Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
File:                     5fab6378-e15d-4471-b01f-be15fc5bfa04.cer (raw, json)
Hash identifier:          KnOygMqegyFj8c/LAMusYRIQ+zCA2rScy8XbPHr2HBc=
Subject key identifier:   61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285845D231626BEEBDFBD5B5E80780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 10 May 2024 00:45:20 +0000
Certificate not after:    Thu 13 Aug 2026 00:45:20 +0000
Subordinate resources:    AS: 6466
                          IP: 207.170.128.0/18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d2:31:62:6b:ee:bd:fb:d5:b5:e8:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 10 00:45:20 2024 GMT
            Not After : Aug 13 00:45:20 2026 GMT
        Subject: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:cc:62:53:55:91:cb:47:f7:c2:b0:a7:15:
                    1f:36:bc:c2:37:23:d0:52:51:5b:a2:29:c9:02:80:
                    6b:bd:c6:0d:e1:e9:11:8b:0b:85:e0:fb:3d:5a:e0:
                    3f:0f:c1:3b:80:1f:6f:7c:13:b7:48:18:09:02:7b:
                    56:e5:55:1b:2c:3f:95:65:b0:fb:61:66:d7:34:07:
                    50:62:f5:18:c9:f1:4a:3d:3f:4c:c8:61:2b:70:78:
                    82:5c:7d:da:55:e4:76:1e:89:45:4d:76:69:c7:3b:
                    2b:96:5c:3b:da:1c:cd:30:f2:44:e9:f0:db:95:0a:
                    cb:0e:5b:0e:8c:81:43:35:fa:26:28:52:6f:f8:3f:
                    29:66:bb:6a:fb:1e:e8:a8:30:88:f7:ba:e0:0b:cf:
                    67:a8:a0:97:a5:40:7b:8d:32:00:a1:2c:bc:cf:17:
                    4f:20:9e:10:99:72:93:02:89:21:b9:e6:d6:5f:61:
                    2d:53:c6:ef:da:30:5b:03:06:7e:54:7c:ab:52:fa:
                    3e:09:0b:07:4f:64:28:1a:0b:a8:69:e2:45:46:18:
                    c9:e4:72:d8:31:f9:2a:1d:c6:5e:49:22:15:e4:19:
                    f4:4b:26:cd:75:be:3c:c9:14:ac:ef:9d:e5:13:5d:
                    1e:55:d3:a2:35:4f:05:4f:2c:da:55:50:7b:02:fa:
                    66:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.128.0/18

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6466

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:30:d6:4d:06:c7:92:2d:73:2c:73:4d:7b:46:8b:c1:88:88:
         a0:c4:0c:5a:48:59:55:a2:46:c3:f4:cf:8e:32:7c:a2:1e:68:
         c9:f7:57:cd:b3:2a:25:ca:bb:1a:b1:63:44:04:70:ac:94:ac:
         2a:eb:ac:76:22:b3:75:fe:01:55:f3:f2:6f:f8:99:94:99:3d:
         b8:05:11:56:e8:40:ac:8b:18:00:1e:51:c6:7c:a1:02:1c:be:
         ac:c5:b9:55:45:3d:f6:84:f7:1f:2a:18:dc:b5:31:03:cc:e6:
         af:48:47:52:02:e5:02:c3:8c:0f:6b:6f:78:98:a8:6d:ee:53:
         5d:fe:74:ac:91:cc:6f:cc:fe:6b:75:7b:93:7f:1e:73:56:e9:
         81:24:17:4f:f1:fb:ee:dd:27:ba:6d:dc:cd:bf:27:26:9f:72:
         85:82:db:92:87:e2:b5:6e:19:9b:9b:82:87:35:91:ac:98:29:
         6a:2a:65:98:16:a3:8a:51:f0:24:3e:e4:d8:90:9e:77:27:82:
         68:92:71:8f:73:fb:f9:f3:d7:bf:f4:a5:e2:8d:a2:eb:e8:88:
         85:5c:09:c7:18:c0:d8:6f:80:28:14:e3:97:ab:c6:d4:97:6b:
         a8:e2:17:16:13:78:2d:86:4d:ca:72:fe:fe:55:29:19:11:9f:
         92:8b:79:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----