2e:70:
         1f:b1:c6:a8:05:8f:df:d2:6e:c7:9d:c7:e0:ee:cb:43:d5:39:
         b4:4e:a2:a0:eb:5b:5d:54:5c:2f:38:1e:54:33:d4:79:fc:41:
         c1:a3:e9:0d:d0:00:d6:ab:74:f8:28:6b:d4:73:40:28:b1:2d:
         c7:61:e2:be:11:16:99:16:66:de:7b:df:ba:0c:e3:c9:d2:f7:
         4c:27:30:cb:03:1f:ea:34:4a:bc:a2:3e:1c:72:01:e7:0c:dc:
         7d:ef:b8:10:d3:37:9f:0a:d5:af:28:4f:c0:94:0b:b2:7a:23:
         24:85:75:44:e3:b8:fc:e8:b3:c0:b6:31:98:72:c3:0c:76:7b:
         87:30:12:48:8e:c0:50:61:d4:15:81:fa:93:81:97:a7:3b:73:
         68:52:d6:78:20:8b:19:ca:f8:72:e1:08:42:4b:2c:63:34:73:
         13:e7:f0:cb:88:60:42:be:22:f8:6d:ac:5c:35:39:f3:10:43:
         ac:8e:50:96:3c:4c:42:b2:f0:c8:2a:af:b5:04:11:84:6e:99:
         ad:ce:a2:bb:f9:45:92:27:62:09:11:90:ab:ac:ca:ab:92:ae:
         36:46:82:aa:73:73:1c:dc:8d:24:05:f3:fd:e4:cb:83:0f:a2:
         98:85:4c:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----