Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer
File:                     5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer (raw, json)
Hash identifier:          cNC3Sklh0bRLEeMDNOXrXm0+VeRr1iuJX9juhoN+rkc=
Subject key identifier:   A0:92:D8:21:7C:49:33:E4:FA:A7:F1:31:06:BB:75:92:C6:C8:0F:69
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285847ACC9BB0D13EFC0E35E326480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 27 Oct 2024 00:45:26 +0000
Certificate not after:    Sat 30 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 399213
                          IP: 104.167.227.0/24
                          IP: 2602:f8d9::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ac:c9:bb:0d:13:ef:c0:e3:5e:32:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Oct 27 00:45:26 2024 GMT
            Not After : Jan 30 01:45:26 2027 GMT
        Subject: CN=5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6a:95:5f:3b:76:23:b3:58:cc:f0:d1:ef:e1:
                    de:06:0d:38:04:bb:39:4d:49:7f:3c:3e:30:5b:70:
                    f7:98:c4:9a:42:bd:06:84:52:aa:57:ff:55:ba:ed:
                    96:04:dc:45:a2:a6:a1:ba:df:ab:6f:dc:e2:67:7a:
                    ec:bc:11:36:1b:65:c4:8d:46:94:fb:05:31:ff:7e:
                    2b:80:b2:27:d6:7f:84:89:76:a2:f4:89:9b:22:c8:
                    b7:7b:9d:37:d7:9c:24:34:c7:35:50:d6:48:46:f2:
                    d0:46:96:16:29:fa:35:59:3b:b5:34:0f:8d:60:52:
                    5d:01:aa:56:9d:93:89:13:1e:76:20:34:1b:d5:b6:
                    43:7c:7e:7d:2b:8d:75:4b:7b:9e:46:a7:21:66:b3:
                    93:97:8e:a0:a0:05:fc:17:23:a0:fe:33:57:26:62:
                    b5:a0:4d:86:d0:8d:49:78:93:ad:98:cb:3f:fb:1e:
                    00:6d:a3:b2:d1:5c:4d:04:71:ed:b3:b1:5e:b3:f0:
                    fd:6e:e5:c8:ae:14:11:f4:18:5a:dd:2b:1a:c4:2d:
                    a3:5f:96:2a:4a:3c:c8:6d:70:eb:ec:0c:a5:07:a9:
                    7a:16:16:57:b8:75:66:22:7c:e2:8e:f1:26:e1:1c:
                    45:9a:c4:8f:33:14:ab:9d:fe:9c:46:a2:43:1d:f1:
                    5e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:92:D8:21:7C:49:33:E4:FA:A7:F1:31:06:BB:75:92:C6:C8:0F:69
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.227.0/24
                IPv6:
                  2602:f8d9::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399213

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:d4:27:62:42:72:62:4e:73:d6:3c:4a:cd:1d:7c:eb:24:e5:
         a6:ee:fd:97:ee:a7:82:af:d4:01:3a:69:0a:41:9c:06:0d:83:
         ff:01:41:0b:9b:b7:a6:36:a0:65:e9:32:15:26:df:ea:f5:93:
         9d:ea:1a:9e:e2:f4:2c:1e:9c:95:ba:c4:de:d7:f9:29:ea:cf:
         e4:c3:ca:46:ee:8d:ab:e1:1a:17:9b:86:aa:cc:77:e3:c8:ab:
         60:0e:16:0d:ca:70:4b:e9:1b:c6:58:4e:2c:57:36:8c:74:29:
         da:47:70:44:c4:1d:53:33:01:80:be:47:cf:62:c4:76:5a:d8:
         16:22:03:30:c0:eb:80:7b:a5:77:15:2b:fe:e2:b3:93:45:a4:
         74:18:aa:89:58:a5:77:83:c2:e5:83:82:0a:a8:45:0e:5a:a8:
         cb:35:f3:15:88:ac:65:07:f6:ad:40:e1:c5:33:f9:cd:ed:4a:
         f3:ce:a3:dc:16:bc:58:4b:9e:00:4e:6f:4f:c1:0e:f5:81:6a:
         d5:7a:39:28:b3:99:a1:82:ec:ff:85:e1:54:03:c9:a8:8d:e9:
         3f:fd:c3:d6:56:7f:09:e6:d8:e6:5b:a3:02:ec:54:3c:ec:5d:
         d4:1e:22:44:c5:8a:a4:b5:f7:d1:dc:51:15:68:b9:5f:49:75:
         3e:38:32:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----